Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/eqqdgfgpByqQWoLvFYHdBLE2cAY.roa
File: eqqdgfgpByqQWoLvFYHdBLE2cAY.roa (raw, json)
Hash identifier: laVgSRgTc1a888MicJ8BwEVcde8ppojtynQWqN71IRI=
Subject key identifier: 7A:AA:9D:81:F8:29:07:2A:90:5A:82:EF:15:81:DD:04:B1:36:70:06
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 0185706724E2F30D18F91DAC4257E40B0E98
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/eqqdgfgpByqQWoLvFYHdBLE2cAY.roa
Signing time: Mon 02 Jan 2023 02:54:45 +0000
ROA not before: Mon 02 Jan 2023 02:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136744
IP address blocks: 45.151.96.0/24 maxlen: 24
94.137.73.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:24:e2:f3:0d:18:f9:1d:ac:42:57:e4:0b:0e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jan 2 02:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7aaa9d81f829072a905a82ef1581dd04b1367006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f2:2b:17:6e:f8:01:e9:00:bb:0b:7f:47:19:
36:68:80:b9:7e:c3:1d:6d:3e:3c:bf:e4:1b:6c:47:
c3:24:11:ea:d2:7d:2d:4f:73:c7:07:c9:f3:01:1b:
33:42:df:d3:ee:95:75:20:fc:ea:f7:dc:96:ca:36:
b9:23:0d:22:ee:4b:1d:a2:2f:cc:47:45:70:89:e2:
a0:bf:1f:cb:25:48:76:fb:36:a3:0a:a0:04:22:30:
a6:84:67:0e:7f:5e:a1:40:fe:fe:70:1e:78:f7:7f:
79:5f:5b:da:1d:f5:3f:da:b4:b5:0c:13:89:8e:15:
e9:b4:27:d7:9f:c0:33:51:08:25:bb:a8:75:22:e3:
63:4a:50:94:aa:b3:1e:11:25:1d:3d:1f:1e:fb:59:
99:6a:30:27:43:6f:f8:a0:67:e9:fd:d1:82:d4:cf:
a2:9b:d1:ba:7f:64:bf:75:65:97:42:ec:22:8d:0b:
84:24:f0:5f:e1:61:ad:57:dd:6c:49:5b:06:a8:2a:
f7:b0:fa:64:a4:f5:d5:c8:aa:45:3b:50:ea:ad:6c:
6b:b7:36:d2:67:47:94:17:3d:b7:0f:8b:37:a6:36:
9c:ba:7c:6c:c3:75:64:d7:df:85:92:c8:a7:28:09:
07:cb:59:d2:0a:72:25:72:74:14:97:95:f9:e9:15:
8f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AA:9D:81:F8:29:07:2A:90:5A:82:EF:15:81:DD:04:B1:36:70:06
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/eqqdgfgpByqQWoLvFYHdBLE2cAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.96.0/24
94.137.73.0/24
Signature Algorithm: sha256WithRSAEncryption
53:10:4a:98:48:cd:eb:07:6a:c7:6c:dc:8d:8c:ab:6f:94:f6:
27:db:11:2c:4d:34:12:b4:83:53:68:26:e9:b8:4c:0b:07:e4:
b4:e7:d1:3b:c5:3b:fe:ce:ee:d9:ad:b0:31:f5:ff:47:ba:d0:
76:5a:dd:df:9b:52:f9:30:32:45:91:b2:2f:56:20:dd:1b:99:
48:42:15:d3:58:c5:60:c2:bc:8f:b3:ed:92:35:11:3a:bb:ca:
0c:c6:13:9e:6e:e9:90:d3:3a:34:39:d6:84:5c:6b:45:cb:0d:
65:7d:64:2b:1c:74:f4:d2:78:50:ec:18:8c:04:df:ef:0a:83:
0f:0c:fc:4c:71:06:45:74:da:81:26:2a:27:11:81:4b:a6:0d:
9e:22:aa:d2:2d:73:4a:10:b1:55:fe:71:80:dc:56:d1:5e:e5:
c4:df:fa:4e:69:91:08:07:24:42:da:5c:d0:94:35:e5:67:92:
a8:a1:65:b4:44:6f:b0:4d:cd:f2:f5:8a:1b:5f:2f:1c:5b:76:
ab:4a:83:64:a8:37:c6:34:fa:ce:d5:98:bd:19:ea:d7:14:37:
c9:46:b6:8c:12:69:60:15:2f:87:ae:1e:f9:ab:64:b2:44:56:
01:84:e6:4f:f1:9c:e4:24:70:c7:7e:de:d1:83:ea:71:8f:b9:
0f:70:ee:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:33 2024 by rpki-client on console-fra.rpki-client.org