Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/euScX8G4TUZCAWgQwnDR00Hivb4.roa
File: euScX8G4TUZCAWgQwnDR00Hivb4.roa (raw, json)
Hash identifier: 2zhh3jafeoegaDNADjcJmC6PxmRAACNc4CHGyea+FwY=
Subject key identifier: 7A:E4:9C:5F:C1:B8:4D:46:42:01:68:10:C2:70:D1:D3:41:E2:BD:BE
Certificate issuer: /CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Certificate serial: 018CC7943E144538E67CEF23B70511F56ACF
Authority key identifier: D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/euScX8G4TUZCAWgQwnDR00Hivb4.roa
Signing time: Tue 02 Jan 2024 00:30:30 +0000
ROA not before: Tue 02 Jan 2024 00:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57922
IP address blocks: 5.250.253.0/24 maxlen: 24
2a0f:4d00:1::/48 maxlen: 48
2a0f:4d00::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 10 Jan 2024 14:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:3e:14:45:38:e6:7c:ef:23:b7:05:11:f5:6a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Validity
Not Before: Jan 2 00:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ae49c5fc1b84d4642016810c270d1d341e2bdbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:12:a6:14:16:6a:44:f9:76:9d:7b:78:cb:57:
33:28:e2:85:56:f8:bc:13:32:83:92:cd:b0:f7:84:
6c:e6:96:ed:19:4a:7f:dd:b6:a4:99:7a:56:57:39:
9d:90:25:23:20:f0:42:61:b5:05:38:90:d7:7b:ee:
44:00:2f:5d:23:c1:d5:46:85:4c:e1:84:66:69:d7:
80:29:4a:79:b4:9a:68:32:79:3f:a2:f0:af:2b:3f:
e0:e1:26:60:29:4d:72:18:16:1e:09:66:b2:51:ad:
4b:54:e6:b9:68:3d:af:23:8c:bf:ed:24:dc:e9:e8:
7b:87:76:94:cb:f7:9f:9e:4f:58:a7:d5:99:a3:a7:
57:b7:b8:36:35:92:c5:f0:ba:1d:0e:0a:e3:35:0c:
13:4c:19:a1:be:48:6b:57:0a:d2:0f:44:22:54:bc:
36:c9:6e:bc:f4:ad:38:ce:6c:b5:02:b0:6f:80:75:
73:4a:9c:2b:6d:4f:01:b5:cd:b7:87:b2:d4:42:cd:
79:69:24:7a:7d:e0:0d:9a:bf:60:6a:ca:05:03:37:
8f:b6:29:bf:b3:7d:49:7d:0f:e2:4c:d4:d0:a6:8c:
95:f0:b1:28:99:69:ba:4d:c3:47:10:eb:ab:37:46:
fd:60:29:6f:93:3e:e2:a0:8b:38:a9:79:3d:20:b9:
85:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E4:9C:5F:C1:B8:4D:46:42:01:68:10:C2:70:D1:D3:41:E2:BD:BE
X509v3 Authority Key Identifier:
keyid:D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/euScX8G4TUZCAWgQwnDR00Hivb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.253.0/24
IPv6:
2a0f:4d00::/29
Signature Algorithm: sha256WithRSAEncryption
0c:be:f9:c6:78:35:01:2c:54:bc:be:be:e5:7b:bd:5d:82:e1:
7b:90:5e:7e:e9:0c:4b:f8:21:94:d8:49:f2:8e:71:ab:f7:75:
3d:fe:23:6b:71:21:a3:52:2f:d9:94:0a:e2:d9:ac:73:4d:ce:
7c:87:21:78:ae:11:84:c1:e5:b1:77:e0:26:a9:18:fd:47:65:
38:ae:e9:6e:8d:89:ea:a3:10:ae:b7:0b:49:af:54:bc:94:18:
6a:a1:85:25:78:33:a1:f9:73:92:dc:a6:d4:04:01:71:42:78:
2e:5c:b5:35:75:2a:58:42:72:0d:ce:1f:1f:23:16:02:3f:d1:
57:86:e6:2f:27:61:fa:8f:72:75:6e:80:3f:f6:0d:b5:08:11:
04:4d:0c:1d:84:c6:3d:cf:d5:cf:24:a6:5c:12:54:f6:7c:c5:
d1:d3:8e:7d:f6:ec:6c:04:dd:bd:b2:0d:93:8a:c2:2b:2c:22:
bb:f7:05:aa:43:55:5e:3c:53:81:2d:d8:95:d2:b3:bb:58:54:
8a:4f:05:e2:fc:c7:7f:a6:41:b4:9e:6a:31:5b:94:e7:ea:be:
be:9d:bd:ce:38:92:f4:96:12:e4:94:83:ed:87:b7:91:f6:4f:
e8:54:61:45:31:a0:2d:89:61:ae:4b:da:4a:26:92:65:fa:3c:
6b:68:d8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 10 16:51:19 2024 by rpki-client on console-ams.rpki-client.org