Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/eVkoY7OdqOwfTIrRtreWjId5J0U.roa
File: eVkoY7OdqOwfTIrRtreWjId5J0U.roa (raw, json)
Hash identifier: WkpnWbrJMBbQYObysgEWxzREy/MeK1QZwyQzelTVEMs=
Subject key identifier: 79:59:28:63:B3:9D:A8:EC:1F:4C:8A:D1:B6:B7:96:8C:87:79:27:45
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 01857356280DAB4421AD5E13CF89A617C74C
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/eVkoY7OdqOwfTIrRtreWjId5J0U.roa
Signing time: Mon 02 Jan 2023 16:35:04 +0000
ROA not before: Mon 02 Jan 2023 16:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60027
IP address blocks: 195.214.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:56:28:0d:ab:44:21:ad:5e:13:cf:89:a6:17:c7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 2 16:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79592863b39da8ec1f4c8ad1b6b7968c87792745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6d:f4:e5:aa:d8:cc:46:13:2e:c3:ad:f7:3d:
bf:c2:ae:5b:67:68:b7:55:2e:60:8f:53:e1:a5:b1:
e1:bb:c5:f8:5a:11:37:42:ff:e0:45:73:b4:58:0b:
ab:de:d8:d9:54:6a:e4:d2:ac:6f:6d:06:26:a2:ba:
b8:56:28:4b:35:db:83:ca:3c:41:e4:f6:d1:21:9b:
0d:4c:a8:b8:f3:9c:5f:93:c8:7e:89:60:94:53:a8:
94:78:f6:52:9f:22:d3:c4:8c:30:50:3d:4b:3c:5c:
61:98:03:45:83:d9:8f:3a:00:1e:72:f5:38:87:68:
c4:c3:eb:ed:ea:df:ea:05:f0:7a:4f:83:ac:18:06:
e0:5a:be:3f:5e:42:3c:d3:14:12:91:21:1a:85:81:
42:6c:51:50:b6:4c:ff:28:d5:a1:81:3f:0a:d4:e8:
f4:db:db:4a:62:a9:ed:a2:b2:b3:1d:63:f3:5f:83:
77:96:62:46:c5:23:68:1b:bb:b3:2c:07:c2:53:87:
1c:b1:64:22:fc:41:bb:51:8a:f1:9d:83:91:2e:d4:
2d:6d:e2:ce:65:ae:45:af:9b:e5:66:e6:cc:03:56:
e6:bf:37:65:73:52:0b:bd:b2:bd:c5:b2:dd:08:3b:
7b:bc:69:b8:c3:5c:4d:db:6e:c9:d6:68:e8:79:e2:
05:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:59:28:63:B3:9D:A8:EC:1F:4C:8A:D1:B6:B7:96:8C:87:79:27:45
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/eVkoY7OdqOwfTIrRtreWjId5J0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.214.154.0/24
Signature Algorithm: sha256WithRSAEncryption
05:b7:ea:16:31:d3:60:6c:0a:65:25:55:8c:79:57:ba:ce:95:
4f:57:fa:17:2c:1f:25:0a:59:99:29:9a:ba:b7:49:f7:f1:04:
9a:95:a5:87:8d:d6:66:5a:a4:48:b6:83:86:6d:7c:c6:cf:21:
32:10:28:47:38:af:3b:ea:a7:32:f6:a2:8f:b8:af:1c:28:6c:
50:36:24:69:9a:ef:68:89:8a:00:3e:a1:61:a5:2f:fa:59:85:
f9:47:3a:c3:51:d4:e4:77:3a:2a:93:9b:77:c6:b8:e4:d4:a2:
de:e5:0e:8e:33:38:03:04:2d:23:b0:11:74:f3:29:03:61:f7:
79:ae:2c:55:ca:66:eb:68:67:b4:4a:55:3d:3d:22:7c:38:e4:
07:c4:5c:d9:73:7b:44:07:6d:22:af:28:e5:c0:81:a9:53:13:
e4:a6:15:67:3a:9f:1a:b2:6c:82:1f:0b:c0:95:1e:09:b0:b5:
b8:dd:31:95:1a:ea:b2:82:25:9e:71:97:1d:32:86:b0:27:2a:
2b:2c:c1:90:c0:e4:c5:ca:02:2e:e7:0c:9d:97:bb:b7:2b:c0:
43:e4:61:d2:35:aa:71:17:13:6f:90:2e:db:0a:ba:a1:3d:55:
44:0f:f7:26:f6:9f:36:b4:a8:b7:a1:63:9d:17:9c:d6:2a:eb:
46:e1:0a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:00 2024 by rpki-client on console-ams.rpki-client.org