Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/4997de-7df7-4c6d-a54a-42b73ee46b9c/1/EZTxi2bXjXRUetrWc85jSOgVU8Q.roa
File: EZTxi2bXjXRUetrWc85jSOgVU8Q.roa (raw, json)
Hash identifier: 3yarXpsBH45oNAc8ix6qQL5HZmRJCIFakFVtvw5iXhA=
Subject key identifier: 11:94:F1:8B:66:D7:8D:74:54:7A:DA:D6:73:CE:63:48:E8:15:53:C4
Certificate issuer: /CN=c51fdb78308fdf7d6619f54ed21c02e5b50b2905
Certificate serial: 01876AD8BFF0E6CA429CE6E955481DFFA1CB
Authority key identifier: C5:1F:DB:78:30:8F:DF:7D:66:19:F5:4E:D2:1C:02:E5:B5:0B:29:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xR_beDCP331mGfVO0hwC5bULKQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/4997de-7df7-4c6d-a54a-42b73ee46b9c/1/EZTxi2bXjXRUetrWc85jSOgVU8Q.roa
Signing time: Mon 10 Apr 2023 11:06:42 +0000
ROA not before: Mon 10 Apr 2023 11:06:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201211
IP address blocks: 185.19.202.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6a:d8:bf:f0:e6:ca:42:9c:e6:e9:55:48:1d:ff:a1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51fdb78308fdf7d6619f54ed21c02e5b50b2905
Validity
Not Before: Apr 10 11:06:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1194f18b66d78d74547adad673ce6348e81553c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ba:0f:1c:bb:18:f0:9d:38:b4:f4:b1:f6:7b:
9c:e1:7b:69:c9:29:49:44:14:08:fe:fa:af:6e:22:
b1:6c:58:c8:d7:6c:13:c1:9a:ef:f4:c8:59:be:8c:
2a:0c:92:a6:4e:53:a5:b1:a6:ad:7c:9c:be:d1:37:
bd:a6:3b:77:1d:d5:17:1d:8a:90:c0:ee:91:8c:7b:
c2:69:5a:88:dd:fa:ca:7b:c8:96:bd:29:b1:24:a7:
2d:ec:6e:3b:e7:03:9f:e6:95:3d:01:1c:44:fc:ea:
82:5b:81:77:3c:5c:42:14:be:34:5f:79:a7:59:bd:
33:65:19:fc:20:c8:fd:f7:39:aa:91:5d:21:65:ff:
2f:9e:bb:80:72:0c:b6:74:54:96:db:c2:5b:2a:1f:
dd:9f:b3:b5:3c:95:36:17:37:3b:3a:a7:c5:1f:96:
ff:a2:1d:55:e6:91:3f:71:61:4a:73:f8:99:95:39:
f9:26:af:13:f4:b0:94:65:ce:8d:f1:f1:7b:d3:ab:
bc:54:9f:0c:51:83:b2:1f:ac:dc:b1:ed:9a:ce:f5:
ae:aa:14:48:4c:fa:dd:4f:37:52:30:ae:3d:47:04:
bd:a7:85:54:76:92:5f:bc:00:b6:8c:36:5f:93:54:
8d:b4:c5:e6:51:40:f4:48:a8:08:45:4d:14:1d:4d:
aa:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:94:F1:8B:66:D7:8D:74:54:7A:DA:D6:73:CE:63:48:E8:15:53:C4
X509v3 Authority Key Identifier:
keyid:C5:1F:DB:78:30:8F:DF:7D:66:19:F5:4E:D2:1C:02:E5:B5:0B:29:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xR_beDCP331mGfVO0hwC5bULKQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/4997de-7df7-4c6d-a54a-42b73ee46b9c/1/EZTxi2bXjXRUetrWc85jSOgVU8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/4997de-7df7-4c6d-a54a-42b73ee46b9c/1/xR_beDCP331mGfVO0hwC5bULKQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.202.0/24
Signature Algorithm: sha256WithRSAEncryption
12:d4:21:ea:90:60:6c:84:a5:06:44:58:f1:4b:3f:3e:4b:ac:
3e:67:e7:7b:4d:bb:1b:db:a9:0b:b3:34:44:35:97:b2:01:a5:
0e:b0:03:e7:54:93:3f:1c:f8:d0:2d:02:6e:64:72:5a:0c:a1:
bd:b6:c3:31:39:90:eb:e8:28:b3:92:f6:af:ac:ef:82:40:67:
29:b6:43:90:3b:53:ac:c8:7e:46:05:98:b7:e3:1c:19:91:02:
7e:49:15:05:9b:2b:60:ed:75:bb:dc:ec:d8:2d:c9:05:c6:72:
31:58:83:3a:0b:c1:01:eb:fc:7b:44:c0:30:5a:5d:b8:94:db:
e5:b3:1e:f7:35:a5:c7:9a:73:d5:80:bf:fd:91:22:da:f6:8c:
9b:cc:2f:31:67:5b:bc:e0:ec:d5:99:09:4f:05:7a:d3:c0:42:
d1:c4:fe:65:f2:4e:96:38:4b:5e:b6:48:ae:56:e0:2b:67:18:
d5:63:a6:aa:b6:82:e4:21:19:f7:0b:39:94:7c:77:d7:78:4a:
65:c0:0c:a8:cb:ea:eb:57:3d:74:86:df:f0:25:e6:d3:6a:61:
14:60:56:b4:52:a7:e5:f9:df:33:ad:94:dc:db:a3:94:2c:6b:
df:e7:f2:a7:ce:bd:11:f7:7c:b2:d7:75:d8:e4:3a:27:1d:3d:
2e:20:04:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:13 2024 by rpki-client on console-fra.rpki-client.org