Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/eCeWTCANzQj-nzyHb0zWgRFtHXU.roa
File: eCeWTCANzQj-nzyHb0zWgRFtHXU.roa (raw, json)
Hash identifier: ZHUVRaKhFTcG/5BDsx5oI+LuhTW/PZRNHVvQtXogPg4=
Subject key identifier: 78:27:96:4C:20:0D:CD:08:FE:9F:3C:87:6F:4C:D6:81:11:6D:1D:75
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 0192527541F664B637C266AEE5D5DD19C22A
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/eCeWTCANzQj-nzyHb0zWgRFtHXU.roa
Signing time: Thu 03 Oct 2024 12:57:49 +0000
ROA not before: Thu 03 Oct 2024 12:57:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 81.199.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Oct 2024 14:36:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:52:75:41:f6:64:b6:37:c2:66:ae:e5:d5:dd:19:c2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Oct 3 12:57:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7827964c200dcd08fe9f3c876f4cd681116d1d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:94:17:ab:4e:60:22:76:ea:46:7b:94:26:28:
ad:5f:4b:1d:45:3b:be:fc:e4:da:2c:62:14:2c:f8:
bc:49:cb:e3:5c:f6:46:d5:bd:35:42:62:80:4e:6d:
4b:6d:7f:e9:e2:98:81:ce:23:65:39:47:b6:f1:9b:
a8:7c:71:a8:ff:25:69:b4:cd:c7:cc:3a:17:a7:62:
2f:5f:e3:b3:a2:65:c9:8f:51:36:6a:02:d9:51:8e:
c6:03:40:fe:29:c8:6f:e5:8d:2b:60:ab:40:e9:33:
bf:4b:f9:7c:e1:05:ef:24:2e:52:7e:25:b2:ac:f5:
4d:14:90:10:3e:e0:63:f1:27:18:30:d5:0e:be:0a:
b4:d9:5e:55:86:f2:aa:97:f6:c7:fb:31:f4:e8:2a:
13:12:17:13:2d:f9:17:06:7b:dc:3f:da:55:51:af:
b4:ec:de:ea:be:3b:22:a0:30:ad:e0:25:ad:4a:2a:
d8:94:76:8b:e0:45:7a:1f:87:9b:2c:9f:de:82:1c:
07:62:76:61:d3:0b:cd:78:ed:e3:1f:dc:d5:32:1d:
6c:f4:0a:0e:3c:d7:fc:84:fb:da:04:66:ac:39:05:
76:9c:39:81:f2:80:9f:a1:5e:98:b3:23:fe:a5:c0:
17:5a:91:be:56:d1:94:48:b3:61:4c:bc:3b:d5:5b:
3b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:27:96:4C:20:0D:CD:08:FE:9F:3C:87:6F:4C:D6:81:11:6D:1D:75
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/eCeWTCANzQj-nzyHb0zWgRFtHXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.29.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:15:59:a3:32:46:96:6d:fa:19:82:8f:cf:2e:08:88:17:8f:
9a:d7:6b:06:47:32:60:57:b4:7b:27:df:ab:d1:9d:7b:81:b2:
a7:33:f0:07:83:3f:f1:48:d3:ea:c8:db:c8:af:f0:ae:4c:82:
7d:46:6e:69:c1:fb:1c:38:0d:bf:28:53:3e:f1:24:80:7d:30:
17:60:cd:53:d1:3a:ea:cf:3b:17:b6:9c:f7:cc:ab:f3:77:05:
ae:14:80:13:0d:53:77:18:d1:f4:35:bc:e7:50:81:0f:bd:96:
3e:86:53:25:a9:df:59:95:31:2b:bb:73:9f:de:c0:5e:cf:ce:
73:cd:96:ef:ca:9c:ee:8d:63:71:d1:81:09:68:1f:9a:6e:f5:
56:ed:17:2e:e8:f4:bc:89:4a:af:87:e6:49:8b:7f:28:fa:50:
8c:c6:63:cb:20:43:8b:e6:42:77:99:3d:ab:16:ad:e8:f2:78:
18:f2:c4:11:be:6f:7f:35:d9:39:c6:79:79:1d:96:80:6a:ef:
fb:ab:40:99:e7:ad:9c:d0:08:1f:c9:f3:84:02:f9:a7:65:4b:
70:80:3c:03:77:50:2f:83:94:46:76:88:fb:c9:6c:cb:45:9a:
8d:09:73:54:21:03:69:19:59:46:9d:e2:44:7c:85:79:43:f3:
c9:9e:15:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 17:32:36 2024 by rpki-client on console-ams.rpki-client.org