Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/eRG-lX3va7ErKMPwPlmazQqQLMo.roa
File: eRG-lX3va7ErKMPwPlmazQqQLMo.roa (raw, json)
Hash identifier: tTjPR/STYW51YD3F99YwgdN/59SLP6R3PUfAFQ1HWW4=
Subject key identifier: 79:11:BE:95:7D:EF:6B:B1:2B:28:C3:F0:3E:59:9A:CD:0A:90:2C:CA
Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9
Certificate serial: 01856E38A556395E1CE00AECF1994D992D96
Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/eRG-lX3va7ErKMPwPlmazQqQLMo.roa
Signing time: Sun 01 Jan 2023 16:44:44 +0000
ROA not before: Sun 01 Jan 2023 16:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209115
IP address blocks: 94.247.228.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:a5:56:39:5e:1c:e0:0a:ec:f1:99:4d:99:2d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9
Validity
Not Before: Jan 1 16:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7911be957def6bb12b28c3f03e599acd0a902cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6c:80:ea:b7:e7:89:3d:73:19:70:0a:f4:85:
88:34:a6:8a:8e:5f:db:ef:9c:12:5e:c4:c5:00:e4:
07:20:0c:33:e2:ca:d7:0f:fe:e7:67:73:fa:ca:74:
b4:c0:41:1d:5f:81:f5:18:bb:ce:c8:d5:d6:7d:5f:
4d:09:b5:31:58:4f:1c:6b:00:fd:0e:98:bb:1b:1f:
75:3f:75:c5:b1:69:c2:e6:28:25:18:b1:92:63:5d:
b8:9f:b3:cf:79:a8:be:05:9c:54:96:f4:fb:c3:41:
9b:e7:dd:8b:14:dc:dd:57:e5:b0:62:9f:ef:36:df:
20:ab:a3:64:2a:51:b7:4b:5f:0a:2f:c3:85:2c:75:
02:b1:32:9a:cf:99:1f:e4:97:96:dc:b3:56:e8:0f:
89:d6:d1:63:f4:ca:c9:cb:24:07:3a:23:5a:f4:b7:
75:b2:c4:6f:90:52:63:80:31:41:d2:2c:01:a7:a8:
1a:a4:3d:70:44:d4:95:3a:d3:f6:08:37:c9:4f:ad:
14:ea:a3:48:0e:0f:60:21:99:85:72:43:32:bf:12:
a5:73:10:0f:42:0e:b6:f2:f7:c7:e2:bc:3a:f2:49:
59:a1:24:4b:53:9e:de:71:fa:ee:a6:77:07:ff:85:
10:09:2c:94:1e:be:b2:0f:fa:92:d5:06:3f:03:e8:
c3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:11:BE:95:7D:EF:6B:B1:2B:28:C3:F0:3E:59:9A:CD:0A:90:2C:CA
X509v3 Authority Key Identifier:
keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/eRG-lX3va7ErKMPwPlmazQqQLMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.228.0/24
Signature Algorithm: sha256WithRSAEncryption
07:33:88:58:64:9c:b1:6d:2d:27:e1:e8:8c:7e:ff:e7:17:88:
bb:c9:96:e4:1e:6e:e7:df:47:71:f7:d3:10:8d:11:ce:df:22:
43:6d:45:04:f3:fa:67:7e:23:1d:a8:33:df:77:21:b6:f4:b1:
00:ef:d2:ff:93:d3:29:00:af:79:c3:6f:3d:82:07:4b:a4:b6:
0b:35:01:e6:36:7c:e2:9d:d9:e2:2f:9c:95:fd:9a:d4:40:2e:
4f:7a:bc:28:fd:fb:0a:3b:b2:5a:b7:42:0b:e8:79:03:93:7b:
c8:04:47:7f:87:c0:d9:1e:8f:8d:22:cf:27:30:cf:17:a6:39:
f0:ec:9b:8e:0f:f3:de:6f:a2:d0:cc:8f:79:17:ab:60:41:0c:
18:0c:77:af:59:f0:c9:cd:2c:0b:67:71:ca:bc:6d:b8:e3:43:
9a:87:5a:2a:8d:05:8d:4a:0f:c2:87:b3:7e:bd:bc:9e:bf:c2:
bf:67:c7:3b:b7:82:8b:7d:65:b9:a6:b3:b8:f0:5a:77:13:68:
15:4a:e6:59:70:2e:01:03:06:16:f1:17:0b:bc:80:27:76:ba:
c1:f6:c7:85:1d:c1:24:4a:9c:a8:49:f5:a3:e2:f9:00:e6:a7:
a6:af:10:4f:dc:6c:2f:e6:56:4c:1f:60:6a:19:3e:8e:65:eb:
66:05:ef:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:34 2024 by rpki-client on console-ams.rpki-client.org