Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/EIZfBXgjOgyD9YBa5KV9dbhYa8k.roa
File: EIZfBXgjOgyD9YBa5KV9dbhYa8k.roa (raw, json)
Hash identifier: KraCiN4DdUfefWV4b6sVFGRSstzAacgUoKHq/8g2ea8=
Subject key identifier: 10:86:5F:05:78:23:3A:0C:83:F5:80:5A:E4:A5:7D:75:B8:58:6B:C9
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01856C53D55C0D6FEF2CEB23511DE5164A36
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/EIZfBXgjOgyD9YBa5KV9dbhYa8k.roa
Signing time: Sun 01 Jan 2023 07:55:11 +0000
ROA not before: Sun 01 Jan 2023 07:55:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210599
IP address blocks: 185.88.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:d5:5c:0d:6f:ef:2c:eb:23:51:1d:e5:16:4a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 1 07:55:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10865f0578233a0c83f5805ae4a57d75b8586bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d5:f4:5f:d3:47:0c:97:b7:99:a5:26:48:71:
b4:f7:b1:6b:e7:d5:2e:64:97:0f:81:68:c4:53:76:
de:6b:e7:af:81:bd:64:17:e3:35:20:6d:c1:ec:1c:
9c:a8:4e:9a:d5:d1:4f:f6:cb:00:39:a3:52:50:59:
03:36:be:96:12:12:d6:19:2f:82:d7:e3:cd:5b:a1:
78:f5:5d:8a:13:fc:b4:04:5d:ca:14:fc:6c:19:41:
ae:14:e1:89:08:2d:fc:80:21:e1:9c:1b:24:36:e6:
61:6b:38:8c:e6:9b:f0:57:56:9b:d4:3f:e9:4b:20:
af:2d:c5:34:ae:2f:59:23:3a:b7:cd:9c:6f:2d:3b:
fa:8f:ae:79:bf:7a:4b:c3:4d:e0:56:ef:de:cc:d8:
5c:ae:bc:e1:05:af:e2:e0:c1:67:30:81:7d:58:bd:
84:81:35:9c:cc:27:55:30:9a:cd:4a:80:d2:59:6e:
4f:49:22:2d:08:12:3f:c4:78:61:99:d2:04:ae:4c:
c5:53:ed:1b:25:9c:7d:35:3a:30:26:49:5a:a8:ed:
df:bb:1a:8e:5d:19:07:e0:ca:be:8c:bd:87:3f:39:
aa:f6:f5:c4:6b:7f:ef:9d:88:14:ab:90:64:d7:bb:
04:b6:d3:44:19:da:e5:11:3c:19:b8:40:82:54:92:
ae:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:86:5F:05:78:23:3A:0C:83:F5:80:5A:E4:A5:7D:75:B8:58:6B:C9
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/EIZfBXgjOgyD9YBa5KV9dbhYa8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.172.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:28:5c:a3:a0:65:45:9f:5f:4e:b6:e1:69:54:1d:3e:59:6a:
1c:84:c4:0e:1f:ee:ca:54:6e:e8:29:7a:25:92:e1:b7:9d:48:
9b:50:0b:59:64:1d:26:52:37:29:d3:bc:49:91:14:44:48:6b:
50:35:3f:e1:f4:0e:23:2b:90:6e:f4:80:3e:3e:34:a0:90:11:
61:9f:b4:42:78:b0:82:d7:ea:c9:ba:8a:bb:19:0a:d6:ce:8f:
5d:47:92:bb:88:90:28:cd:2d:15:d3:de:7b:ff:59:7b:65:6e:
a4:9c:89:f1:3a:a5:4e:67:29:e4:99:39:93:24:e1:cb:4d:0b:
ca:ac:b5:b2:13:66:c1:9d:f1:a6:8a:66:ef:31:89:cc:4e:59:
70:24:79:ae:82:af:fb:f2:64:5f:d7:49:db:46:63:dd:15:b3:
ab:3a:e6:d8:a8:af:56:98:78:c9:98:e0:56:69:3f:83:17:70:
2b:02:7c:62:c5:1d:05:8a:a5:fc:2b:8c:c0:81:25:25:78:f6:
4e:dc:2c:58:24:e2:64:af:1c:e0:ac:a7:46:32:e4:5f:b1:6d:
ca:a4:55:39:13:2f:f0:8b:13:0c:af:6f:fa:31:cd:a2:37:32:
e7:17:ef:a5:0f:a7:81:2b:2d:a7:41:f1:cb:6f:19:36:72:8d:
9b:18:aa:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:49 2024 by rpki-client on console-fra.rpki-client.org