Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/EkIJGkzP_6rERvJFIlrS2Sza-fw.roa
File: EkIJGkzP_6rERvJFIlrS2Sza-fw.roa (raw, json)
Hash identifier: YMMdVwjl0YHZuhH1tVPmzN2eYGlaL4sG45h4zZOy9Qs=
Subject key identifier: 12:42:09:1A:4C:CF:FF:AA:C4:46:F2:45:22:5A:D2:D9:2C:DA:F9:FC
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 018CC2DB007061E5E1A78F0E03DE6EC89748
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/EkIJGkzP_6rERvJFIlrS2Sza-fw.roa
Signing time: Mon 01 Jan 2024 02:29:41 +0000
ROA not before: Mon 01 Jan 2024 02:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 45.15.211.0/24 maxlen: 24
80.94.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 09:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:00:70:61:e5:e1:a7:8f:0e:03:de:6e:c8:97:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Jan 1 02:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1242091a4ccfffaac446f245225ad2d92cdaf9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2d:d2:85:29:98:5a:e2:83:ef:5e:dd:88:4a:
e6:c6:bb:61:d4:06:72:45:c2:86:22:31:ec:fc:85:
c2:1b:39:41:95:2c:8a:d5:54:23:ea:f2:08:e6:c7:
48:73:e9:e2:a2:51:2a:d2:2e:49:b6:50:fb:4a:87:
46:96:7a:e9:84:95:27:60:c1:54:fd:3c:1d:01:38:
c3:70:dd:ec:ca:90:74:22:a6:8c:c5:32:62:8e:d5:
01:f5:53:87:23:27:b5:c6:88:85:fa:45:1f:9b:ac:
5d:af:99:10:29:e2:5a:c3:01:62:b3:2e:40:5a:5d:
cb:36:24:98:87:c7:4c:66:b1:c3:f8:a7:4d:c5:19:
10:36:9f:ad:cc:57:18:eb:8a:5d:bc:20:59:b5:99:
83:9a:97:52:55:c8:d5:9b:6f:7d:5d:0c:ec:a8:b8:
b8:86:0d:64:3d:01:fd:f6:0b:18:92:35:d3:5f:28:
2a:cc:6c:b4:c4:e3:d6:a5:ed:94:63:f9:f7:81:4a:
dd:84:1b:5d:af:b3:c9:ac:60:60:25:52:2f:59:5a:
1b:c2:fc:51:17:bc:3d:7c:38:c7:e0:9f:9f:56:95:
04:0e:15:a9:de:37:17:59:ea:b5:70:87:7a:62:86:
e7:6e:0f:7e:cf:e2:33:36:5a:9c:7a:0b:79:bf:9b:
3a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:42:09:1A:4C:CF:FF:AA:C4:46:F2:45:22:5A:D2:D9:2C:DA:F9:FC
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/EkIJGkzP_6rERvJFIlrS2Sza-fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.211.0/24
80.94.88.0/24
Signature Algorithm: sha256WithRSAEncryption
45:7f:01:3f:0f:ca:70:83:bd:a4:48:db:f3:30:bc:ab:4f:3d:
d9:cd:3f:da:ad:1b:a3:c6:e4:b3:89:88:92:ef:0b:6a:20:0d:
46:d9:7b:9a:43:af:73:f1:cc:44:31:ef:eb:ff:f9:9b:4f:0d:
0e:f6:f4:d1:b6:84:91:d7:01:7a:2a:8f:b6:4e:1c:15:d1:1f:
7d:f2:8e:73:6c:45:62:d9:5e:91:a8:91:f4:90:30:f5:c3:f1:
0c:76:e2:3c:4b:9a:e0:20:ae:2f:02:a9:cc:11:c7:46:a8:b3:
32:48:59:fc:fa:b5:52:39:08:b9:b7:e4:a4:84:a6:a0:e8:ec:
41:8a:8b:27:f7:ce:d7:75:ab:0d:51:39:d7:29:d3:02:1b:aa:
a8:92:9f:3c:05:cd:78:54:95:a4:51:f8:e6:d7:fb:f3:6c:41:
fe:08:b1:32:95:50:18:2a:18:6d:d5:28:03:f6:13:9c:89:90:
06:c5:ed:bb:60:01:fd:a9:65:ac:e7:30:50:ef:4f:06:7a:8c:
5e:8c:c5:6b:73:f2:5a:03:e1:64:45:bf:d9:7c:a9:1a:a2:1d:
c0:43:fc:dd:7f:45:f8:fb:86:d3:a5:af:34:04:9e:a4:74:f9:
48:c9:00:6a:75:16:cd:20:d8:bc:b0:42:bc:55:e4:a7:6e:ae:
4c:ce:fe:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:37 2024 by rpki-client on console-ams.rpki-client.org