Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/EBDmoqxS6g4MLVfmsZCQj81m1Ik.roa
File: EBDmoqxS6g4MLVfmsZCQj81m1Ik.roa (raw, json)
Hash identifier: t7owgfsfJT9TRAh8MEfTMja+5Y9ZxgvkhiiM1y235Eg=
Subject key identifier: 10:10:E6:A2:AC:52:EA:0E:0C:2D:57:E6:B1:90:90:8F:CD:66:D4:89
Certificate issuer: /CN=f81a2052052675d4539b87f5fb9c694dbf43261e
Certificate serial: 0185719E73688D83D3D9CBDA2802B759D3C6
Authority key identifier: F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/EBDmoqxS6g4MLVfmsZCQj81m1Ik.roa
Signing time: Mon 02 Jan 2023 08:34:47 +0000
ROA not before: Mon 02 Jan 2023 08:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43656
IP address blocks: 194.28.4.0/23 maxlen: 23
194.28.6.0/23 maxlen: 23
91.198.83.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:73:68:8d:83:d3:d9:cb:da:28:02:b7:59:d3:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81a2052052675d4539b87f5fb9c694dbf43261e
Validity
Not Before: Jan 2 08:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1010e6a2ac52ea0e0c2d57e6b190908fcd66d489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:94:47:a6:eb:4b:29:24:c5:29:cb:3b:64:4e:
a0:36:cd:ef:e3:05:b9:0c:15:4d:43:9e:41:2c:e5:
3f:cf:c5:3a:4c:b6:de:f0:84:fe:60:f1:bf:e2:90:
6d:0f:24:ad:82:6f:bd:43:35:cf:b5:a7:cc:b9:57:
23:39:dd:61:bc:dc:a5:e4:88:c3:ac:66:25:ca:2d:
8e:0d:57:80:c6:91:d6:27:12:58:e6:7f:cd:98:74:
9e:76:64:8a:58:11:97:77:b8:9c:68:84:54:f1:2e:
6f:f4:c0:7c:99:03:3f:a2:01:e4:c4:26:b2:9f:0b:
43:27:fd:fd:27:58:07:64:ff:c5:c7:5a:bd:1b:65:
5d:c5:cd:57:64:4d:07:d1:1d:40:67:65:05:76:76:
19:5d:5d:09:9d:97:bb:3f:6f:b2:32:69:9e:55:d2:
f8:a9:b4:ab:a7:97:dc:a0:5e:88:07:b7:4e:01:2a:
1b:27:05:fc:6d:f3:d3:71:49:53:bc:1b:10:da:fd:
e5:02:c3:0b:b2:9d:f1:b2:84:3e:59:20:2f:36:f7:
d7:f2:a3:55:5b:74:bd:fa:66:53:6a:f3:6b:7c:c9:
1f:40:f0:ff:ac:60:9f:33:08:2c:7a:5f:d0:ac:91:
70:b4:2f:98:ea:a3:dd:31:13:cc:bf:8f:df:52:14:
cd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:10:E6:A2:AC:52:EA:0E:0C:2D:57:E6:B1:90:90:8F:CD:66:D4:89
X509v3 Authority Key Identifier:
keyid:F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/EBDmoqxS6g4MLVfmsZCQj81m1Ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.83.0/24
194.28.4.0/22
Signature Algorithm: sha256WithRSAEncryption
90:49:c0:13:d3:e3:02:a5:05:ce:4f:ec:39:f8:62:2b:ca:59:
8a:ed:8e:69:f8:e9:c6:2e:24:0b:b6:1f:c6:5a:4c:12:c7:f8:
bc:72:2b:a0:fc:38:ac:ff:5f:ed:fd:d8:19:27:d1:1e:c6:ed:
b7:26:8d:53:65:e6:85:fa:45:bf:09:5e:f4:7f:65:46:dc:3e:
24:d3:68:29:28:01:d6:15:62:9c:e9:6f:05:9c:5c:5d:ea:06:
8e:3c:54:fc:6b:25:32:fb:33:5e:a0:81:88:7b:e9:d6:f9:83:
9b:85:97:0a:f1:85:fe:1f:91:9f:12:8a:1e:93:b6:13:21:8d:
a7:ad:26:69:74:a9:44:e3:ee:e2:69:7a:7d:cd:ab:db:e6:20:
bb:f0:5c:c6:11:54:16:d3:40:3d:87:13:e0:b0:c0:18:2f:94:
2a:7c:aa:86:21:7e:b6:bb:8c:73:87:c0:f9:95:cc:5a:02:6a:
80:4f:79:e0:9b:b1:40:bc:e3:25:9b:16:a2:15:75:c4:b7:73:
fc:e4:bc:0a:9e:57:98:55:8c:28:62:74:91:8c:cf:f1:27:e1:
68:4c:0e:fa:50:10:7e:d0:89:97:17:0c:ef:94:ba:27:3a:f9:
e9:8e:44:e9:c7:57:26:7c:6f:68:72:39:ac:a8:23:f1:72:4e:
a5:34:8c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:16 2024 by rpki-client on console-ams.rpki-client.org