Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/EeeAFnp91sRPa7toHMfiA_HnK0s.roa
File: EeeAFnp91sRPa7toHMfiA_HnK0s.roa (raw, json)
Hash identifier: Rxutsgj2zQN8Mrk/99QNyXr9M5tDr9U0pXNGAxN7ylo=
Subject key identifier: 11:E7:80:16:7A:7D:D6:C4:4F:6B:BB:68:1C:C7:E2:03:F1:E7:2B:4B
Certificate issuer: /CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Certificate serial: 01856EAFC6265291D916A92793FCE1EF13B8
Authority key identifier: F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/EeeAFnp91sRPa7toHMfiA_HnK0s.roa
Signing time: Sun 01 Jan 2023 18:54:51 +0000
ROA not before: Sun 01 Jan 2023 18:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 185.24.172.0/23 maxlen: 23
185.24.175.0/24 maxlen: 24
185.24.174.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:c6:26:52:91:d9:16:a9:27:93:fc:e1:ef:13:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Validity
Not Before: Jan 1 18:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11e780167a7dd6c44f6bbb681cc7e203f1e72b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:24:6f:2e:e8:5f:30:c8:7b:71:af:fe:5c:84:
26:62:12:44:ec:9e:4b:1f:1f:1c:d7:78:22:51:54:
ab:d6:57:11:6f:03:9d:0d:b8:fd:11:a3:7d:09:0e:
81:3b:6a:0e:ec:b2:1e:92:38:8b:ed:2f:dc:a5:ae:
e2:ed:13:72:22:fe:1a:82:14:fd:c1:e5:9b:8d:12:
04:ed:f1:28:0a:4b:de:19:96:cc:fb:b4:04:33:06:
60:28:f4:c3:5f:0b:a3:ae:c9:96:eb:9f:28:9a:fb:
25:69:82:0d:4d:a3:e2:fe:ae:40:21:7c:f6:4b:03:
df:8d:52:1c:37:9b:44:2a:1b:0d:2b:1c:d8:87:44:
eb:b5:d9:13:f9:5b:5d:b6:68:5c:35:82:d3:8b:05:
49:67:86:f4:ee:e0:8e:b4:39:ad:e9:ef:26:5b:f4:
f0:1b:19:44:82:33:1b:b8:82:5c:06:a6:1e:da:95:
16:5e:1d:a0:af:1c:ff:a2:77:a5:e8:9b:80:03:1c:
46:70:3e:01:4a:71:54:7f:d7:8f:e8:2e:5d:3f:3d:
c6:5f:e8:a5:03:7e:cb:0c:57:b4:3e:99:2a:94:e8:
0a:4a:4e:b1:f3:bf:55:8e:df:a0:f2:e6:5e:2c:c1:
1e:bb:6e:72:b0:b8:44:cc:a5:75:2e:a5:d1:9f:1e:
94:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E7:80:16:7A:7D:D6:C4:4F:6B:BB:68:1C:C7:E2:03:F1:E7:2B:4B
X509v3 Authority Key Identifier:
keyid:F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/EeeAFnp91sRPa7toHMfiA_HnK0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.172.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:f1:72:53:24:87:72:4a:7b:2c:cf:37:56:9e:06:0d:4b:0f:
f0:e9:57:aa:e5:6b:93:f4:08:2b:c0:c6:d0:19:43:68:fc:f0:
4b:b6:88:3e:ea:2e:ba:ff:6a:de:ed:6f:c7:0c:f7:6b:97:3e:
30:7a:2f:44:0c:6a:4f:13:df:cf:0e:7c:6b:c5:dd:00:52:dc:
e8:52:d9:2b:40:da:bf:31:49:dc:d5:dc:53:84:cd:dc:a4:7c:
f3:62:7d:41:6d:47:bd:b3:c7:fc:d0:06:64:8b:e7:6e:69:67:
3b:c5:fc:9b:37:9e:c0:3e:dc:ae:6f:84:ed:d7:ea:f5:98:c3:
bd:c8:0e:5c:a4:d3:f0:d5:24:7e:03:0b:4b:40:f8:59:ce:1c:
48:8e:4b:d1:21:ba:0b:cd:79:50:e6:e0:b7:de:40:e7:e0:00:
45:44:d1:18:59:99:14:0a:eb:62:74:f5:04:b5:03:81:96:38:
66:82:d9:b1:b6:a4:17:d5:54:50:f3:23:50:4f:40:de:ad:3e:
86:8d:21:6e:49:a4:73:cd:79:e5:ac:bd:f3:85:68:05:14:72:
07:33:23:0a:d9:9c:38:05:2b:09:92:4f:c9:b0:7a:6e:37:bd:
c0:7e:00:e2:52:41:b4:d1:a0:b2:94:a1:de:b5:d8:ca:19:b0:
9b:cd:c3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:38 2024 by rpki-client on console-fra.rpki-client.org