Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/ezEiOyPSE62q1lo9AXmJ3R7y4Aw.roa
File: ezEiOyPSE62q1lo9AXmJ3R7y4Aw.roa (raw, json)
Hash identifier: HuJX80z2VVq1HFw6+a24SNp6e3pVeyxcshfosEzdPjE=
Subject key identifier: 7B:31:22:3B:23:D2:13:AD:AA:D6:5A:3D:01:79:89:DD:1E:F2:E0:0C
Certificate issuer: /CN=b4bdde78415b69c31277c0aac7fca6607d635d88
Certificate serial: 01857270F8FD5AF468E97A1BAF8826D59B35
Authority key identifier: B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/ezEiOyPSE62q1lo9AXmJ3R7y4Aw.roa
Signing time: Mon 02 Jan 2023 12:24:44 +0000
ROA not before: Mon 02 Jan 2023 12:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42541
IP address blocks: 89.23.224.0/19 maxlen: 19
185.10.220.0/22 maxlen: 22
193.104.135.0/24 maxlen: 24
193.106.164.0/22 maxlen: 22
2a03:5440::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:70:f8:fd:5a:f4:68:e9:7a:1b:af:88:26:d5:9b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdde78415b69c31277c0aac7fca6607d635d88
Validity
Not Before: Jan 2 12:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b31223b23d213adaad65a3d017989dd1ef2e00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:59:e2:a7:6e:86:05:89:35:50:0c:89:1c:65:
cd:e8:07:6b:cd:82:95:55:13:08:07:b9:7e:08:97:
75:ad:c1:de:2d:09:88:08:2c:40:22:93:e3:53:13:
ce:8b:18:a9:55:e2:8a:ab:33:c5:a7:b1:f2:3e:0e:
76:b4:8c:41:bd:77:c5:24:12:28:e0:1b:dd:46:99:
f0:c3:4f:80:1f:6d:33:0c:a6:f6:c1:25:a2:72:b5:
20:16:3c:15:b0:d5:a9:a9:b7:e1:c3:8c:25:9c:6e:
21:dd:63:17:78:e0:ee:37:f5:fa:94:1b:25:0d:9b:
9c:0d:11:18:84:5f:9c:03:8a:6a:3b:ae:f8:20:d3:
ff:2f:0c:dd:09:37:20:b0:e0:03:4f:33:1a:09:68:
55:b1:95:14:8e:86:36:d7:06:b4:9c:db:dc:26:6e:
99:8c:48:aa:bb:bc:80:25:fb:82:7c:56:21:0c:ea:
00:79:68:5b:96:1b:6c:78:62:8f:51:ca:be:5e:0b:
8c:e3:08:31:1d:25:eb:e9:a0:33:44:2e:6d:3a:6d:
91:fe:01:f7:20:56:4f:8c:8f:2d:80:84:fd:d0:9d:
43:e5:57:41:27:1c:87:cb:5e:b8:6a:0f:af:6d:3d:
fc:0e:c9:4b:c2:84:cb:3f:47:3b:b3:1c:29:3b:57:
4c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:31:22:3B:23:D2:13:AD:AA:D6:5A:3D:01:79:89:DD:1E:F2:E0:0C
X509v3 Authority Key Identifier:
keyid:B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/ezEiOyPSE62q1lo9AXmJ3R7y4Aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.224.0/19
185.10.220.0/22
193.104.135.0/24
193.106.164.0/22
IPv6:
2a03:5440::/29
Signature Algorithm: sha256WithRSAEncryption
06:61:e1:8f:0b:4f:3d:aa:55:d6:eb:db:8a:ea:28:8a:bd:4d:
75:15:1b:a9:64:d0:7a:ee:36:c8:1d:ed:8a:49:04:2c:ab:2b:
e2:ff:16:b3:23:01:94:b4:49:dc:80:81:d4:e9:94:ea:54:32:
a7:10:01:11:01:b0:24:01:7a:3b:6a:5d:9e:c5:1e:be:54:60:
80:21:81:f6:8f:c8:d3:32:b0:81:29:6d:6e:de:ca:68:f5:e6:
2d:1e:73:31:8d:34:64:9b:c7:2f:5f:da:8b:e2:ef:f9:1b:8f:
dc:7f:da:92:e3:26:82:de:2a:b4:64:7f:34:a3:50:71:52:3b:
59:17:e0:ec:00:c4:53:44:c1:9b:08:68:1b:1d:c1:68:f2:41:
18:ad:74:b8:95:88:06:cf:6a:62:ac:64:59:f9:0e:08:44:82:
e7:98:be:24:c1:4a:97:3c:fd:02:15:44:ab:f6:8f:3f:3d:9e:
0a:43:4c:61:50:56:10:9f:d7:1d:a3:5c:13:9b:75:f3:14:74:
2e:f1:cd:d2:a1:77:0c:05:77:a0:07:cc:20:24:dc:2d:34:62:
99:d4:de:5a:a6:3c:ab:15:7a:e0:52:22:6e:5e:d3:74:85:bb:
94:36:6b:a3:ec:3d:37:54:09:87:f5:f1:7f:16:e5:ed:4f:e0:
81:f4:aa:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:09 2024 by rpki-client on console-ams.rpki-client.org