Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/EFdXENAt5rcmB4Rg8e0SXKQnkRc.roa
File: EFdXENAt5rcmB4Rg8e0SXKQnkRc.roa (raw, json)
Hash identifier: tIw0FukFnN28U1So/rfsiwFhn1Gs93RZ6o+WMx33PFs=
Subject key identifier: 10:57:57:10:D0:2D:E6:B7:26:07:84:60:F1:ED:12:5C:A4:27:91:17
Certificate issuer: /CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
Certificate serial: 0185729F01F331EA15A221ED846DAABA8A1C
Authority key identifier: 9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/EFdXENAt5rcmB4Rg8e0SXKQnkRc.roa
Signing time: Mon 02 Jan 2023 13:15:01 +0000
ROA not before: Mon 02 Jan 2023 13:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15830
IP address blocks: 185.97.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9f:01:f3:31:ea:15:a2:21:ed:84:6d:aa:ba:8a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
Validity
Not Before: Jan 2 13:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10575710d02de6b726078460f1ed125ca4279117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ef:d8:dc:88:2c:fa:3b:c0:b0:ab:fe:1a:42:
67:71:5a:cd:05:6c:2a:fe:94:89:56:a3:65:a7:02:
85:a0:c2:7f:b0:b5:50:c0:6e:bc:81:a0:47:81:64:
4f:4c:bd:c3:65:ff:ca:b0:05:6d:eb:71:a6:76:5f:
1c:0f:b9:d0:63:ad:d7:5e:62:37:80:55:cd:16:c7:
fa:e1:16:6e:c9:81:14:2b:8f:62:74:26:30:fa:3a:
cd:50:38:b6:a1:2c:68:7d:89:5f:85:72:04:e2:a0:
37:1a:78:e9:86:fb:bf:a0:2b:55:19:46:73:3c:c0:
ec:55:76:26:96:62:45:65:3a:f1:f6:e9:7a:f5:2a:
f8:19:71:dc:1b:2e:a7:65:8d:ff:d8:46:fe:7a:7d:
7b:52:fa:5a:5d:fc:ee:d3:85:0e:fc:d9:20:14:9e:
ed:8b:3c:8c:ed:96:00:fa:a1:85:ea:17:3f:42:f2:
9b:86:b8:98:d2:c1:46:cd:96:6a:f0:73:07:45:e1:
87:00:bb:10:27:9c:c7:d9:be:93:25:d6:07:74:2b:
55:c7:89:e8:49:90:ab:8b:c9:c3:2f:25:15:98:aa:
62:71:ba:39:3e:0d:3a:d1:35:d3:22:c4:e2:be:b7:
c5:e1:24:74:7f:84:bc:c6:a4:db:a0:6c:84:f5:1f:
7f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:57:57:10:D0:2D:E6:B7:26:07:84:60:F1:ED:12:5C:A4:27:91:17
X509v3 Authority Key Identifier:
keyid:9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/EFdXENAt5rcmB4Rg8e0SXKQnkRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.11.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:82:75:6a:c4:e1:42:e8:41:f4:49:d7:c3:94:5b:5d:0c:46:
79:9c:6c:d2:7b:f5:60:d4:4e:e2:f7:b0:44:4c:16:5b:92:15:
88:29:fe:b2:da:3f:62:8e:09:ec:f6:5a:a0:2a:f9:c7:e1:ce:
18:4c:c3:11:a5:9d:bf:05:92:1c:dd:19:e3:a9:be:7a:b6:c1:
0d:32:3a:79:ac:4e:b3:89:3d:dc:0a:3c:5c:77:64:c8:6f:e6:
ec:5a:12:a4:2d:67:17:ac:dc:5e:e2:a6:f7:3f:f5:22:f3:69:
55:7c:c3:55:96:da:67:ae:4c:a4:b3:ca:74:36:05:21:9e:24:
38:41:e6:a5:5f:dd:30:e4:a1:3f:8c:e8:fa:28:0c:c6:e3:03:
bb:08:24:5a:ba:47:05:67:da:29:90:46:a5:05:77:67:c6:64:
91:5b:d4:f3:28:fe:9f:ff:90:57:0f:74:aa:36:d5:30:f3:7c:
1b:a9:52:8a:da:9e:e9:aa:2b:54:7a:78:61:e5:e4:26:9a:18:
d0:ef:a9:49:34:34:bf:ab:b4:b0:06:d9:94:24:28:4f:93:27:
57:b4:4e:75:33:a2:06:8b:de:92:1f:a9:15:5c:67:25:aa:0a:
74:75:90:7b:0d:38:97:78:27:1a:04:17:43:5a:30:0f:ad:01:
42:4e:40:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:48 2024 by rpki-client on console-fra.rpki-client.org