Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/eHs7Sl-LY4nKOFB255X-EakNTEw.roa
File: eHs7Sl-LY4nKOFB255X-EakNTEw.roa (raw, json)
Hash identifier: JHDc0eWCyOd3sbNLBWB6aZEdRHeriWCWZvW4Pn36XnI=
Subject key identifier: 78:7B:3B:4A:5F:8B:63:89:CA:38:50:76:E7:95:FE:11:A9:0D:4C:4C
Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Certificate serial: 0185710BF047C269C387EB75F9DBD9DC24FA
Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/eHs7Sl-LY4nKOFB255X-EakNTEw.roa
Signing time: Mon 02 Jan 2023 05:54:45 +0000
ROA not before: Mon 02 Jan 2023 05:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43833
IP address blocks: 185.250.196.0/23 maxlen: 23
89.29.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0b:f0:47:c2:69:c3:87:eb:75:f9:db:d9:dc:24:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Validity
Not Before: Jan 2 05:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=787b3b4a5f8b6389ca385076e795fe11a90d4c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2c:c9:05:1a:d5:67:d3:e2:09:48:32:dc:90:
8c:89:1f:21:a0:e7:8c:c2:4b:02:f9:1c:a3:df:85:
ea:a6:80:30:f2:04:f3:1e:e1:eb:e4:28:53:e7:2b:
9c:84:21:82:b1:92:2c:97:ea:5b:c3:22:d9:c7:10:
fd:9e:a4:1b:fc:4c:49:cb:18:3d:62:9f:48:b5:36:
e7:09:dd:88:ad:d5:14:8d:b1:61:0b:62:90:b5:20:
01:e9:40:dc:b1:4a:bc:35:ff:0b:4c:4a:94:d0:df:
26:a1:68:e6:3f:2f:cd:30:f8:12:0f:9d:94:7c:d5:
cd:7b:9c:8d:fd:61:94:89:56:4f:c2:e3:20:b7:87:
9f:60:1a:0c:5a:b4:f8:f0:92:aa:6c:ea:51:57:cb:
c8:95:e1:d4:01:74:6f:69:5c:f0:9e:bf:74:44:dd:
4e:e9:a4:0d:40:e4:e2:58:b8:3f:e9:3c:44:4f:8b:
f5:48:99:10:a9:01:d3:47:86:98:53:66:3c:dc:5d:
7c:bc:38:b4:99:66:e7:e5:dc:c2:a0:b0:9a:5d:77:
7b:44:5f:ea:84:ee:ba:55:88:c4:7f:5f:89:86:17:
00:f1:c6:69:fc:c2:8d:fa:cf:f8:0a:4d:f9:31:63:
ed:95:b9:47:2c:4f:3f:ea:7e:c3:01:73:72:46:f9:
4d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7B:3B:4A:5F:8B:63:89:CA:38:50:76:E7:95:FE:11:A9:0D:4C:4C
X509v3 Authority Key Identifier:
keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/eHs7Sl-LY4nKOFB255X-EakNTEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.29.203.0/24
185.250.196.0/23
Signature Algorithm: sha256WithRSAEncryption
42:3d:73:d7:28:e4:fb:a0:42:19:5d:81:72:ed:d0:8a:a7:50:
61:14:a5:03:f4:92:76:3b:d0:3e:8e:5c:1c:64:fe:2e:f3:10:
d6:3d:3f:b6:71:1b:65:d5:c7:3e:b8:e3:5d:4c:29:a8:74:e3:
27:63:3d:8b:a9:56:63:61:3e:c5:ac:69:cd:29:ae:62:a8:f9:
bd:45:eb:03:db:ce:d1:84:bd:62:47:53:1a:cf:ef:3a:b2:1b:
6a:44:9f:06:06:3d:07:80:ab:14:b7:a6:14:30:3c:ca:13:dc:
d9:8d:23:ad:05:de:5e:59:d8:08:62:df:d6:b0:89:3b:7c:a7:
09:9b:24:8d:40:e5:f0:89:00:b3:cb:72:11:5b:55:9e:74:83:
e5:0e:5c:f6:75:33:c6:d5:8a:c6:05:83:ae:ab:e8:4c:9e:cd:
a8:86:d7:f6:70:72:38:1c:0a:1e:5f:b7:6b:b4:9b:98:43:9a:
61:fd:69:1c:b3:94:a2:c1:e0:3b:da:88:92:bf:d5:ae:4e:ab:
54:ce:3f:19:40:cc:fb:ea:8f:85:96:dc:5d:d7:71:06:25:79:
9f:58:42:89:e8:e5:8e:ca:94:25:ad:49:2e:fb:8b:8c:37:bc:
8d:8b:b8:0f:ba:65:ff:fd:8a:ab:d5:47:1a:0c:66:71:7f:c8:
d7:8a:30:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 22 08:24:55 2023 by rpki-client on console-fra.rpki-client.org