Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/EdBgJaknFsYfJqHCTMozUCXT04k.roa
File: EdBgJaknFsYfJqHCTMozUCXT04k.roa (raw, json)
Hash identifier: up1SBlVIv7KbPoNztUXHpaZmtpXzQUYgRiC7pkwH7t4=
Subject key identifier: 11:D0:60:25:A9:27:16:C6:1F:26:A1:C2:4C:CA:33:50:25:D3:D3:89
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 018AEF9BCE50F0567D20FEAFD3D60693FF5F
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/EdBgJaknFsYfJqHCTMozUCXT04k.roa
Signing time: Mon 02 Oct 2023 08:57:59 +0000
ROA not before: Mon 02 Oct 2023 08:57:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48359
IP address blocks: 89.44.240.0/24 maxlen: 24
89.42.44.0/22 maxlen: 22
45.94.214.0/24 maxlen: 24
188.212.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Oct 2023 10:38:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:9b:ce:50:f0:56:7d:20:fe:af:d3:d6:06:93:ff:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Oct 2 08:57:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11d06025a92716c61f26a1c24cca335025d3d389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:09:f6:7d:c8:81:24:c9:2a:55:92:f0:a6:8a:
f0:d9:b7:c8:31:8e:41:11:c4:c1:3a:32:05:a4:3b:
99:6d:af:01:88:27:07:67:20:a6:fb:b6:e0:aa:b8:
16:5e:85:0a:a9:1f:7d:1f:d6:c0:04:35:5d:0f:0e:
33:62:e6:41:fc:8f:53:82:0f:f7:09:37:de:c1:b0:
0f:aa:1d:d1:8b:5a:cc:e1:95:1e:86:74:9a:23:ab:
c6:e1:74:1d:09:75:8a:6f:e8:3f:fa:f1:72:87:10:
68:9a:69:c8:69:b5:8b:8d:b7:54:f7:52:1a:d9:ef:
c5:6b:6d:cf:e6:6a:fb:b9:08:e3:3c:0b:cb:12:f9:
24:b7:0c:c6:05:a8:2d:b6:81:7a:f1:07:83:40:60:
af:35:49:54:3b:b5:15:f1:f6:6d:22:ab:b5:50:2c:
4f:be:9c:35:a6:85:12:d9:ed:70:26:96:60:8f:71:
5f:24:c9:ad:d6:c3:b8:59:f6:29:b3:89:61:8e:b8:
c0:3f:68:f0:4b:0b:31:4d:f2:05:9c:14:8e:8f:41:
9d:59:79:65:18:7e:4f:81:1c:a1:f4:21:87:2e:d8:
82:a7:95:25:ad:fc:94:95:90:05:95:46:2c:6e:de:
97:0c:45:6c:3f:e1:da:9a:46:b4:c2:0b:a2:e7:d6:
f8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D0:60:25:A9:27:16:C6:1F:26:A1:C2:4C:CA:33:50:25:D3:D3:89
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/EdBgJaknFsYfJqHCTMozUCXT04k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.214.0/24
89.42.44.0/22
89.44.240.0/24
188.212.96.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:4d:92:80:b8:52:18:38:c8:1a:cc:58:98:07:24:00:04:7f:
19:b4:9a:6a:06:c7:4c:b8:4b:58:2a:57:b4:1f:39:d4:1b:27:
0a:6b:63:fe:01:26:66:ba:68:7a:8a:b0:64:85:a1:0d:20:cd:
c9:fb:d1:ed:a1:f5:c5:41:13:f8:d7:1a:f1:ec:cb:85:0c:0f:
77:0a:96:90:a1:90:fd:da:ac:7c:38:03:bb:d9:79:ea:cd:af:
c9:d0:de:73:7d:f5:ec:cd:c7:db:fe:61:71:1c:a2:e5:c9:10:
cb:66:03:6b:89:20:86:9b:93:3c:28:21:fa:fd:f4:df:17:a4:
ae:32:d3:da:55:15:fd:e7:74:ee:9d:a0:29:70:ba:8b:6a:7c:
33:ae:bc:03:fb:6d:b6:7b:8b:c1:eb:95:58:49:95:1e:b9:58:
d9:e5:6b:45:fc:24:b3:25:41:91:6c:ab:c5:03:f7:0c:78:cf:
36:b6:1e:bd:5e:53:4f:70:15:bb:56:c6:c2:11:49:2a:b8:ca:
d9:70:80:d7:45:66:5d:db:90:7e:e0:5e:0a:c1:c7:94:98:c5:
6b:4f:86:a8:4c:c0:23:db:2c:2a:41:6d:b7:ed:f5:ff:db:24:
28:fe:cd:aa:9d:24:28:c4:f0:8e:86:86:cc:03:4d:ef:e3:07:
7e:57:a0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:51 2024 by rpki-client on console-fra.rpki-client.org