Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/EQP-BwX0S1gWpRfn-uFhFJf0SnU.roa
File: EQP-BwX0S1gWpRfn-uFhFJf0SnU.roa (raw, json)
Hash identifier: 4e2ey1vGnir6LvY2qGdrEN1JAACvGSU7Ai8sOoYOc2s=
Subject key identifier: 11:03:FE:07:05:F4:4B:58:16:A5:17:E7:FA:E1:61:14:97:F4:4A:75
Certificate issuer: /CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8
Certificate serial: 01856F1D92D5CE8703F7EC1BB597F7B44C56
Authority key identifier: 3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/EQP-BwX0S1gWpRfn-uFhFJf0SnU.roa
Signing time: Sun 01 Jan 2023 20:54:47 +0000
ROA not before: Sun 01 Jan 2023 20:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62064
IP address blocks: 185.47.32.0/22 maxlen: 24
188.213.8.0/21 maxlen: 24
188.209.112.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:92:d5:ce:87:03:f7:ec:1b:b5:97:f7:b4:4c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8
Validity
Not Before: Jan 1 20:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1103fe0705f44b5816a517e7fae1611497f44a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9f:77:07:07:95:b2:88:73:51:93:9f:ac:90:
c5:26:a7:86:51:3f:3c:d6:27:eb:77:67:4f:98:f4:
29:8b:ad:b3:fc:77:71:0a:d7:f0:16:6f:32:f1:18:
4c:ba:bc:d1:fc:d0:21:c4:82:65:53:32:1a:0f:54:
f8:4a:22:99:5a:8d:3c:fc:98:b8:b3:80:f3:c2:07:
63:06:a6:c0:6f:6e:0a:96:74:f3:18:88:6c:0e:f7:
27:5e:af:61:ff:32:0b:23:5f:51:e1:7a:f3:ac:0a:
28:fc:db:11:f8:5e:75:66:6f:03:23:ac:ce:2f:4a:
d4:0c:de:19:e2:03:da:c6:88:1c:61:ef:83:72:5f:
f9:17:fc:67:e7:45:e0:c9:13:02:1a:4c:7a:11:b2:
74:c2:71:b1:20:59:e4:92:af:f8:f1:3f:f8:a2:01:
d6:f6:38:23:ed:f4:39:7a:69:9e:dd:ab:0b:91:02:
d4:13:84:49:96:74:f5:72:de:f6:e4:f4:73:e3:b3:
db:ae:91:57:c5:7c:70:bd:1e:49:9e:29:2e:a2:46:
ec:03:1f:9f:5f:5d:79:24:2d:48:a1:51:c3:ac:5e:
28:11:49:f4:03:f7:1d:f2:9c:90:fc:2a:9a:1b:4e:
d2:90:1c:77:c0:8a:bc:d7:69:b9:ab:8a:27:1e:4b:
a1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:03:FE:07:05:F4:4B:58:16:A5:17:E7:FA:E1:61:14:97:F4:4A:75
X509v3 Authority Key Identifier:
keyid:3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/EQP-BwX0S1gWpRfn-uFhFJf0SnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.32.0/22
188.209.112.0/22
188.213.8.0/21
Signature Algorithm: sha256WithRSAEncryption
ab:21:ea:b8:9e:02:83:58:22:e8:03:ac:0e:66:1e:30:78:1e:
e6:fb:25:48:d8:16:6c:47:19:3e:36:b7:d2:e3:e2:7b:d4:d5:
f2:4d:96:09:03:96:27:61:d3:0c:7e:84:53:ef:91:d4:99:5d:
d6:c1:7e:ae:a4:2d:91:e1:b6:5b:50:7f:f0:b5:95:0b:03:84:
a3:07:5a:70:af:bc:01:9c:c9:a5:ac:8a:a0:d8:9a:00:d3:1b:
d2:7c:5e:4c:5a:a5:9d:a2:88:31:7a:01:b5:6c:67:6d:a2:4d:
78:f1:41:89:04:96:9c:b7:7f:8f:57:2f:af:f0:15:4c:e5:17:
96:05:c4:6d:92:5a:b2:5b:5c:78:5b:d2:27:57:da:8e:3f:67:
05:d9:97:18:d3:82:37:dd:d7:66:4e:4d:8c:ec:cc:04:c3:9a:
b8:d8:f2:4d:13:2f:da:f8:5e:45:b8:9e:49:c0:df:96:9a:a1:
a2:d0:63:cc:53:dd:94:3d:39:4e:5e:d5:65:0e:51:e5:1a:b9:
75:18:1d:23:87:b3:9a:a4:57:d1:f3:91:02:65:f9:22:3b:e9:
34:26:de:2e:36:6f:f1:5d:ac:74:88:6e:55:05:56:62:b6:e9:
bb:9d:b5:03:45:02:f3:80:10:20:9c:ee:54:ea:d1:ed:89:32:
88:b1:13:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:02 2024 by rpki-client on console-ams.rpki-client.org