Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/EzXvKTC27VsK20RM6n93crrdrCA.roa
File: EzXvKTC27VsK20RM6n93crrdrCA.roa (raw, json)
Hash identifier: V9HkONXHD/dzmSr5hfvYZoOlvwZgB5yqdqxVIbsq+8Y=
Subject key identifier: 13:35:EF:29:30:B6:ED:5B:0A:DB:44:4C:EA:7F:77:72:BA:DD:AC:20
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0191487CC15F42A410FD5B8BB2E9BD9B3F13
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/EzXvKTC27VsK20RM6n93crrdrCA.roa
Signing time: Mon 12 Aug 2024 21:27:01 +0000
ROA not before: Mon 12 Aug 2024 21:27:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 45.87.254.0/24 maxlen: 24
45.91.9.0/24 maxlen: 24
77.83.192.0/24 maxlen: 24
77.83.194.0/24 maxlen: 24
77.83.195.0/24 maxlen: 24
146.255.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Aug 2024 09:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:48:7c:c1:5f:42:a4:10:fd:5b:8b:b2:e9:bd:9b:3f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 12 21:27:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1335ef2930b6ed5b0adb444cea7f7772baddac20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:49:17:e9:9c:7f:8f:b8:d7:aa:c4:5b:26:87:
6e:da:41:35:50:9c:9b:5c:7d:6c:87:6a:ee:a3:5b:
27:71:8b:10:c7:43:4b:f4:43:ed:e1:ee:c6:e4:f4:
50:3d:0b:81:0b:1b:89:d3:3d:09:11:2c:28:e0:69:
4e:02:dd:d4:b3:fd:ab:ce:85:85:50:40:40:ab:4b:
a0:29:28:a2:05:79:a7:ce:37:df:3a:69:28:28:39:
6b:c7:3c:3c:50:70:d2:c9:bf:97:75:fe:e3:8b:be:
23:ca:55:f3:48:22:68:c1:0e:78:d8:f4:49:24:df:
3d:00:b1:65:86:d1:db:37:80:b1:35:1b:e5:7e:e6:
5f:22:eb:d7:e8:05:72:07:79:b5:0f:b7:09:63:74:
1e:e5:94:ef:e1:1a:c6:ad:a1:db:76:ba:81:c3:21:
36:b5:32:88:b1:f5:76:ca:fd:97:86:bc:ae:47:d8:
ca:73:da:ef:75:4a:a2:41:98:e7:46:70:df:be:fb:
e3:99:66:cf:92:40:ba:79:f9:80:8b:e7:3a:a6:e4:
4a:a4:73:1e:8d:97:70:2b:71:f5:7e:6b:7e:d5:76:
3f:c9:c2:45:75:02:ca:7c:98:33:ac:d2:03:a2:7d:
b9:fc:7c:c6:8d:47:f2:64:55:56:47:e0:d8:66:c3:
c0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:35:EF:29:30:B6:ED:5B:0A:DB:44:4C:EA:7F:77:72:BA:DD:AC:20
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/EzXvKTC27VsK20RM6n93crrdrCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.254.0/24
45.91.9.0/24
77.83.192.0/24
77.83.194.0/23
146.255.185.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:20:e5:34:c2:51:9e:27:31:61:88:52:0b:15:fb:ba:25:87:
0a:50:7f:35:ad:6d:6f:2a:94:79:02:c6:60:e8:42:17:d9:21:
8c:bf:0f:38:47:ed:2a:cd:0f:ea:e9:40:73:fe:1c:57:d8:a8:
62:15:6e:d3:83:75:87:78:ce:09:6f:75:ac:ab:0d:d7:20:90:
59:4d:b9:28:a5:e2:dd:13:aa:49:3f:96:f5:b8:0c:7a:a7:ed:
08:d9:d9:eb:14:27:18:ba:4e:56:03:9f:53:fb:b2:b9:99:26:
df:80:c6:b6:6f:d1:72:c2:2e:58:14:4c:d6:49:93:d2:bc:7a:
ba:ba:95:ec:e0:01:78:c1:9f:51:86:91:02:0b:e5:08:7f:f5:
30:fa:e9:97:f8:81:04:f3:97:bd:21:8b:2f:4a:6b:40:ce:b2:
21:32:5a:03:d8:ae:e4:dd:fa:5d:f5:fa:93:48:d8:4c:7e:e7:
e5:ad:90:53:0a:5e:25:9b:e4:63:77:6a:77:54:2f:09:51:34:
ef:59:a0:55:6c:cd:09:80:5d:31:8a:86:77:05:a3:47:fc:6d:
a3:4a:c9:89:33:f8:b7:5a:b9:7a:a1:2b:aa:af:ff:56:31:02:
1c:99:6b:40:6b:7e:12:e8:c0:60:02:ee:20:29:42:35:ed:9e:
d4:4f:0e:65
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZFIfMFfQqQQ/VuLsum9mz8TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjQwODEyMjEyNzAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzM1ZWYyOTMwYjZlZDViMGFkYjQ0NGNlYTdmNzc3MmJhZGRhYzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEkX6Zx/j7jXqsRbJodu2kE1UJyb
XH1sh2ruo1sncYsQx0NL9EPt4e7G5PRQPQuBCxuJ0z0JESwo4GlOAt3Us/2rzoWF
UEBAq0ugKSiiBXmnzjffOmkoKDlrxzw8UHDSyb+Xdf7ji74jylXzSCJowQ542PRJ
JN89ALFlhtHbN4CxNRvlfuZfIuvX6AVyB3m1D7cJY3Qe5ZTv4RrGraHbdrqBwyE2
tTKIsfV2yv2XhryuR9jKc9rvdUqiQZjnRnDfvvvjmWbPkkC6efmAi+c6puRKpHMe
jZdwK3H1fmt+1XY/ycJFdQLKfJgzrNIDon25/HzGjUfyZFVWR+DYZsPAWwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFBM17ykwtu1bCttETOp/d3K63awgMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvRXpYdktUQzI3VnNLMjBSTTZuOTNjcnJkckNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALVf+AwQA
LVsJAwQATVPAAwQBTVPCAwQAkv+5MA0GCSqGSIb3DQEBCwUAA4IBAQALIOU0wlGe
JzFhiFILFfu6JYcKUH81rW1vKpR5AsZg6EIX2SGMvw84R+0qzQ/q6UBz/hxX2Khi
FW7Tg3WHeM4Jb3Wsqw3XIJBZTbkopeLdE6pJP5b1uAx6p+0I2dnrFCcYuk5WA59T
+7K5mSbfgMa2b9Fywi5YFEzWSZPSvHq6upXs4AF4wZ9RhpECC+UIf/Uw+umX+IEE
85e9IYsvSmtAzrIhMloD2K7k3fpd9fqTSNhMfuflrZBTCl4lm+Rjd2p3VC8JUTTv
WaBVbM0JgF0xioZ3BaNH/G2jSsmJM/i3Wrl6oSuqr/9WMQIcmWtAa34S6MBgAu4g
KUI17Z7UTw5l
-----END CERTIFICATE-----
Generated at Tue Aug 27 11:52:36 2024 by rpki-client on console-fra.rpki-client.org