Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/EBpa5TqnypcU7-oZrDBJL8iralM.roa
File: EBpa5TqnypcU7-oZrDBJL8iralM.roa (raw, json)
Hash identifier: m1S+79B4gewdMguRLeelWjygt0xFu8Ys7Kfx1/hWFmA=
Subject key identifier: 10:1A:5A:E5:3A:A7:CA:97:14:EF:EA:19:AC:30:49:2F:C8:AB:6A:53
Certificate issuer: /CN=05eb12157317bec58fd41d92ff105b361864a6f2
Certificate serial: 0187746E25AB920AE051A3F18C8150E7D348
Authority key identifier: 05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/EBpa5TqnypcU7-oZrDBJL8iralM.roa
Signing time: Wed 12 Apr 2023 07:46:28 +0000
ROA not before: Wed 12 Apr 2023 07:46:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56599
IP address blocks: 195.158.244.0/24 maxlen: 24
194.9.42.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:74:6e:25:ab:92:0a:e0:51:a3:f1:8c:81:50:e7:d3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05eb12157317bec58fd41d92ff105b361864a6f2
Validity
Not Before: Apr 12 07:46:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=101a5ae53aa7ca9714efea19ac30492fc8ab6a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:01:9f:ac:1e:cb:60:3b:40:09:8b:08:50:67:
89:ee:15:c0:8a:21:df:c6:05:63:cb:c5:0c:d2:6f:
51:9b:68:ee:de:6c:bd:5f:33:17:0e:36:12:f5:cb:
d2:17:7c:97:38:59:9e:db:dd:ce:bd:4a:b5:b3:af:
76:b2:eb:ab:ac:a2:a3:fb:f2:d9:7e:56:0e:e5:ea:
77:9c:8a:d6:60:af:92:8c:5c:79:80:64:af:b4:f7:
75:a4:79:80:eb:6c:a0:1b:7a:01:25:79:cc:86:77:
fa:43:ae:77:d4:c7:46:e2:65:49:7c:90:89:b5:55:
1d:1b:88:7e:97:bb:66:b1:8c:b6:ba:3e:b2:80:df:
cf:21:44:5d:99:73:29:93:1e:a4:9b:6f:85:38:e9:
22:76:16:7b:56:e2:ef:4e:2e:76:36:06:3c:af:bb:
8f:e3:8e:38:28:a8:3a:ce:b0:a9:5d:75:6a:60:7f:
fc:99:67:57:10:17:91:50:ad:a3:eb:6a:ed:c6:11:
96:52:bb:15:f7:e9:da:85:b3:a4:9b:a6:0b:21:b1:
7f:15:4f:11:6f:dd:70:2b:e7:05:1b:3d:73:de:a0:
b2:ed:0a:9c:41:39:23:24:cd:4a:4f:72:8b:eb:bd:
c0:61:b9:40:40:02:06:e1:b4:2d:ff:40:a3:02:a4:
40:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1A:5A:E5:3A:A7:CA:97:14:EF:EA:19:AC:30:49:2F:C8:AB:6A:53
X509v3 Authority Key Identifier:
keyid:05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/EBpa5TqnypcU7-oZrDBJL8iralM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.42.0/23
195.158.244.0/24
Signature Algorithm: sha256WithRSAEncryption
80:dc:dc:14:e6:96:e8:f3:c4:2e:df:51:20:90:b0:4f:59:e3:
5a:6b:15:64:c2:84:08:ab:9b:9d:23:71:37:a9:96:14:36:db:
a5:b6:c9:3d:d4:77:8f:37:54:bf:ee:1d:27:53:4f:1e:d1:66:
c6:9a:b5:13:d4:bb:45:b5:ea:4e:a0:56:17:dc:a6:6a:c2:c0:
8b:e9:9b:14:a2:89:cc:54:46:ee:f4:c8:8e:05:55:67:0b:b5:
06:59:43:f0:42:5e:f4:88:ef:a9:b5:78:d9:6a:8b:52:52:c0:
8e:79:ed:2e:aa:07:9e:09:5b:c3:4e:2a:8b:6b:30:b1:e2:c1:
94:f5:7a:80:ed:56:ea:77:d3:81:4a:c6:70:3b:37:15:35:d6:
06:af:de:9a:a7:c3:70:dd:13:ce:2f:f6:4c:eb:18:74:35:34:
c5:dd:4e:ab:12:cb:ea:c9:53:74:76:b4:3e:dc:97:64:57:7d:
ab:ad:de:d6:ef:ff:22:19:1e:0d:fa:4f:bf:34:89:a3:29:23:
62:81:24:ac:6f:40:8d:70:a7:42:36:df:35:1a:5e:df:18:7b:
b3:41:fb:95:f3:6c:83:ef:07:84:a0:e2:ff:ce:64:ac:18:02:
5f:94:19:cd:27:9e:b3:2d:45:d5:20:3a:d3:ad:57:6b:35:b4:
f2:6d:52:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:13 2024 by rpki-client on console-fra.rpki-client.org