Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/EKAuH3nOtB-oJhylfNIEdp51JCo.roa
File: EKAuH3nOtB-oJhylfNIEdp51JCo.roa (raw, json)
Hash identifier: 5NRfv0+bQw3EZm3bKe9AVAX4hGGH86x7LtAy9UPMwc4=
Subject key identifier: 10:A0:2E:1F:79:CE:B4:1F:A8:26:1C:A5:7C:D2:04:76:9E:75:24:2A
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018572BA51458279715D68239F6E79B5F01B
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/EKAuH3nOtB-oJhylfNIEdp51JCo.roa
Signing time: Mon 02 Jan 2023 13:44:51 +0000
ROA not before: Mon 02 Jan 2023 13:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57707
IP address blocks: 109.248.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:51:45:82:79:71:5d:68:23:9f:6e:79:b5:f0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10a02e1f79ceb41fa8261ca57cd204769e75242a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ac:f1:12:20:7d:a9:86:51:d7:61:e9:b9:bc:
71:e0:d3:cc:f4:e4:d8:ee:1e:0f:48:95:28:51:f1:
4b:5b:f3:b5:c2:e4:90:7e:bc:f7:70:e0:c6:23:41:
52:d9:a5:96:a0:9c:ee:7c:fa:8b:d0:ad:02:c2:46:
70:cb:1b:17:40:ed:c9:b2:6b:2d:4c:a2:ef:52:8e:
54:35:78:f9:e8:1f:7f:52:d0:47:0d:15:40:ca:7a:
bb:18:fa:0f:fd:e5:6e:21:30:f1:45:ef:d6:f5:d7:
cd:2d:62:1c:e8:ca:05:02:c0:86:03:74:9e:7e:93:
1e:ed:95:ac:54:9d:5b:4a:ae:a1:d6:46:3a:3f:30:
7b:60:24:2c:16:09:66:6d:88:9e:44:4b:40:5c:7b:
aa:45:d2:14:fe:ba:34:e3:9a:ec:8a:69:24:d9:d4:
72:3e:e6:45:14:df:5d:b4:9f:3d:9b:f9:c4:a2:c0:
00:3b:5d:13:18:96:5d:61:c8:f0:86:1b:10:93:5a:
ec:cb:96:d0:5d:d8:0f:63:73:7d:51:de:87:48:c0:
d2:58:56:b0:91:db:11:b9:35:82:46:3d:c4:aa:45:
4f:56:39:c6:1e:33:a6:a7:d3:e2:42:59:a5:72:15:
ac:1e:d8:c8:e7:ce:d3:d7:a7:83:98:a8:4b:6c:68:
eb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A0:2E:1F:79:CE:B4:1F:A8:26:1C:A5:7C:D2:04:76:9E:75:24:2A
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/EKAuH3nOtB-oJhylfNIEdp51JCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.248.251.0/24
Signature Algorithm: sha256WithRSAEncryption
89:eb:0c:3d:e3:7b:2b:55:72:79:92:73:22:15:e8:dd:1c:32:
25:ed:cb:3d:f6:2a:f1:c1:a9:cf:0c:b6:43:69:c4:28:28:e2:
8c:d1:1c:ad:eb:72:bc:3c:eb:a5:a2:da:ac:ad:94:77:63:68:
f6:05:6d:8e:5c:bc:b0:f2:63:0b:bb:9d:e9:cc:7a:f9:fc:9d:
7b:50:7f:4c:31:c6:28:c6:ca:a2:88:a8:10:0b:c2:8c:f3:f7:
3c:c2:2c:b8:df:d6:6c:c9:5d:3f:e9:bd:6c:e4:7f:f3:c2:60:
0c:3b:f6:88:a4:c9:de:80:aa:a0:50:4c:b0:62:55:4a:f9:fa:
b8:ed:8a:6f:a2:ff:91:6c:07:a2:1e:cb:1c:ed:9f:78:d3:87:
35:77:05:15:4c:5d:bc:ec:41:12:c6:0d:6d:5c:9e:69:64:1a:
51:9c:25:4f:f9:ac:eb:63:d3:2b:af:5f:cc:93:50:a0:30:ab:
81:b6:2d:55:d0:96:15:1b:1c:9e:b1:fd:b8:e9:93:a3:c1:fe:
f5:21:32:5a:a8:74:0e:83:d2:7c:99:a3:34:01:57:22:28:6b:
aa:55:24:d6:59:14:fc:84:55:70:06:57:aa:18:95:a4:67:65:
17:97:f7:e6:af:35:7b:e3:96:75:ac:80:1d:69:c9:35:78:b9:
b4:3f:6f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:58 2024 by rpki-client on console-ams.rpki-client.org