Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/EebgQn4GETnjNnXrEZgiYOSID9E.roa
File: EebgQn4GETnjNnXrEZgiYOSID9E.roa (raw, json)
Hash identifier: xeOKrdK98cINCNmghYmy+iYBrJtGjJC0FamhoNvyIsM=
Subject key identifier: 11:E6:E0:42:7E:06:11:39:E3:36:75:EB:11:98:22:60:E4:88:0F:D1
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 018760AFBC4164FF8650E34F4B602FCD2976
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/EebgQn4GETnjNnXrEZgiYOSID9E.roa
Signing time: Sat 08 Apr 2023 11:45:42 +0000
ROA not before: Sat 08 Apr 2023 11:45:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212728
IP address blocks: 62.182.173.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:60:af:bc:41:64:ff:86:50:e3:4f:4b:60:2f:cd:29:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Apr 8 11:45:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11e6e0427e061139e33675eb11982260e4880fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8e:1f:de:81:92:8c:e3:7a:3b:1d:62:56:1b:
94:af:0c:68:8e:8b:bb:37:0f:e8:00:06:41:64:f8:
c6:c4:e8:7f:4b:75:43:8a:4f:10:2f:7a:24:53:8d:
b6:df:d1:88:31:88:d2:a4:a3:a3:63:ef:f4:dc:a1:
12:ec:b5:c6:b0:64:a5:f3:99:d5:c2:5e:da:69:42:
5b:33:79:80:87:4c:8c:8b:53:ee:1f:7d:85:39:2f:
fe:69:d8:5f:f6:21:fc:fa:9b:d7:02:a2:60:76:59:
47:9a:2a:b6:c6:e2:d7:89:3f:b9:73:5d:0b:8a:2b:
38:e5:57:0e:9e:a8:61:68:0d:7d:8e:01:d1:dc:f4:
8c:49:5b:07:40:0a:c9:65:b2:04:f1:d3:ae:67:38:
af:aa:9c:ff:0c:b1:0c:34:fa:10:73:d7:cd:8f:a1:
df:7c:0f:c2:91:ac:25:5f:fb:7f:bd:65:43:17:07:
c8:9d:bd:fa:44:33:2d:4c:2a:53:a8:a5:7a:1a:5d:
2f:b9:07:7c:36:53:1d:86:31:e1:e6:32:36:da:e5:
f2:c1:f0:78:b4:e3:fe:46:7f:7a:e3:df:62:28:2e:
ef:f7:eb:1b:44:2e:69:a3:c7:48:78:64:81:53:cc:
71:0f:9c:8f:59:8b:78:92:7e:69:50:8c:b4:d5:e7:
e9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E6:E0:42:7E:06:11:39:E3:36:75:EB:11:98:22:60:E4:88:0F:D1
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/EebgQn4GETnjNnXrEZgiYOSID9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.173.0/24
Signature Algorithm: sha256WithRSAEncryption
17:02:94:42:61:9b:94:ea:7c:7a:c5:05:97:59:3b:c6:d3:20:
13:03:4e:a9:88:a3:05:e5:94:ab:bb:57:fb:df:00:6a:5a:8e:
76:61:fd:86:cb:d8:3b:61:8d:8c:4d:04:9d:73:6b:29:55:ef:
6e:46:78:44:cd:7c:c9:70:72:48:f6:00:a2:3c:e5:02:a0:c8:
e5:bb:78:a2:b6:d5:f8:a4:69:69:ce:8a:d1:69:3b:1e:17:c5:
f4:7b:fe:52:5d:cc:06:3e:c5:22:e0:45:91:7c:23:65:21:7e:
9d:18:72:af:e1:eb:2e:b1:27:7b:72:ed:e3:bc:19:59:5f:30:
d3:06:c4:10:69:d4:21:e1:d7:ba:ee:a6:a0:ee:75:8c:48:2e:
c8:2a:d0:d7:ef:3b:5e:25:6d:09:4c:54:0d:d3:54:4b:ce:8f:
39:de:42:40:bd:f9:a1:e5:f6:e8:de:bb:50:22:01:30:b0:9b:
5f:e3:c4:f6:e2:30:d8:a6:9f:6b:02:fc:c4:dc:0c:4a:90:9e:
80:0b:cd:f2:c8:56:40:5c:a9:38:b6:1e:ae:00:5f:3d:3e:b6:
1a:0f:ba:44:ab:80:e9:0f:09:b5:a3:0c:49:94:d9:72:e7:6d:
2e:59:45:ed:30:3f:99:36:55:32:10:58:fc:54:eb:4d:99:00:
d4:ca:c4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 25 08:30:03 2023 by rpki-client on console-ams.rpki-client.org