Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/EwonWlWfVSLWGB1iY7svNJGMeik.roa
File: EwonWlWfVSLWGB1iY7svNJGMeik.roa (raw, json)
Hash identifier: UBwqNVtc28uZhQFYASdsRXdlRSI8fGEN50XN1txR1/E=
Subject key identifier: 13:0A:27:5A:55:9F:55:22:D6:18:1D:62:63:BB:2F:34:91:8C:7A:29
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0185AAC65C124AE1C4807D746EFBBC1630B6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/EwonWlWfVSLWGB1iY7svNJGMeik.roa
Signing time: Fri 13 Jan 2023 10:56:44 +0000
ROA not before: Fri 13 Jan 2023 10:56:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 45.88.15.0/24 maxlen: 24
45.88.12.0/24 maxlen: 24
45.88.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Apr 2023 13:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:aa:c6:5c:12:4a:e1:c4:80:7d:74:6e:fb:bc:16:30:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 13 10:56:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=130a275a559f5522d6181d6263bb2f34918c7a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:29:f7:c3:36:5c:3d:ed:3b:2a:81:7a:74:e0:
38:13:d5:f4:7b:c1:73:95:56:17:a1:7a:76:46:5a:
be:e8:15:cb:c9:7a:67:9e:5f:93:7a:b9:25:1c:d5:
6a:b8:5c:97:8b:6c:70:6d:0a:56:ba:b3:7d:25:61:
56:44:ac:bb:5c:0d:48:b6:54:21:9e:4e:cd:02:5b:
c1:af:3e:80:e0:66:7a:7a:3a:49:b2:ad:10:14:62:
e5:de:f0:ce:a0:59:94:38:f2:fa:37:ea:bf:25:23:
cf:cf:5f:97:5e:ea:02:d3:6f:df:6c:26:de:8b:be:
80:50:ef:02:d5:0b:07:11:33:d5:85:ba:e7:32:ec:
b4:8c:15:fa:5b:64:25:e8:f3:46:55:ab:18:f6:8c:
d5:21:3d:69:c2:c0:8b:d6:2b:43:52:c9:13:4f:3c:
e7:e4:8b:8b:b0:38:90:41:b2:3a:ee:80:c3:00:0b:
43:9a:d8:7f:c9:60:50:24:4e:2c:a9:43:01:ea:30:
a3:58:61:5a:89:af:45:49:6f:92:62:a9:0a:e5:cb:
a0:7b:52:98:87:57:3a:03:f8:e6:a8:6b:14:e3:d2:
14:03:e5:f3:9d:d1:0c:7c:f5:ad:fb:6d:b9:ac:6a:
7b:88:16:ec:62:da:f1:e7:bf:36:29:30:e1:be:2c:
11:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0A:27:5A:55:9F:55:22:D6:18:1D:62:63:BB:2F:34:91:8C:7A:29
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/EwonWlWfVSLWGB1iY7svNJGMeik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.12.0/23
45.88.15.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:53:0d:e5:9f:cb:4f:2f:d3:a0:05:cc:a4:37:5c:e6:31:c6:
8a:b9:a2:eb:23:b9:c2:c2:8f:9a:7d:62:35:89:f4:d9:66:fb:
91:68:1b:e6:77:bd:99:d7:fb:90:df:8c:8a:21:71:d7:31:ae:
e0:fa:f7:c5:98:f8:c8:4f:20:45:8c:91:5f:8d:28:00:78:92:
64:29:1b:21:77:e9:db:64:e4:4c:8b:f1:86:71:4e:c6:bc:93:
c8:db:67:47:19:cf:ff:3e:11:55:f1:ba:3b:39:ea:c5:3e:c1:
d8:98:1f:c0:9b:c9:0f:c7:ad:cb:97:93:3d:64:e6:ee:79:90:
c7:99:37:4e:17:69:89:e7:5e:d5:45:4e:04:76:12:db:7d:f7:
6b:a5:d4:a0:6a:e9:c2:88:4e:aa:8f:5a:f0:0e:5d:56:b9:19:
b8:55:22:57:c4:4a:52:8b:28:0f:27:c8:20:30:34:3a:62:f7:
f5:44:63:48:0a:77:d8:c0:9d:89:5e:0d:f3:e2:14:36:fa:5c:
e0:bd:65:63:a9:22:e3:1d:6f:f7:e8:2e:7a:12:51:b5:73:9e:
65:a8:96:32:d6:11:e6:82:1a:07:cc:b8:52:54:31:10:8e:f6:
e4:73:2a:82:ca:94:c8:63:55:d7:80:d6:d8:b6:35:70:78:54:
69:60:ff:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org