Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/eEv6MOZAELPK1UGhmfedWCZBcpQ.roa
File: eEv6MOZAELPK1UGhmfedWCZBcpQ.roa (raw, json)
Hash identifier: BYuK9N7MnkMWAd2/T90S/SuemfAw1FSFKwot8oDbTfE=
Subject key identifier: 78:4B:FA:30:E6:40:10:B3:CA:D5:41:A1:99:F7:9D:58:26:41:72:94
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018A941DB79B4B8594590A9B8C74FA524CDD
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/eEv6MOZAELPK1UGhmfedWCZBcpQ.roa
Signing time: Thu 14 Sep 2023 14:34:50 +0000
ROA not before: Thu 14 Sep 2023 14:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36113
IP address blocks: 2.57.242.0/24 maxlen: 24
92.114.93.0/24 maxlen: 24
89.43.62.0/24 maxlen: 24
89.40.215.0/24 maxlen: 24
45.88.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Sep 2023 08:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:94:1d:b7:9b:4b:85:94:59:0a:9b:8c:74:fa:52:4c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 14 14:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=784bfa30e64010b3cad541a199f79d5826417294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:14:e8:f9:d6:00:c5:ca:85:59:04:d8:92:f4:
59:d6:f3:23:69:eb:0b:27:1d:cd:15:c4:41:0d:ba:
4c:76:b0:c0:26:32:64:c2:76:06:60:1b:48:59:25:
4f:3d:ce:06:ff:e7:4d:5e:24:aa:26:86:d0:94:57:
63:63:4a:b9:94:8d:59:6e:37:8c:7d:f8:15:13:ed:
e7:f1:87:8b:9f:47:e7:a1:5d:cc:97:f1:82:25:87:
89:3e:97:af:47:bb:b7:7a:c1:dd:26:24:4d:38:a4:
6a:71:1f:95:d0:1c:76:a6:ca:19:d7:01:9c:54:51:
98:b3:ae:79:01:9f:54:8b:a7:05:14:81:50:9a:6b:
75:21:97:b6:95:0e:c0:a6:6d:46:94:97:40:fa:3a:
33:cb:ac:c7:d3:82:52:49:e4:06:7d:1c:17:6d:73:
17:91:b2:47:fb:7a:3b:1f:3d:c4:30:6d:6a:05:22:
bd:3c:ce:d9:fb:54:96:8b:59:f2:41:00:a3:58:f2:
5c:64:6a:42:71:b5:ed:88:04:72:50:54:94:2f:93:
a0:d0:64:74:c6:fd:b7:89:3c:bc:1f:31:31:78:dc:
84:aa:e2:28:e9:33:88:f5:2b:05:61:f7:5f:59:60:
d9:bc:db:f7:03:45:37:58:d5:d2:e6:cc:4a:40:26:
1a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4B:FA:30:E6:40:10:B3:CA:D5:41:A1:99:F7:9D:58:26:41:72:94
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/eEv6MOZAELPK1UGhmfedWCZBcpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.242.0/24
45.88.14.0/24
89.40.215.0/24
89.43.62.0/24
92.114.93.0/24
Signature Algorithm: sha256WithRSAEncryption
11:bd:6e:fa:ed:f1:2f:d7:08:f7:f4:95:0d:2d:10:29:5f:02:
e4:5d:f2:ee:6c:f4:6c:3b:f2:ff:c1:91:48:6f:dd:9a:d2:88:
76:8d:95:97:ce:9a:57:92:f0:e2:6d:85:5f:d9:62:5f:f8:b4:
f9:b6:64:05:00:a0:6c:97:fa:82:8f:82:ee:d0:69:ca:a3:96:
a6:cb:9b:f9:16:9f:6a:f5:1e:33:27:1d:ee:f8:2b:24:a9:13:
be:04:a0:eb:13:a1:e4:64:54:89:b5:66:90:c8:37:d3:04:05:
38:46:4f:6a:17:67:35:fc:49:70:29:9b:50:9a:0d:62:60:a9:
6f:48:09:04:45:a2:d8:f5:6a:a2:d1:64:1a:ce:a3:61:97:d5:
c8:77:19:02:0d:9c:36:d3:be:5d:9a:5e:58:18:60:03:82:e1:
93:c3:81:f6:e6:ae:9f:b4:5f:56:61:06:9f:7d:6b:a1:76:6f:
22:68:4d:09:0a:34:eb:ac:45:da:50:6b:92:c4:69:0a:68:ae:
d9:a4:b1:b3:87:f0:db:c5:2f:a4:38:79:e0:1e:20:26:53:71:
7a:10:c2:52:c8:d6:e9:eb:6d:c1:4d:af:c4:37:4f:cc:93:ef:
06:26:90:ae:31:7d:7d:51:ea:46:dc:7d:87:b6:ba:7d:e9:0f:
1e:d0:9d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org