Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ezSD9cJ_n9geh3CznEZinpPj0CQ.roa
File: ezSD9cJ_n9geh3CznEZinpPj0CQ.roa (raw, json)
Hash identifier: a6SN4gLLrFaUHOKPwCmUacXxzLGw0E/Vk6UO1Hjxq6s=
Subject key identifier: 7B:34:83:F5:C2:7F:9F:D8:1E:87:70:B3:9C:46:62:9E:93:E3:D0:24
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018D64431D3FDD339B884299A7FB3D1BE46F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ezSD9cJ_n9geh3CznEZinpPj0CQ.roa
Signing time: Thu 01 Feb 2024 10:42:16 +0000
ROA not before: Thu 01 Feb 2024 10:42:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26383
IP address blocks: 92.114.54.0/24 maxlen: 24
93.113.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 May 2024 05:45:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:64:43:1d:3f:dd:33:9b:88:42:99:a7:fb:3d:1b:e4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 1 10:42:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b3483f5c27f9fd81e8770b39c46629e93e3d024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:df:01:ea:43:0e:b7:a0:8e:93:6a:74:40:c3:
12:aa:e2:e6:65:a3:54:ab:de:90:9d:12:92:40:60:
3c:4f:38:f9:31:c1:a9:83:de:db:f7:89:30:e2:77:
e7:8c:9a:49:e5:92:16:6f:03:86:40:83:c4:77:12:
1b:60:d5:72:dc:4f:97:6e:ef:17:27:e5:da:e9:ec:
6e:65:c3:89:c8:c1:23:e5:e6:14:34:0b:a8:3c:3e:
dc:f7:97:66:39:27:77:e9:db:07:78:2a:87:ac:38:
db:6c:41:3c:eb:06:97:e4:28:20:7e:86:00:cc:98:
84:37:7d:f0:6e:97:d0:bc:ef:94:7a:28:ff:81:89:
3e:24:41:b6:eb:86:d4:fe:b1:ac:43:94:b0:61:d2:
6b:43:0a:d6:36:89:1f:20:e8:58:5a:6f:3f:79:63:
07:21:55:31:55:b0:f5:53:bc:82:86:55:8c:9f:2e:
72:72:74:94:17:1a:c6:53:21:01:e2:8a:8e:9e:0c:
5f:3b:8d:e0:93:6b:e8:33:7e:29:74:c2:c8:ad:c0:
bd:8a:95:ae:fb:a8:02:98:45:40:85:94:49:61:0a:
62:2e:a0:ba:e0:52:a4:84:d7:b9:d1:8e:f8:0b:57:
17:c9:8a:84:e0:29:47:11:01:7d:f5:70:62:63:83:
29:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:34:83:F5:C2:7F:9F:D8:1E:87:70:B3:9C:46:62:9E:93:E3:D0:24
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ezSD9cJ_n9geh3CznEZinpPj0CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.54.0/24
93.113.171.0/24
Signature Algorithm: sha256WithRSAEncryption
60:88:a7:01:29:43:d0:e4:8a:4e:c2:91:12:67:c4:01:c6:97:
fc:54:c0:bb:3e:f4:b5:51:31:6b:aa:c3:52:89:63:59:13:f7:
b2:bd:3e:f9:b4:78:10:b5:4c:ff:0b:b3:dd:90:8a:48:94:32:
0d:02:10:6d:a7:47:5a:c0:d9:f3:fe:6a:bb:9c:31:bc:03:e7:
47:57:7e:8a:81:63:24:af:b1:02:db:5d:70:13:9a:60:e5:15:
66:da:a6:67:8e:bb:e6:0c:5c:58:53:af:3a:6c:c3:0c:64:5b:
85:fd:73:05:4c:cd:f7:97:ad:09:19:ed:d0:a7:c2:12:b2:c1:
52:26:44:a1:05:17:c3:44:e7:25:97:a2:66:02:5d:27:1d:d1:
8f:64:f4:b3:b1:d8:12:3f:cb:f7:76:9c:0f:f2:1c:a0:a0:55:
c2:af:be:14:90:ff:3d:92:34:7f:5a:93:32:d9:44:aa:6e:39:
78:e8:16:49:b9:fb:51:ac:c9:c6:85:e3:6d:33:7e:b7:58:39:
6f:23:f4:5d:39:02:c6:d3:f0:14:cb:d9:9c:16:8d:d0:4f:e8:
57:30:9d:2d:1f:a5:b2:f2:eb:cd:32:8c:e1:39:36:76:13:0d:
86:04:07:9b:75:b8:f6:8b:a2:b3:d6:fd:c7:6b:c7:1d:90:a6:
3d:03:a5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org