Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/eNG-ZMF2LEy9YEZHEtOqr7wTL3Y.roa
File: eNG-ZMF2LEy9YEZHEtOqr7wTL3Y.roa (raw, json)
Hash identifier: 2XXTQyQqIQHkkJg5IXykuOZ/DoEmGLCPGfoGk4uW+v4=
Subject key identifier: 78:D1:BE:64:C1:76:2C:4C:BD:60:46:47:12:D3:AA:AF:BC:13:2F:76
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 01856F9DC0DFD702BD4DB4181F05C7CFDFC6
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/eNG-ZMF2LEy9YEZHEtOqr7wTL3Y.roa
Signing time: Sun 01 Jan 2023 23:14:47 +0000
ROA not before: Sun 01 Jan 2023 23:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43331
IP address blocks: 213.14.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:c0:df:d7:02:bd:4d:b4:18:1f:05:c7:cf:df:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 23:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78d1be64c1762c4cbd60464712d3aaafbc132f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c3:29:c5:e3:75:d3:18:13:86:a5:e4:d0:ac:
ba:5b:96:97:b1:2f:28:46:88:af:79:da:41:5b:db:
28:dd:a9:b7:6c:95:64:2c:c8:27:a3:3f:26:82:56:
94:d9:83:82:03:08:ad:ed:fe:c1:09:3b:19:61:c5:
75:59:24:a8:60:de:72:11:5e:e6:c1:7c:08:fb:87:
17:d5:e3:26:c0:2c:ec:df:22:fd:8f:f3:a0:32:34:
54:b2:53:76:b1:b1:64:8a:8a:3c:9f:84:50:33:cf:
30:fa:28:82:72:54:25:e6:d8:56:a7:c7:73:83:62:
72:f9:58:82:ae:57:6c:8c:85:c0:e1:72:14:07:fb:
86:71:7f:c6:8f:e5:7f:87:8a:d4:6d:99:23:40:8d:
f7:a7:dd:5b:ca:0f:02:b8:49:90:41:22:30:53:1c:
7c:db:67:80:5f:9e:44:fa:4e:b9:59:fe:d6:7b:17:
38:3f:1c:79:17:a2:b8:c6:b6:fa:24:12:68:41:26:
db:8a:4c:41:25:8a:29:e5:39:92:2f:3b:be:13:3a:
36:dd:0c:40:1e:4e:f8:8f:5a:de:63:67:9e:46:fe:
f7:8d:d9:56:1a:b4:5e:12:46:b0:1e:b9:d9:ca:61:
0e:d4:7f:6e:de:48:cd:4c:1b:54:b4:2c:48:10:ee:
de:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D1:BE:64:C1:76:2C:4C:BD:60:46:47:12:D3:AA:AF:BC:13:2F:76
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/eNG-ZMF2LEy9YEZHEtOqr7wTL3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.14.220.0/24
Signature Algorithm: sha256WithRSAEncryption
66:62:e7:d3:44:5a:ff:bd:37:72:5f:d1:87:fb:54:2a:d3:80:
84:28:a2:3b:56:7e:11:ae:96:f1:fc:19:07:fa:38:b4:63:fa:
8e:30:12:f1:37:28:de:ba:2e:23:82:22:f2:e7:36:05:03:41:
91:4b:c3:d8:7a:36:16:61:a6:87:e7:cb:46:e5:bb:67:85:7f:
e8:ec:11:95:85:fd:32:7d:94:57:3f:89:b0:e1:91:40:cd:9b:
ba:68:38:bb:b5:0e:8c:f4:a2:78:03:12:8b:29:4e:39:63:7c:
fb:5e:6b:a8:09:66:bd:39:8c:4a:1f:3f:f6:d6:5a:93:dd:7b:
e0:44:98:5e:59:c0:31:44:75:6f:cb:79:46:51:eb:54:60:ec:
89:ca:96:d3:74:41:78:03:02:23:ec:00:cd:52:75:86:f6:2a:
ac:3f:e3:b4:60:53:5b:e4:04:11:63:d1:92:8e:7e:0b:70:8f:
4a:06:d7:9b:41:17:8c:a3:67:a2:03:11:82:8c:02:97:78:e4:
52:df:f4:52:32:e1:4a:da:56:ee:e6:2f:bb:f6:5c:79:d3:ae:
fc:dc:85:36:d6:c5:55:6b:63:61:18:40:53:b8:21:12:b4:b5:
ba:59:f2:fe:9c:3c:89:99:df:9b:fe:24:65:2d:fc:22:d0:2a:
00:86:7d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:22 2024 by rpki-client on console-ams.rpki-client.org