Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/eCz3Yd9Blb4OhPDhiJHhK-Cg7gw.roa
File: eCz3Yd9Blb4OhPDhiJHhK-Cg7gw.roa (raw, json)
Hash identifier: oNPX6WbgfXwqeIbewaJ6J/SuyNb5q12CtlGhcmuV3hc=
Subject key identifier: 78:2C:F7:61:DF:41:95:BE:0E:84:F0:E1:88:91:E1:2B:E0:A0:EE:0C
Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial: 018570707D6EEE15F4658C68E2A253A67A13
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/eCz3Yd9Blb4OhPDhiJHhK-Cg7gw.roa
Signing time: Mon 02 Jan 2023 03:04:58 +0000
ROA not before: Mon 02 Jan 2023 03:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2281
IP address blocks: 57.79.248.0/21 maxlen: 24
57.100.96.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:7d:6e:ee:15:f4:65:8c:68:e2:a2:53:a6:7a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Validity
Not Before: Jan 2 03:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=782cf761df4195be0e84f0e18891e12be0a0ee0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e1:03:1a:ea:43:02:7f:9d:3b:93:78:de:12:
b9:18:85:42:be:c9:63:4a:5c:68:36:19:90:6f:21:
3a:c0:10:38:5b:60:a9:2f:76:8a:16:91:fe:2e:48:
cb:9c:c1:10:dc:58:fc:4b:33:d5:a0:ac:6c:09:b6:
de:cc:af:a4:ca:21:11:b7:b6:e8:8e:87:34:17:ee:
01:1f:35:0b:99:ff:0e:9d:25:c9:2c:d7:e7:e3:96:
3c:0f:b4:e9:28:df:cb:f0:d4:a7:dd:f8:5b:5b:ac:
cf:d0:63:ac:2c:f7:85:13:b9:04:f6:88:a1:99:37:
77:2d:5c:d0:de:d5:92:32:e8:bf:64:3d:9c:af:2e:
93:3f:8a:d3:b5:3b:b4:31:a2:94:ba:15:11:c1:6f:
61:57:2b:78:2a:76:68:1e:ef:46:b6:3d:31:80:42:
cc:76:bd:1a:c8:50:be:d3:ec:0c:c5:f7:17:39:df:
de:8e:c2:57:f3:21:4d:28:fd:14:c5:8a:5d:af:9b:
7c:70:49:1d:31:d5:6a:6f:cc:4e:07:79:d5:48:73:
b1:0a:c3:0c:35:2c:3a:d1:28:95:ab:82:94:26:81:
81:cc:aa:47:86:d6:8e:b0:67:9f:60:f6:7c:e5:74:
7e:92:4e:4e:42:f4:05:40:74:6b:99:5f:e9:02:de:
f8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2C:F7:61:DF:41:95:BE:0E:84:F0:E1:88:91:E1:2B:E0:A0:EE:0C
X509v3 Authority Key Identifier:
keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/eCz3Yd9Blb4OhPDhiJHhK-Cg7gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.79.248.0/21
57.100.96.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:e5:59:18:e2:7c:1e:0f:38:e8:9b:06:ad:ca:67:a3:2e:de:
41:f8:fd:d8:54:94:cb:1d:8b:09:c4:22:d2:30:25:54:ae:a9:
00:77:60:aa:93:bd:19:f2:d9:23:46:60:ed:d2:32:9f:6a:64:
c2:47:7d:88:fe:83:24:80:e1:c1:b5:9d:e2:dd:0b:01:0e:24:
0c:bc:9f:5f:9d:10:0d:b9:84:30:8c:cd:a2:de:aa:e6:d1:6c:
93:fb:cb:81:9a:7f:61:2a:4a:af:07:4e:bc:39:3a:d5:d4:ef:
7b:de:c1:54:fc:72:9e:ff:36:35:85:25:c3:5e:3c:aa:b0:b9:
50:e9:e3:46:22:94:ef:1b:ce:13:43:d5:92:5b:10:88:55:6d:
cb:94:fd:0c:50:ce:c6:13:a2:35:56:11:38:20:72:e7:a5:f7:
31:3a:4a:19:b0:68:ce:87:ae:63:13:e6:72:b1:52:c5:d2:56:
02:75:c0:1f:7f:77:b9:5b:ea:24:02:39:cb:65:03:0a:b5:2d:
c5:b2:22:9d:ee:8f:8f:74:87:06:84:1e:34:ac:45:d2:56:9e:
4d:ff:49:bc:f6:90:17:87:3c:12:f0:e1:aa:ae:ef:6f:8c:80:
42:01:22:ae:7a:79:04:f5:c1:7c:e0:15:6a:bb:89:c5:27:1f:
1e:d1:0d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:44 2024 by rpki-client on console-fra.rpki-client.org