Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/eCZ9T_zjJ61AvUV8KK0AVuTJDmo.roa
File: eCZ9T_zjJ61AvUV8KK0AVuTJDmo.roa (raw, json)
Hash identifier: Z7RKZAioPdV21/M/ZOU1UaHJNNW9RmYDAoS6iaMMODc=
Subject key identifier: 78:26:7D:4F:FC:E3:27:AD:40:BD:45:7C:28:AD:00:56:E4:C9:0E:6A
Certificate issuer: /CN=61e565562d3e3f565e9c0a41946ea53d45d5d657
Certificate serial: 0187CE1A48754F15E4C25C490B04A6F2E03D
Authority key identifier: 61:E5:65:56:2D:3E:3F:56:5E:9C:0A:41:94:6E:A5:3D:45:D5:D6:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YeVlVi0-P1ZenApBlG6lPUXV1lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/eCZ9T_zjJ61AvUV8KK0AVuTJDmo.roa
Signing time: Sat 29 Apr 2023 17:40:41 +0000
ROA not before: Sat 29 Apr 2023 17:40:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211186
IP address blocks: 91.218.22.0/24 maxlen: 24
185.14.96.0/24 maxlen: 24
2a0c:2580:1000::/36 maxlen: 36
2a0c:2580::/36 maxlen: 36
2a0c:2580::/30 maxlen: 30
Validation: Failed, certificate revoked on Mon 08 May 2023 16:45:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ce:1a:48:75:4f:15:e4:c2:5c:49:0b:04:a6:f2:e0:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e565562d3e3f565e9c0a41946ea53d45d5d657
Validity
Not Before: Apr 29 17:40:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78267d4ffce327ad40bd457c28ad0056e4c90e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:44:0a:20:9b:0e:85:12:a7:88:5d:56:4a:37:
f5:af:aa:1d:7c:7d:84:ef:ef:73:9e:f9:c4:82:5f:
f7:7b:aa:7b:60:3b:8e:a6:e2:17:40:df:39:df:46:
33:f3:dc:59:c4:d4:a4:2b:4c:98:b5:44:75:29:37:
6b:90:1a:ce:e8:fe:96:ed:bd:40:d3:6b:84:ef:37:
9a:2f:7e:5e:c3:5f:6f:05:d5:e2:88:95:c4:a3:fc:
9b:84:7b:77:89:47:9d:81:33:7d:6d:1e:92:3a:53:
bc:dc:2f:a7:87:3e:e3:2f:8f:d4:aa:dd:0d:24:19:
2d:f0:71:16:41:eb:39:40:e3:34:8f:92:52:0d:0a:
10:48:1c:8a:0a:d7:91:94:96:89:7c:06:dd:9d:34:
ed:98:b2:77:d1:dc:b2:a8:df:04:d4:f2:32:f6:a5:
21:1c:cc:48:25:a4:ad:5c:1f:e6:2b:d7:a4:72:b2:
48:02:ac:24:82:1c:b3:9a:a2:28:e1:36:7f:b0:99:
1b:c9:61:3e:5e:13:59:54:7d:ac:9d:8a:4d:19:3a:
29:3a:76:26:60:9f:cc:78:66:cc:68:52:dc:b9:e2:
d8:08:ad:9c:8b:1c:ff:88:15:ff:2b:47:3a:7d:6e:
10:fa:16:81:b5:9f:11:f1:42:27:5c:3a:14:70:95:
38:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:26:7D:4F:FC:E3:27:AD:40:BD:45:7C:28:AD:00:56:E4:C9:0E:6A
X509v3 Authority Key Identifier:
keyid:61:E5:65:56:2D:3E:3F:56:5E:9C:0A:41:94:6E:A5:3D:45:D5:D6:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeVlVi0-P1ZenApBlG6lPUXV1lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/eCZ9T_zjJ61AvUV8KK0AVuTJDmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.22.0/24
185.14.96.0/24
IPv6:
2a0c:2580::/30
Signature Algorithm: sha256WithRSAEncryption
50:4b:f6:05:fb:82:ee:17:37:cd:6b:5e:84:3b:b5:a1:70:32:
ef:f8:96:fd:d9:aa:f7:83:04:75:c9:de:50:4f:a7:f6:05:b5:
eb:0b:88:16:98:4c:c3:42:a7:8e:b6:c5:6c:f5:63:84:c7:04:
4c:c7:d3:47:93:3c:f8:45:50:49:13:05:19:e8:cc:e5:05:94:
4a:3f:9b:92:44:7d:48:ab:68:bb:2d:58:cc:ce:f0:76:b0:1d:
d7:72:97:76:27:d9:04:fa:5c:21:94:86:73:e9:f9:1e:3a:05:
49:e3:25:3a:ac:41:87:f5:0f:f6:98:34:87:ca:9e:80:70:b6:
45:aa:c3:69:f2:ee:bc:0f:eb:cc:62:3f:89:28:33:53:2d:bd:
63:42:99:4e:f4:4f:96:ff:3a:71:84:2c:4d:36:02:9c:78:aa:
35:f1:52:d0:71:a3:2a:41:cc:06:e7:fe:f2:fa:0c:5a:1b:9e:
b8:63:72:a3:79:d3:57:d7:2a:7d:a1:f2:de:02:2f:47:bb:31:
c4:b0:9a:61:03:78:e3:81:af:83:1e:bc:d7:9a:ef:4d:3d:e4:
50:4d:7f:3e:ef:d5:35:19:bf:15:90:61:a7:88:00:d9:d4:0e:
10:6a:6b:e6:ac:9f:4a:00:42:a8:82:1e:60:5a:e3:61:70:2d:
ad:f4:24:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:35 2024 by rpki-client on console-fra.rpki-client.org