Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/eNInS6P-5S4J_dSnIKuBJu_VjpY.roa
File: eNInS6P-5S4J_dSnIKuBJu_VjpY.roa (raw, json)
Hash identifier: MqjK8K8TvWSEz0EoBy8mM/XuI5r2eAYubafBn/qMJTU=
Subject key identifier: 78:D2:27:4B:A3:FE:E5:2E:09:FD:D4:A7:20:AB:81:26:EF:D5:8E:96
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0185E79A664FF67FF582F8F7A59E5F3BC513
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/eNInS6P-5S4J_dSnIKuBJu_VjpY.roa
Signing time: Wed 25 Jan 2023 06:25:33 +0000
ROA not before: Wed 25 Jan 2023 06:25:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.106.192.0/23 maxlen: 24
82.163.54.0/23 maxlen: 24
82.163.52.0/23 maxlen: 24
149.126.92.0/22 maxlen: 24
92.114.44.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Feb 2023 07:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e7:9a:66:4f:f6:7f:f5:82:f8:f7:a5:9e:5f:3b:c5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 25 06:25:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78d2274ba3fee52e09fdd4a720ab8126efd58e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:a9:88:f7:22:88:20:81:f8:2b:38:02:3e:
da:5c:72:c0:aa:f9:cd:6d:42:e1:7d:25:ed:dc:da:
05:af:47:98:40:ac:53:40:d9:8f:87:42:91:09:85:
bb:4d:ae:88:96:89:d3:aa:c2:a3:62:e6:f0:90:65:
29:6a:df:8a:6b:47:17:1f:10:21:75:6a:af:d6:94:
f8:4f:c1:b0:0d:db:12:b3:79:37:b3:83:69:dd:4c:
17:3d:4a:c2:85:de:e2:d2:7c:ff:b0:49:7f:c8:49:
1a:0e:1e:87:49:c0:6a:de:60:66:5c:f7:90:5a:7c:
00:7b:b3:7e:33:f5:e8:5b:9f:7b:9b:11:d7:7e:c9:
34:a1:50:04:3b:31:fc:ac:f2:16:94:1e:0c:64:6f:
0f:66:a3:bb:cd:82:15:e8:d3:6b:90:6c:11:fb:26:
d6:c4:0f:31:ed:61:99:c8:d2:38:e3:98:47:39:a6:
b2:76:12:6d:e2:c9:11:5a:c8:05:c2:eb:b6:78:cb:
93:6e:62:e2:30:3b:51:1f:90:88:d5:4a:25:22:33:
5a:e1:48:f0:08:0f:e4:7a:25:e5:2f:5c:39:9d:6d:
0e:06:9e:4e:62:fa:e2:f8:de:b7:15:2c:ba:1f:57:
d4:13:ef:c3:c5:6a:42:01:57:ea:a4:d0:96:9f:65:
dd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D2:27:4B:A3:FE:E5:2E:09:FD:D4:A7:20:AB:81:26:EF:D5:8E:96
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/eNInS6P-5S4J_dSnIKuBJu_VjpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.52.0/22
92.114.44.0/22
149.126.92.0/22
185.106.192.0/23
Signature Algorithm: sha256WithRSAEncryption
45:a3:d8:58:c2:35:74:b8:6a:c5:06:98:9c:d5:d8:ec:44:cc:
56:f2:56:8b:2f:71:99:33:50:f8:d7:95:21:6a:aa:07:ca:43:
97:0e:0d:77:02:b6:3c:87:be:a8:33:6c:e5:0a:2c:ee:3e:02:
e1:cd:35:92:f0:7f:dd:4d:d7:53:b5:3e:e9:80:24:63:39:0f:
77:cf:81:f5:68:ce:b1:19:71:14:a3:58:1e:2b:46:a7:62:27:
b4:45:bc:79:f6:37:f1:24:2f:40:fb:58:91:82:6c:5f:ee:fc:
6d:f3:4b:18:d6:db:35:22:41:e8:be:1d:e5:11:7e:ed:53:36:
55:d7:a1:76:72:92:ff:bb:48:6b:17:0d:70:7f:af:4e:c3:0c:
59:df:59:f1:ee:ed:a4:c8:07:18:b6:be:0c:ee:85:07:e8:1f:
66:74:14:3d:fe:5e:3b:08:9e:90:fa:23:57:20:d3:af:57:d6:
e4:51:8c:cf:13:a2:c5:e3:be:a0:18:b8:10:da:cd:55:4a:75:
5a:51:9b:fd:a5:b6:00:c1:b7:d0:a1:7b:cc:69:0b:ab:09:36:
5d:43:ed:74:92:e6:17:17:12:d7:06:de:dd:de:6e:36:da:ba:
fa:e6:bd:93:3d:06:ea:6b:a2:91:29:e6:36:67:98:e2:b5:c8:
f6:e9:47:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:35 2024 by rpki-client on console-fra.rpki-client.org