Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/EOe-V7iteCQQC2yK4SLvYAP3ft4.roa
File: EOe-V7iteCQQC2yK4SLvYAP3ft4.roa (raw, json)
Hash identifier: JIzQx9pTog6LMe4WEn6JjTL+/zYY0QSnNgGICZ2ddXw=
Subject key identifier: 10:E7:BE:57:B8:AD:78:24:10:0B:6C:8A:E1:22:EF:60:03:F7:7E:DE
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 018572D5C9BA5671EC8325631FEBDD6E600B
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/EOe-V7iteCQQC2yK4SLvYAP3ft4.roa
Signing time: Mon 02 Jan 2023 14:14:51 +0000
ROA not before: Mon 02 Jan 2023 14:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 89.19.56.0/22 maxlen: 24
185.175.224.0/23 maxlen: 24
185.68.244.0/23 maxlen: 24
213.170.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Feb 2023 18:13:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:c9:ba:56:71:ec:83:25:63:1f:eb:dd:6e:60:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jan 2 14:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10e7be57b8ad7824100b6c8ae122ef6003f77ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:af:5c:5a:17:ad:6a:e8:16:38:54:8b:a6:
cd:39:c2:06:60:95:44:c5:98:69:67:c8:45:82:6f:
a0:27:3b:8d:ab:e5:29:d7:41:e8:96:dd:a2:81:0e:
1f:19:6b:ed:47:d5:4d:db:83:b7:a3:1a:b6:0e:08:
3f:95:cf:c7:f0:48:48:6d:c0:6d:ba:bd:bf:6d:b9:
7b:50:1f:60:c3:22:68:f6:cd:5e:d6:cb:3f:9a:b1:
fd:bf:ce:70:79:1f:f1:28:e2:3f:85:f3:84:3f:bf:
b8:1e:35:2d:3e:7f:6f:80:22:53:00:d6:14:3a:a7:
6c:0f:68:c4:87:f0:18:eb:5e:f3:c4:d5:df:30:3a:
7b:2f:7b:9e:15:db:91:b3:1d:32:11:9e:40:f4:a3:
79:af:a0:98:60:5d:ce:e2:2d:c5:59:60:80:7f:50:
52:9e:52:35:2c:c9:a3:fc:04:bb:c7:ac:48:45:22:
e1:27:2a:57:33:ba:9d:4f:1a:d2:62:cf:73:97:35:
31:50:3b:49:65:a9:6f:53:5d:03:20:71:15:74:48:
39:7b:fc:2a:ca:cb:8f:99:7d:54:a5:6e:36:20:0f:
4a:92:30:d2:93:ad:d5:b6:f0:d9:aa:3d:a2:cc:a1:
06:cf:06:26:97:3b:96:03:7c:b5:f8:c4:7c:71:8f:
f1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E7:BE:57:B8:AD:78:24:10:0B:6C:8A:E1:22:EF:60:03:F7:7E:DE
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/EOe-V7iteCQQC2yK4SLvYAP3ft4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.56.0/22
185.68.244.0/23
185.175.224.0/23
213.170.223.0/24
Signature Algorithm: sha256WithRSAEncryption
27:f8:8c:aa:1c:48:7b:7a:f5:88:71:9f:f9:37:f8:1c:e2:19:
81:e3:e9:fd:8c:7b:0d:39:96:a5:e7:75:ab:54:63:00:07:99:
8d:af:c7:63:2b:98:3b:dd:6a:49:a8:39:47:1c:25:c4:5a:af:
dd:e0:d0:30:2a:d5:7d:82:a5:f6:21:c6:c5:cf:f1:70:ca:e5:
6e:58:f8:8c:65:27:b9:d6:a7:71:8c:9f:1a:66:d1:99:92:7a:
20:b4:f6:58:cb:a9:30:30:c0:df:b1:ea:27:fe:55:c8:1f:e6:
35:71:b3:e0:a1:11:da:a4:13:dc:44:b2:95:6f:bb:59:79:1d:
3f:48:9b:2e:3d:d0:d2:f0:a8:fc:93:05:79:e6:40:93:be:48:
57:b3:04:3c:d5:83:4c:1d:4f:70:b9:98:fd:17:c3:13:28:c9:
08:14:b2:54:92:de:74:8f:77:ed:7d:45:a5:7d:d6:c4:00:db:
81:9e:15:fb:58:ff:78:d8:58:25:fe:5c:71:66:19:40:90:4a:
ba:b2:8f:b6:36:59:e0:b8:95:8f:3d:79:a8:5c:5b:63:2f:1b:
76:ab:1e:f8:19:53:d2:1f:58:f5:c5:c1:30:f9:f7:7e:56:fd:
d9:f0:1a:9e:35:29:09:dc:e2:29:77:c8:d5:76:fa:bd:72:87:
f0:3e:ef:82
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYVy1cm6VnHsgyVjH+vdbmALMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4
OWU4NWIwHhcNMjMwMTAyMTQxNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGU3YmU1N2I4YWQ3ODI0MTAwYjZjOGFlMTIyZWY2MDAzZjc3ZWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX+vXFoXrWroFjhUi6bNOcIGYJVE
xZhpZ8hFgm+gJzuNq+Up10Holt2igQ4fGWvtR9VN24O3oxq2Dgg/lc/H8EhIbcBt
ur2/bbl7UB9gwyJo9s1e1ss/mrH9v85weR/xKOI/hfOEP7+4HjUtPn9vgCJTANYU
OqdsD2jEh/AY617zxNXfMDp7L3ueFduRsx0yEZ5A9KN5r6CYYF3O4i3FWWCAf1BS
nlI1LMmj/AS7x6xIRSLhJypXM7qdTxrSYs9zlzUxUDtJZalvU10DIHEVdEg5e/wq
ysuPmX1UpW42IA9KkjDSk63VtvDZqj2izKEGzwYmlzuWA3y1+MR8cY/xRQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFBDnvle4rXgkEAtsiuEi72AD937eMB8GA1UdIwQY
MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt
NmVlNTM0ZDkyZTUyLzEvRU9lLVY3aXRlQ1FRQzJ5SzRTTHZZQVAzZnQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy
LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCWRM4AwQB
uUT0AwQBua/gAwQA1arfMA0GCSqGSIb3DQEBCwUAA4IBAQAn+IyqHEh7evWIcZ/5
N/gc4hmB4+n9jHsNOZal53WrVGMAB5mNr8djK5g73WpJqDlHHCXEWq/d4NAwKtV9
gqX2IcbFz/FwyuVuWPiMZSe51qdxjJ8aZtGZknogtPZYy6kwMMDfseon/lXIH+Y1
cbPgoRHapBPcRLKVb7tZeR0/SJsuPdDS8Kj8kwV55kCTvkhXswQ81YNMHU9wuZj9
F8MTKMkIFLJUkt50j3ftfUWlfdbEANuBnhX7WP942Fgl/lxxZhlAkEq6so+2Nlng
uJWPPXmoXFtjLxt2qx74GVPSH1j1xcEw+fd+Vv3Z8BqeNSkJ3OIpd8jVdvq9cofw
Pu+C
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:17 2024 by rpki-client on console-ams.rpki-client.org