Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/eSWEE-_xvNZaBybbzSCqYpZ6rgQ.roa
File: eSWEE-_xvNZaBybbzSCqYpZ6rgQ.roa (raw, json)
Hash identifier: zrLj2F4UEvxBZD5HgwHeAsUJH4Y/dTHDvH+H1vjDWME=
Subject key identifier: 79:25:84:13:EF:F1:BC:D6:5A:07:26:DB:CD:20:AA:62:96:7A:AE:04
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 01896FFE584D4E3ACA3B227C2B651991CBEC
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/eSWEE-_xvNZaBybbzSCqYpZ6rgQ.roa
Signing time: Wed 19 Jul 2023 21:11:26 +0000
ROA not before: Wed 19 Jul 2023 21:11:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 45.147.148.0/22 maxlen: 24
77.83.152.0/22 maxlen: 24
2a0e:9846::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6f:fe:58:4d:4e:3a:ca:3b:22:7c:2b:65:19:91:cb:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Jul 19 21:11:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79258413eff1bcd65a0726dbcd20aa62967aae04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3a:2a:96:4a:b8:8a:5b:ee:10:2c:94:10:e7:
ce:64:50:c4:89:85:0f:59:ff:f4:f2:1d:73:bc:97:
b4:42:66:f9:db:4e:84:22:aa:0e:75:37:a7:b6:01:
b4:4a:26:3e:91:e2:f8:0b:0b:c0:5d:89:c0:29:b5:
f5:aa:79:fc:74:6f:f6:56:09:11:f5:6a:da:30:70:
f5:b8:d1:c4:f0:d3:9f:31:74:d3:4b:39:a9:99:c4:
51:28:ca:24:27:83:00:46:dc:1e:c0:de:5b:c6:65:
09:db:2f:ec:fc:47:b1:16:9b:9e:9b:c2:8d:fd:d3:
e6:0c:a4:d1:0c:d5:50:c2:a5:58:84:f5:f2:39:75:
45:bc:83:9c:e5:5f:4c:ae:66:d6:84:35:95:ef:35:
a8:15:74:a2:75:ed:ad:55:86:49:6f:94:7c:c5:b3:
bc:b6:1e:6d:89:f7:5c:02:5e:6b:4b:ae:8a:79:88:
67:68:73:78:54:c4:e5:11:68:88:39:e2:92:95:da:
67:8e:d3:75:df:e1:dd:7d:1c:eb:c5:f7:eb:b2:56:
66:cd:db:5a:34:56:50:6d:4a:9b:c2:2f:94:9e:af:
99:ee:0d:b0:86:bb:0b:50:96:f2:11:0f:7b:ed:29:
49:f9:a1:cc:08:ea:0f:54:a4:f9:7d:ba:0e:3a:31:
0d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:25:84:13:EF:F1:BC:D6:5A:07:26:DB:CD:20:AA:62:96:7A:AE:04
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/eSWEE-_xvNZaBybbzSCqYpZ6rgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.148.0/22
77.83.152.0/22
IPv6:
2a0e:9846::/32
Signature Algorithm: sha256WithRSAEncryption
12:8a:32:e4:da:3e:b9:5f:f1:0f:5c:4f:e5:4d:52:2a:6e:ae:
5a:1d:f5:e1:88:1b:39:06:fc:f9:94:02:ab:7a:ea:05:c9:f8:
3b:26:a1:a9:1d:8d:d5:9f:2d:12:47:81:99:0d:47:76:35:98:
2b:98:c7:8f:43:c0:24:d3:6c:ef:63:37:17:e9:28:94:5e:2d:
f8:45:87:f3:48:e5:72:73:3f:e5:16:7e:99:dd:82:8a:4f:3f:
82:25:d7:26:c6:f1:ce:d9:3b:7a:3a:90:c2:87:91:ff:18:64:
e4:7b:4b:aa:48:89:31:2c:d0:74:e7:b3:8f:4b:b5:b0:b5:a1:
69:ab:00:6c:8c:ae:24:fa:7b:ce:1c:e7:06:1f:b4:35:66:3b:
16:b0:e8:56:09:f7:0a:a3:ef:cb:b5:14:bd:fe:24:d6:f9:4a:
dc:da:d0:35:13:2f:fb:de:25:a2:7d:e0:eb:66:6c:af:84:30:
3f:19:12:8c:80:46:b5:bc:80:13:21:1d:8e:ed:89:73:51:02:
41:70:9f:48:f5:d5:52:e5:0a:9e:3a:19:de:c4:26:7f:90:2d:
9c:7c:34:ed:70:8b:79:1f:4f:ff:82:65:4d:3a:83:5e:97:bc:
89:13:11:d8:4d:a4:c1:98:b7:85:36:53:2d:78:b9:f2:ec:f5:
11:e3:fe:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-fra.rpki-client.org