Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/eq12Te5dmVBo4qRN4C6QEScEfYM.roa
File: eq12Te5dmVBo4qRN4C6QEScEfYM.roa (raw, json)
Hash identifier: DxFKBH8wYXIdd/a1MbR0UomRTCzjSZixoxkVE8g+y6A=
Subject key identifier: 7A:AD:76:4D:EE:5D:99:50:68:E2:A4:4D:E0:2E:90:11:27:04:7D:83
Certificate issuer: /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial: 0191EA07DAD3FC6161001FEE46447359B0D2
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/eq12Te5dmVBo4qRN4C6QEScEfYM.roa
Signing time: Fri 13 Sep 2024 06:17:48 +0000
ROA not before: Fri 13 Sep 2024 06:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54994
IP address blocks: 140.150.1.0/24 maxlen: 24
140.150.2.0/24 maxlen: 24
140.150.3.0/24 maxlen: 24
140.150.4.0/24 maxlen: 24
140.150.5.0/24 maxlen: 24
140.150.6.0/24 maxlen: 24
140.150.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Oct 2024 09:52:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ea:07:da:d3:fc:61:61:00:1f:ee:46:44:73:59:b0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Validity
Not Before: Sep 13 06:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7aad764dee5d995068e2a44de02e901127047d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:07:9b:fb:4d:e3:2c:9a:05:a0:31:c0:8d:7f:
1b:19:c3:32:7a:e1:7c:cd:f1:da:fc:44:c5:09:b2:
a5:5c:07:cf:45:f4:47:80:1e:47:0b:14:bb:8d:d3:
4d:d2:0d:0f:d2:fb:7c:8a:34:ed:cb:6a:bf:b9:fd:
7a:fb:1f:e9:df:9f:8d:b1:0e:81:37:f4:bb:4f:10:
69:24:70:1c:4c:43:6d:82:6c:c4:1e:cd:5e:b9:66:
aa:b6:ae:3d:57:08:0f:1c:23:33:1e:fe:e2:18:b4:
36:d0:e7:14:48:4d:65:d2:f2:25:c0:55:20:72:5d:
40:17:c3:d3:24:bb:4f:e8:bb:d3:af:5b:8a:61:e7:
5b:fe:90:2f:0c:17:10:29:63:0e:00:ef:d3:0b:58:
69:84:8e:80:1a:c9:eb:1d:aa:96:5d:d2:29:e9:ad:
9a:b7:af:ae:1c:a3:3c:1f:ab:54:e3:f5:5a:d9:3e:
b9:cf:c0:40:29:74:d1:9e:62:7c:75:f3:1f:3b:2e:
8b:89:8d:16:b0:31:15:9d:f8:50:9a:08:e9:c1:4c:
29:b3:bf:26:be:e1:e3:00:b1:cf:b3:9f:61:17:9d:
55:ab:4a:28:7c:7f:84:7d:11:1e:4b:3b:e3:1b:88:
e6:03:90:47:7d:dc:fe:20:f6:22:a4:ea:3d:ad:94:
75:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AD:76:4D:EE:5D:99:50:68:E2:A4:4D:E0:2E:90:11:27:04:7D:83
X509v3 Authority Key Identifier:
keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/eq12Te5dmVBo4qRN4C6QEScEfYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.1.0-140.150.7.255
Signature Algorithm: sha256WithRSAEncryption
3f:d8:ab:f0:ba:a4:96:3f:b7:bc:3d:9b:d4:fa:29:ea:b3:6a:
e9:c6:89:f8:b2:ad:9a:07:af:e3:dd:b5:1d:9e:e8:b3:e7:81:
ee:95:bb:23:ce:fc:90:ba:3f:60:a7:a8:44:7c:4d:92:c2:f9:
b8:65:4a:0a:f8:42:3c:df:de:1c:1c:4c:c7:ab:6f:db:18:e8:
47:1b:42:b9:e8:ef:89:b1:eb:32:a8:1b:c0:00:df:85:51:26:
38:dd:2c:7b:37:5a:19:be:b7:4e:40:e2:3a:46:33:69:e5:6a:
3e:01:86:f9:82:54:90:36:83:a4:54:3c:3c:b0:9c:c8:b6:4c:
2b:45:64:d2:8a:52:89:a0:b7:84:c7:8d:32:b3:80:d7:d6:cc:
c1:47:74:33:b1:e5:c0:9b:9a:89:59:e1:00:c2:d4:8f:c8:be:
08:d1:bf:79:37:5c:b7:eb:75:11:20:12:7f:a0:5e:64:49:28:
bc:b6:e3:08:d4:6c:42:68:01:3e:ce:23:1b:e1:81:10:8c:86:
4b:7d:40:f3:e3:ca:f0:88:a4:bf:47:8b:11:4b:ae:60:2c:54:
78:c2:e0:24:fa:5e:c7:d3:11:95:1c:07:26:59:e2:18:8a:33:
e8:c8:0b:02:2e:36:7e:33:7d:6c:89:27:dc:c5:16:e4:48:7e:
be:09:17:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 13:27:02 2024 by rpki-client on console-fra.rpki-client.org