Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/EeBsJhqqpiWPCe0acO0nV4ffMJ4.roa
File: EeBsJhqqpiWPCe0acO0nV4ffMJ4.roa (raw, json)
Hash identifier: //LyQrjcEwi52RlGhfW2u7DvZjhXxkmAHV8aRMmTwOs=
Subject key identifier: 11:E0:6C:26:1A:AA:A6:25:8F:09:ED:1A:70:ED:27:57:87:DF:30:9E
Certificate issuer: /CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
Certificate serial: 01948AB9E714B22BE0A013DF4A7744E8E2FE
Authority key identifier: 81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/EeBsJhqqpiWPCe0acO0nV4ffMJ4.roa
Signing time: Tue 21 Jan 2025 21:17:06 +0000
ROA not before: Tue 21 Jan 2025 21:17:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48767
IP address blocks: 92.42.97.0/24 maxlen: 24
185.140.52.0/24 maxlen: 24
2a07:1a80::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 22 Jan 2025 09:28:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8a:b9:e7:14:b2:2b:e0:a0:13:df:4a:77:44:e8:e2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
Validity
Not Before: Jan 21 21:17:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11e06c261aaaa6258f09ed1a70ed275787df309e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:69:f5:c5:42:b6:30:60:33:7c:7b:3d:39:19:
a5:ad:8e:d0:28:d7:b1:ca:f5:50:38:f4:bf:05:91:
55:af:44:f3:e6:ad:95:12:4e:32:82:12:7e:ab:1b:
f8:68:65:5c:84:79:c1:63:68:71:44:23:3e:1b:c6:
4c:ff:ed:be:2a:08:80:45:d2:3a:f3:15:4e:c4:fa:
65:22:e2:e3:3f:f7:78:6c:58:1f:8c:f6:7e:41:2e:
1e:c5:36:22:28:a3:02:f5:52:73:84:41:73:11:41:
f9:a6:f5:b3:62:b0:af:f0:4e:af:15:6c:53:41:48:
94:07:89:aa:dc:52:49:f8:a2:79:fa:ce:f2:2d:73:
d1:2d:3f:52:a9:55:8d:52:c5:50:ba:85:fb:e3:c3:
bb:f6:66:0d:b0:71:db:cf:33:65:93:23:ce:16:22:
33:fa:27:66:c3:f9:0b:e7:dc:5d:21:d5:38:7b:7b:
eb:08:ba:0a:07:ff:80:37:c8:4d:d6:59:25:0c:c6:
f3:e1:0a:72:72:66:bb:99:14:ff:b1:27:ba:6e:9e:
ed:3c:d4:cd:ee:08:05:95:20:0d:62:54:96:84:eb:
b3:2e:a9:c5:ef:b1:90:13:b9:61:ea:e6:fc:86:2f:
a0:31:bd:51:a0:c1:c3:65:e5:86:9e:cb:27:c9:b9:
ec:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E0:6C:26:1A:AA:A6:25:8F:09:ED:1A:70:ED:27:57:87:DF:30:9E
X509v3 Authority Key Identifier:
keyid:81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/EeBsJhqqpiWPCe0acO0nV4ffMJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.97.0/24
185.140.52.0/24
IPv6:
2a07:1a80::/48
Signature Algorithm: sha256WithRSAEncryption
34:b1:36:53:15:e0:80:2a:d2:97:36:b5:67:ec:0d:1c:56:b7:
2e:48:ac:bb:b2:3a:9c:ef:3f:69:99:ad:b5:05:82:c4:fe:2d:
8e:5c:28:0d:a2:9a:7a:f2:13:e5:cc:df:72:d8:19:9e:ea:d5:
df:6e:87:51:9c:ca:6a:cd:52:f9:dc:77:f0:a2:d4:85:79:5d:
02:96:7a:d2:e4:3c:8d:ae:3d:c2:f0:b5:5e:40:ab:4a:fa:6e:
df:79:79:04:c1:ee:ca:b3:b7:11:27:da:6b:4d:64:2b:b9:43:
cf:79:6a:5a:74:51:e1:d9:8d:20:22:42:e9:5d:e8:8c:16:6c:
b7:41:06:59:41:06:20:73:6c:ea:da:af:e3:c2:b0:3a:a0:74:
f5:fe:45:2b:a9:84:45:1b:96:c3:4a:f1:6b:3e:c0:74:8d:d1:
54:23:30:de:af:b4:fa:96:49:cb:a1:7a:28:b9:29:83:16:b2:
71:44:e9:e3:77:f5:3d:6a:86:0e:f7:be:5b:a5:ad:b9:5a:54:
97:72:31:1e:e8:7d:bc:7e:a0:f1:02:d4:36:01:d9:3d:d0:21:
46:c1:c0:0c:76:5c:5a:ba:cf:59:8e:32:dc:f6:7b:45:cf:b6:
70:86:a5:e8:a9:19:12:e7:fb:34:80:ce:28:75:63:3d:d7:c7:
98:c7:e7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:39:24 2025 by rpki-client