Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EUJHeS70u5HlcPS1KoauiaTHA6o.roa
File: EUJHeS70u5HlcPS1KoauiaTHA6o.roa (raw, json)
Hash identifier: plzA71yHKUjl+Tb+cJeecpyxkALrCGWn0TkM/3c+Wy4=
Subject key identifier: 11:42:47:79:2E:F4:BB:91:E5:70:F4:B5:2A:86:AE:89:A4:C7:03:AA
Certificate issuer: /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial: 01856BDC94B6A46837D119A94073D3BDF2CA
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EUJHeS70u5HlcPS1KoauiaTHA6o.roa
Signing time: Sun 01 Jan 2023 05:44:56 +0000
ROA not before: Sun 01 Jan 2023 05:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43905
IP address blocks: 82.146.182.0/24 maxlen: 24
82.146.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:94:b6:a4:68:37:d1:19:a9:40:73:d3:bd:f2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
Validity
Not Before: Jan 1 05:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=114247792ef4bb91e570f4b52a86ae89a4c703aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:21:1a:9c:38:b4:7d:91:80:da:9a:a4:37:10:
c2:b7:5a:1b:dc:ef:ca:25:71:50:ff:e1:56:60:38:
b1:7a:83:a9:3b:51:9d:7a:95:e8:f0:c4:4f:38:d4:
14:c0:53:fd:e1:99:2c:10:5a:7b:8b:cd:ee:1b:96:
94:21:e5:bc:b1:74:6c:d5:27:2c:8f:7a:a0:ed:fe:
a3:0c:89:2c:9e:28:b9:8a:2c:93:cd:c4:25:d6:3b:
f2:ee:5f:fa:dc:4e:28:5c:bd:31:cd:ec:26:2e:62:
d7:30:7a:d9:f8:e9:b4:cb:71:6c:f2:34:3d:2e:d1:
ab:c6:3a:17:50:10:ea:e3:73:ec:b7:f1:13:e0:95:
1d:3f:38:29:d9:62:93:8b:43:ff:37:0c:03:8f:db:
63:2b:5a:ec:53:ee:dc:4b:44:2d:01:15:55:2f:e2:
a9:ae:d3:26:7d:01:c0:2a:45:ef:16:50:58:1d:bd:
11:07:04:72:43:ea:2c:28:a1:62:71:3d:00:2d:71:
57:d3:65:95:f8:74:86:bf:c6:5b:12:d5:50:79:96:
36:03:8a:b7:ff:bd:f6:fa:ab:8e:44:dc:65:f1:8d:
a9:8a:92:23:6e:4c:da:fa:51:a0:ad:d0:51:af:73:
24:e7:f4:4c:e7:55:fd:47:b8:88:b3:49:b1:10:0f:
85:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:42:47:79:2E:F4:BB:91:E5:70:F4:B5:2A:86:AE:89:A4:C7:03:AA
X509v3 Authority Key Identifier:
keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EUJHeS70u5HlcPS1KoauiaTHA6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.146.180.0/24
82.146.182.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:81:64:26:8c:1d:a2:a9:5d:30:f2:8a:bc:13:9b:55:04:26:
2c:64:69:22:30:01:8e:8d:11:da:2b:29:2b:0f:ac:c3:24:f6:
01:38:2d:78:00:84:e6:0d:5d:30:3e:26:ac:54:5f:11:b8:56:
31:76:2b:0e:78:bc:58:04:10:8d:05:78:9a:f5:21:ee:2b:78:
1f:43:51:b8:fa:ac:d1:9b:29:3f:fc:20:78:0a:30:6e:12:10:
34:24:ad:eb:65:18:5b:1e:4f:3d:bb:38:f5:d7:4b:b3:45:00:
99:ad:ce:c2:f9:3b:42:3d:50:2a:29:04:9b:7b:3b:50:33:25:
b3:16:0b:55:95:13:66:60:9f:a1:5c:0a:1e:b0:d4:f9:85:48:
9e:fb:6f:76:28:f6:f8:90:76:e2:51:0a:30:0d:32:86:c7:5d:
2f:98:38:63:c0:ab:70:0b:87:a1:d0:0e:00:29:fd:78:3d:44:
49:e5:be:62:18:3c:c3:dd:6e:94:2f:70:7b:b6:c7:99:24:a7:
a9:41:1b:4f:bf:b7:9a:10:1c:fd:48:38:70:3e:b1:93:d2:ed:
f2:4a:0e:3f:6c:c3:c8:eb:65:40:1b:fb:21:9d:15:5d:ea:2d:
9d:64:86:8a:cb:c0:29:b4:76:eb:ab:e4:93:f3:0e:37:f2:16:
8d:91:bd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:16 2024 by rpki-client on console-ams.rpki-client.org