Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/EB5iclsh3D5vnZSsR69uvWqEF4I.roa
File: EB5iclsh3D5vnZSsR69uvWqEF4I.roa (raw, json)
Hash identifier: YwFqCfKMRVpv4yKSZ3R/XOOIE+VRW05EP4Ae+1iZR+A=
Subject key identifier: 10:1E:62:72:5B:21:DC:3E:6F:9D:94:AC:47:AF:6E:BD:6A:84:17:82
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 0192BA63D27EF4DD85409EEEBEE56E485096
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/EB5iclsh3D5vnZSsR69uvWqEF4I.roa
Signing time: Wed 23 Oct 2024 17:19:16 +0000
ROA not before: Wed 23 Oct 2024 17:19:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25160
IP address blocks: 213.182.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Nov 2024 15:47:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ba:63:d2:7e:f4:dd:85:40:9e:ee:be:e5:6e:48:50:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Oct 23 17:19:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=101e62725b21dc3e6f9d94ac47af6ebd6a841782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:83:11:25:38:e3:3d:d5:fc:ce:fd:5f:38:64:
2e:3b:f8:e1:e5:4a:75:36:22:84:e6:bb:42:8a:e1:
58:c3:5b:1c:49:80:30:c1:e9:ce:4e:f0:49:27:33:
1d:d0:f7:68:5a:b7:b4:b2:35:fa:a4:61:33:b6:59:
a0:c6:48:91:d4:c1:9f:5b:b6:f6:c3:de:e7:34:33:
66:4f:c7:c7:21:6d:03:6a:12:63:f1:3d:d9:2a:b0:
10:07:2e:3b:bf:28:3c:9e:c4:e4:ab:3b:94:db:76:
1e:2b:b6:39:56:33:30:f1:57:aa:b8:0b:57:7d:cb:
a7:af:5a:40:9d:75:a4:13:9f:55:59:67:8b:26:be:
42:d3:82:78:0d:76:3c:a2:11:1d:4c:b2:3d:d2:f8:
76:d9:ed:a8:6f:69:61:e3:ba:4a:f7:83:69:88:87:
d9:79:1f:32:6f:44:22:94:ec:07:6a:b9:69:5c:82:
79:3d:d5:69:8f:e3:33:bb:9d:b7:6f:bf:2e:60:45:
e3:5c:dd:a3:3e:65:e1:dd:f6:9f:ff:19:22:d0:8c:
b3:72:15:59:02:02:dc:0e:3c:af:91:5d:09:f7:f8:
8e:02:cc:05:2d:cf:cd:65:77:75:4d:44:0b:ea:34:
5e:a4:5a:83:ab:1f:13:01:8e:86:03:dc:62:ea:89:
e0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1E:62:72:5B:21:DC:3E:6F:9D:94:AC:47:AF:6E:BD:6A:84:17:82
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/EB5iclsh3D5vnZSsR69uvWqEF4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.192.0/24
Signature Algorithm: sha256WithRSAEncryption
61:f5:91:72:63:d4:19:de:3b:42:f9:29:53:8c:c3:18:da:b1:
2e:56:1c:dd:d6:5a:3f:97:75:fe:1b:3c:9a:41:56:5e:4f:06:
1e:d1:3e:af:ef:2a:96:0c:7e:f7:bf:98:e9:b7:bd:6d:d8:a8:
83:1c:bb:19:98:82:78:27:7d:12:21:18:dd:3b:b6:d1:2d:e4:
ba:2c:9f:d4:a2:d9:b8:c3:83:0d:59:04:7d:34:3a:d9:58:6d:
07:63:e7:b2:87:57:17:39:19:19:36:c4:18:24:bd:13:d6:03:
e8:6d:ec:bd:cb:4e:4f:dd:a3:43:94:dc:38:03:c6:77:87:fb:
f5:20:48:ba:e7:78:e8:38:04:56:8d:0b:7d:45:e2:56:63:31:
81:87:c6:20:d9:e2:e2:80:1e:d5:3d:b5:15:62:69:3d:76:02:
1a:32:ec:87:bb:c2:55:fa:fc:d0:59:1a:20:1b:40:ed:98:0d:
63:5a:4e:60:47:82:cd:3c:12:44:f4:77:6e:f3:95:4a:e6:b0:
98:63:e1:14:8f:d4:ed:ad:4f:16:05:f4:2e:38:ee:4d:50:31:
87:ff:77:34:c4:ee:6a:47:35:b9:46:9b:76:62:ee:ad:71:66:
ee:64:f5:b8:c2:cd:b1:f0:c1:cb:93:55:22:52:b1:18:6a:b8:
7f:06:ce:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 10 18:27:47 2024 by rpki-client on console-fra.rpki-client.org