Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/Ea6c_Y0aMhHEjCINyZULTzZ8NH8.roa
File: Ea6c_Y0aMhHEjCINyZULTzZ8NH8.roa (raw, json)
Hash identifier: Sbz3s5JDEnruHjWTyry3NQsDuXDXvikfKGXN8aSQlQ0=
Subject key identifier: 11:AE:9C:FD:8D:1A:32:11:C4:8C:22:0D:C9:95:0B:4F:36:7C:34:7F
Certificate issuer: /CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae
Certificate serial: 018570FB92E46B2E284D7EA7BD3C327A0FAE
Authority key identifier: DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/Ea6c_Y0aMhHEjCINyZULTzZ8NH8.roa
Signing time: Mon 02 Jan 2023 05:36:53 +0000
ROA not before: Mon 02 Jan 2023 05:36:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57866
IP address blocks: 45.149.8.0/22 maxlen: 22
185.242.64.0/22 maxlen: 22
185.21.48.0/24 maxlen: 24
2a0c:c080::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:92:e4:6b:2e:28:4d:7e:a7:bd:3c:32:7a:0f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae
Validity
Not Before: Jan 2 05:36:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11ae9cfd8d1a3211c48c220dc9950b4f367c347f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a5:05:49:1d:74:dd:e8:f3:0d:65:0f:68:35:
d6:89:7e:a2:23:f5:40:0b:6a:84:18:93:a7:a9:3a:
bb:c6:df:83:d7:da:f3:a4:f4:9e:bf:88:95:1c:a7:
e4:12:18:62:80:82:ba:65:8e:84:dc:31:af:5e:3f:
2b:b3:1d:36:9d:6d:d0:68:c5:89:4d:2a:97:50:9d:
0b:e5:92:e2:c1:38:28:97:26:cb:33:33:c6:0d:42:
78:68:bc:4f:51:49:92:56:ec:7a:e9:db:de:b7:2f:
4b:63:15:92:56:43:3d:41:74:d9:b3:5f:d0:92:8e:
94:dc:d6:f3:42:e8:e8:74:9a:bf:11:a8:4f:d8:f4:
d6:91:0d:3e:d6:ac:ad:e1:5e:64:51:cc:65:c7:7d:
40:e4:61:61:bc:f1:8f:af:25:53:45:8d:23:92:9a:
f1:5a:6b:03:8d:cc:4a:a5:d8:c7:89:5f:1e:61:42:
56:a1:fd:78:d1:66:8f:68:bf:d0:aa:9f:f5:95:1d:
e6:c1:a6:35:23:a9:bf:d0:3a:c9:88:05:ea:42:b2:
45:ee:9c:44:fd:e7:90:d1:02:4f:e2:bb:31:6d:1f:
a7:28:c3:4d:6f:23:57:39:1a:40:9d:ac:44:bb:0e:
da:a3:92:9e:3f:4d:b7:3e:69:b2:ea:d4:8d:5b:bd:
0e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AE:9C:FD:8D:1A:32:11:C4:8C:22:0D:C9:95:0B:4F:36:7C:34:7F
X509v3 Authority Key Identifier:
keyid:DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/Ea6c_Y0aMhHEjCINyZULTzZ8NH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.8.0/22
185.21.48.0/24
185.242.64.0/22
IPv6:
2a0c:c080::/29
Signature Algorithm: sha256WithRSAEncryption
13:02:1d:97:b1:13:e1:cb:fb:15:02:f6:64:d6:30:b8:94:32:
e2:47:ac:5a:50:8c:0d:da:0f:6b:16:f9:02:30:c7:90:49:df:
49:89:bb:97:51:62:db:da:4a:22:ca:d9:9e:cc:68:09:a8:05:
52:24:f9:38:fb:67:7d:05:1d:cb:76:92:8f:f8:fb:9b:04:1b:
89:4e:33:79:ed:7f:d5:c4:65:a1:61:65:40:1b:6d:ba:29:26:
53:30:98:4b:2e:6b:d9:75:ac:b8:8b:e6:51:30:89:b3:e7:cc:
d2:35:f7:d9:b5:ec:c8:36:ff:3c:c6:70:ec:7b:50:89:e4:9a:
06:fb:ad:ab:ee:47:1e:81:2d:2a:72:aa:38:56:fb:d3:cb:82:
eb:04:90:dc:60:40:b2:c7:0a:eb:71:e1:7d:64:9a:76:e3:60:
63:d7:2e:68:19:b9:a0:7a:2e:29:cf:f4:80:25:c5:40:06:56:
c9:2d:8b:6e:99:64:da:87:12:2d:42:95:f6:7c:7b:68:34:88:
84:1b:7e:8e:7d:89:3e:53:16:fe:fa:aa:a1:94:cb:48:77:ee:
33:af:bb:13:e9:40:1a:43:82:03:b4:fc:e3:94:c3:78:ed:0a:
cc:de:98:5c:4a:bc:20:ed:7b:b6:82:4b:d2:be:d1:27:67:98:
04:23:33:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:04 2024 by rpki-client on console-fra.rpki-client.org