Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/EAZ-UCpZGA2Jp6EVLOjxDSocogA.roa
File: EAZ-UCpZGA2Jp6EVLOjxDSocogA.roa (raw, json)
Hash identifier: tc7Z3Q3KPEQeq9Jd7+pPQNPS9lvqsV2rp+pmjHyUpvY=
Subject key identifier: 10:06:7E:50:2A:59:18:0D:89:A7:A1:15:2C:E8:F1:0D:2A:1C:A2:00
Certificate issuer: /CN=54404da602dab0625be7223d09320b1cd7aafced
Certificate serial: 01856BCA3D912569188F84EB85EEE475285C
Authority key identifier: 54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/EAZ-UCpZGA2Jp6EVLOjxDSocogA.roa
Signing time: Sun 01 Jan 2023 05:24:54 +0000
ROA not before: Sun 01 Jan 2023 05:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205247
IP address blocks: 185.224.108.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ca:3d:91:25:69:18:8f:84:eb:85:ee:e4:75:28:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54404da602dab0625be7223d09320b1cd7aafced
Validity
Not Before: Jan 1 05:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10067e502a59180d89a7a1152ce8f10d2a1ca200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ca:78:a5:bd:4d:0a:5d:68:e0:ab:a7:fc:64:
76:3b:84:44:3b:6e:09:a5:24:b3:22:92:10:79:55:
67:e2:11:be:91:32:da:62:80:7b:1b:0f:c0:1a:d7:
82:ee:03:03:13:13:1f:fe:1c:f1:cc:25:ca:24:b3:
29:35:2e:a1:d4:b8:2a:fc:87:4d:01:2d:03:29:10:
c9:e2:a9:9e:b0:82:ce:c8:7f:eb:70:fe:ef:b7:5c:
d7:0e:53:e9:01:3c:92:4a:a2:83:94:bd:a5:0b:11:
69:b3:bd:3e:ae:98:5c:64:f1:6e:3a:7b:9b:90:f6:
55:d6:40:c0:ad:d1:89:d8:61:a8:22:e9:80:bd:e6:
ec:62:e3:1d:d4:18:bf:92:57:99:d9:74:5f:44:0e:
d0:f6:2d:a3:75:20:cd:26:90:eb:5a:94:3c:7f:28:
da:bf:60:2a:10:b2:b5:63:10:df:b1:04:56:a5:8f:
e5:95:f1:81:33:72:a7:b9:68:24:cd:04:c6:40:b4:
06:c2:ff:ca:cf:3d:22:9c:e2:eb:90:16:82:a5:9b:
13:86:87:89:4a:ba:05:3d:51:55:be:37:ab:fa:56:
6e:24:15:28:20:69:1a:e9:3d:0d:66:11:22:a4:25:
d7:7d:2e:1e:60:51:38:e6:03:41:ce:1a:da:55:5b:
88:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:06:7E:50:2A:59:18:0D:89:A7:A1:15:2C:E8:F1:0D:2A:1C:A2:00
X509v3 Authority Key Identifier:
keyid:54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/EAZ-UCpZGA2Jp6EVLOjxDSocogA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.108.0/22
Signature Algorithm: sha256WithRSAEncryption
12:ae:08:7f:d1:a0:91:a1:a8:2e:78:32:cc:4a:11:0d:79:0f:
c8:f9:0b:c3:3c:9e:62:03:5c:2e:f7:ea:6a:34:55:ff:70:6f:
7f:0c:46:2c:0b:f7:24:1b:20:0d:a2:a1:f1:fd:7f:ed:c1:cb:
bc:63:fe:73:6c:74:d9:c1:ea:4b:48:97:eb:7a:4d:92:a8:9f:
ce:14:84:5d:a7:1a:9f:98:8b:5d:5a:37:12:b8:a6:8a:31:56:
45:af:98:f0:1f:be:0d:fd:aa:19:ad:f0:34:c8:fd:70:23:24:
3f:7c:aa:aa:9f:a3:fe:aa:41:ae:79:bc:39:5a:15:0c:46:ee:
f5:a1:5b:cc:c4:35:06:5b:d6:a8:e9:36:35:50:54:ff:51:ae:
c4:f7:9b:73:d9:9a:34:27:40:ef:42:75:2a:b2:f0:5a:e4:e1:
a4:71:9a:03:e3:0e:f4:20:04:4e:fe:d2:b3:bf:cf:bb:58:65:
05:67:5c:76:4e:7e:dd:74:8b:94:db:92:f0:ab:0d:e2:40:66:
44:16:7e:54:84:87:48:92:ed:0d:6e:88:1e:4e:dc:ae:49:53:
45:da:32:c7:13:ae:0f:27:71:71:56:2e:c6:01:f9:6c:3e:c6:
ee:ec:9f:a7:6e:c1:ef:1d:99:fe:52:10:1e:aa:79:10:9b:19:
70:92:27:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:01 2024 by rpki-client on console-fra.rpki-client.org