Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/eC0YnT8wMaRRTGp7EMx8szSXErA.roa
File: eC0YnT8wMaRRTGp7EMx8szSXErA.roa (raw, json)
Hash identifier: 4i2YW25OUQO2teN8YOMpMi+Fsoxp5mYpCF7oPfKu0pc=
Subject key identifier: 78:2D:18:9D:3F:30:31:A4:51:4C:6A:7B:10:CC:7C:B3:34:97:12:B0
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01856FF97453590D73228A5A989CF911422D
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/eC0YnT8wMaRRTGp7EMx8szSXErA.roa
Signing time: Mon 02 Jan 2023 00:54:57 +0000
ROA not before: Mon 02 Jan 2023 00:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208861
IP address blocks: 194.113.105.0/24 maxlen: 24
2a0a:4780::/32 maxlen: 32
2a0d:60c1::/32 maxlen: 32
2a0f:cc82::/32 maxlen: 32
2a0a:4782::/32 maxlen: 32
2a0a:4783::/32 maxlen: 32
2a0a:4781::/32 maxlen: 32
2a05:fb45::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 12 Jan 2023 05:10:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:74:53:59:0d:73:22:8a:5a:98:9c:f9:11:42:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 2 00:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=782d189d3f3031a4514c6a7b10cc7cb3349712b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1a:30:c7:cd:60:f4:89:9f:c8:be:d4:62:79:
fc:29:08:11:1f:b4:e2:ab:f2:e4:0f:c3:62:36:4d:
66:8c:77:9d:dc:30:f5:d7:ef:b0:3a:de:bb:7f:e4:
a2:f9:2c:af:e0:b6:80:b4:2b:96:84:4a:bf:4d:78:
4e:2e:27:6f:87:28:73:0b:f7:80:ea:87:12:59:94:
e5:8c:a5:a1:68:2e:69:18:3b:5a:80:99:86:c1:56:
d3:56:a6:6b:70:34:db:7b:1d:8a:87:6e:23:ef:36:
4c:dd:65:05:ea:a7:29:8f:10:6e:9a:e1:af:1d:6e:
0d:d7:ba:38:32:f6:b9:c3:d3:c0:c8:f6:93:38:05:
aa:03:17:0e:ef:89:fc:66:1d:a6:d9:80:c1:18:d5:
98:29:3c:4d:be:32:ad:f6:4e:6f:70:49:2a:d3:09:
11:e5:c4:c2:9d:38:9e:71:d7:fd:f0:a1:78:5e:f9:
cc:a1:c4:99:e9:c1:5b:dc:a3:d1:a8:0a:32:cf:e9:
cb:4f:3f:39:2c:33:c2:16:b1:2c:69:e3:1c:a4:82:
5e:b7:e2:46:55:40:6c:20:07:f8:9e:7c:f4:87:6f:
40:e7:83:ec:42:0a:5f:ee:f8:da:08:70:9b:8d:5d:
a9:3c:4c:c1:f2:db:90:ec:43:dd:11:d6:c9:f2:f6:
8d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2D:18:9D:3F:30:31:A4:51:4C:6A:7B:10:CC:7C:B3:34:97:12:B0
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/eC0YnT8wMaRRTGp7EMx8szSXErA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.105.0/24
IPv6:
2a05:fb45::/32
2a0a:4780::/30
2a0d:60c1::/32
2a0f:cc82::/32
Signature Algorithm: sha256WithRSAEncryption
56:d1:7d:2f:ba:0c:58:c1:b3:a4:bb:74:14:6d:6c:7d:42:65:
65:37:23:f3:75:c4:7a:6c:03:a7:be:c2:31:93:d5:12:58:44:
49:6d:5a:2a:aa:01:dd:df:63:b7:db:75:f7:04:dc:af:c9:b3:
2e:b5:d5:e1:b7:cc:90:c0:d0:38:36:f7:9d:20:f7:cb:3e:9a:
b1:f4:83:b3:88:23:9d:5a:2b:a0:60:ff:04:60:76:47:2e:b8:
00:37:3a:42:c9:aa:1b:80:d6:e7:a6:92:24:61:4c:33:a1:a6:
fa:de:fe:af:18:d1:0c:9d:bf:24:ca:14:d5:87:00:af:a7:7e:
ad:d6:d0:ac:bf:71:cc:50:13:be:c4:9e:c5:35:6c:cf:e1:8b:
51:70:7f:34:0a:cd:dd:b5:e1:d5:bd:2e:17:77:97:5d:93:3e:
99:6c:4b:d4:18:cf:43:c0:d3:03:b2:84:a1:da:2f:a4:35:e3:
0e:1e:f2:1d:f5:8e:fb:96:fa:ca:e2:0e:84:f9:e1:bc:99:e0:
73:cd:1d:ae:7a:88:26:90:ee:dd:84:ce:b0:1e:e8:b6:bf:1b:
e1:e4:9e:d9:9b:7f:dc:f9:d9:d6:5d:37:c8:79:0e:de:9e:36:
45:af:5c:35:89:f8:05:8f:34:37:fe:05:06:ce:7a:f5:48:db:
5d:5a:eb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org