Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/EyKwKA-ux5ypg01Lfz_Gzy5XPv8.roa
File: EyKwKA-ux5ypg01Lfz_Gzy5XPv8.roa (raw, json)
Hash identifier: 20SRwerNrJet31oNXgiBBvJHghNtlCoHnii+HwkDA3E=
Subject key identifier: 13:22:B0:28:0F:AE:C7:9C:A9:83:4D:4B:7F:3F:C6:CF:2E:57:3E:FF
Certificate issuer: /CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
Certificate serial: 01856F0B68FCA0D28BDC67B63972C90AC14B
Authority key identifier: 4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/EyKwKA-ux5ypg01Lfz_Gzy5XPv8.roa
Signing time: Sun 01 Jan 2023 20:34:56 +0000
ROA not before: Sun 01 Jan 2023 20:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62459
IP address blocks: 185.35.39.0/24 maxlen: 24
46.243.60.0/24 maxlen: 24
185.35.38.0/24 maxlen: 24
185.35.36.0/24 maxlen: 24
185.35.36.0/22 maxlen: 22
185.35.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:68:fc:a0:d2:8b:dc:67:b6:39:72:c9:0a:c1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
Validity
Not Before: Jan 1 20:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1322b0280faec79ca9834d4b7f3fc6cf2e573eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d2:fe:2b:65:4b:28:bc:10:c0:6d:dd:f7:9e:
fd:01:11:0d:7d:04:d9:42:b7:30:bd:1d:7e:39:6e:
88:f1:12:f6:18:1a:f6:75:69:2a:ab:e7:de:1a:e4:
c0:31:ec:f6:9c:fb:b8:cb:d5:d9:5f:53:6c:b6:0c:
39:ce:68:fb:10:d8:b7:3f:fd:d0:9a:3e:ef:ba:26:
e6:ec:68:9e:61:9a:c3:f1:56:a9:79:57:39:d0:ae:
6b:a1:67:16:b6:84:d7:56:3d:34:85:7b:f9:0f:44:
fb:fa:56:99:e5:56:81:05:77:51:d2:d5:b7:38:de:
f3:f2:ec:4e:25:bd:16:19:e5:af:92:a4:ce:63:da:
6f:ac:55:43:80:72:2a:96:45:08:c0:07:3b:c8:13:
a3:59:17:54:ff:8e:59:27:72:62:bf:d9:79:bd:12:
e8:db:3d:ba:22:72:df:4b:c4:55:62:bb:7e:11:f4:
62:f8:a2:c0:e9:92:5b:54:eb:d2:11:2a:27:62:24:
cd:ae:2a:28:2f:62:89:0d:ba:2e:c6:98:00:f6:9a:
08:6f:61:f4:2c:fb:e2:1b:29:8c:ea:c7:4c:a9:83:
f7:20:fd:6c:46:83:41:99:fe:fa:7e:af:77:76:15:
fb:42:d5:2b:cd:ba:6c:93:fd:ae:c1:20:be:3f:98:
db:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:22:B0:28:0F:AE:C7:9C:A9:83:4D:4B:7F:3F:C6:CF:2E:57:3E:FF
X509v3 Authority Key Identifier:
keyid:4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/EyKwKA-ux5ypg01Lfz_Gzy5XPv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.60.0/24
185.35.36.0/22
Signature Algorithm: sha256WithRSAEncryption
19:dd:58:b0:ed:9f:1a:d8:53:91:3f:b2:75:cb:77:d7:53:e5:
4c:c3:ce:b2:16:62:15:4f:d1:0c:79:04:5b:60:20:4e:04:c1:
a8:35:8c:c6:85:dd:c8:27:6f:aa:c9:3b:2c:1d:90:01:f7:ae:
37:f4:e4:a6:16:a2:30:55:48:ac:34:1d:5d:9c:ab:cc:c8:f4:
91:44:5c:64:ee:18:3e:ac:36:47:b7:36:75:2d:3c:41:ff:1a:
9b:31:51:52:12:58:8d:67:77:c5:80:e6:9e:08:b9:d6:4a:99:
67:11:53:76:fa:14:25:fa:7f:09:24:1d:63:e9:c0:bb:bf:87:
7f:9f:88:ae:91:cb:05:10:63:d2:a4:ec:cf:19:09:ed:d3:a7:
c4:f6:62:53:f4:c8:20:e7:79:44:82:62:38:4e:81:4c:2f:b8:
6b:3a:4d:bc:db:22:e6:ac:b9:3e:c2:1f:a7:f0:4f:8c:d3:51:
c8:c5:6b:b3:db:41:e4:b5:dc:0e:03:33:17:db:af:bd:96:d2:
db:4d:67:50:e4:5f:a5:6f:e7:63:22:22:4c:06:7b:62:35:31:
53:bc:bf:02:fd:e2:90:c8:ee:b9:90:55:44:e1:55:0b:69:fc:
15:e7:5a:8e:29:c8:b0:df:28:14:cc:52:81:f7:10:c9:29:71:
ce:b4:e8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:06 2024 by rpki-client on console-ams.rpki-client.org