Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/EZn_fA9892E9XUZsIhp1EEOB5Yo.roa
File: EZn_fA9892E9XUZsIhp1EEOB5Yo.roa (raw, json)
Hash identifier: BXOU6oiGFg3JxnV8SmDnDniYIEKx0Gk0SoGoBoEzdEQ=
Subject key identifier: 11:99:FF:7C:0F:7C:F7:61:3D:5D:46:6C:22:1A:75:10:43:81:E5:8A
Certificate issuer: /CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Certificate serial: 01856D93EE408B803EF72D442A3A74D65A3C
Authority key identifier: 6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/EZn_fA9892E9XUZsIhp1EEOB5Yo.roa
Signing time: Sun 01 Jan 2023 13:44:49 +0000
ROA not before: Sun 01 Jan 2023 13:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204451
IP address blocks: 45.14.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Dec 2023 11:34:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:ee:40:8b:80:3e:f7:2d:44:2a:3a:74:d6:5a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Validity
Not Before: Jan 1 13:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1199ff7c0f7cf7613d5d466c221a75104381e58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:db:db:73:24:d1:bc:d0:9a:ba:12:3c:44:1c:
70:7c:09:b5:c6:fd:d4:52:48:bf:ff:62:dc:21:cb:
b0:93:47:ed:93:65:0f:91:e3:fe:81:22:6d:15:8e:
11:e5:fa:8c:48:17:b0:0e:18:35:c9:eb:78:5c:77:
5b:84:66:ac:1b:b9:3e:24:19:5c:c2:af:aa:42:97:
07:65:d3:ba:47:d5:dc:06:79:c4:77:5a:fa:76:38:
90:af:6b:97:80:65:5d:f6:41:16:14:64:a3:d9:dc:
86:cd:b0:5d:9b:fd:fe:65:90:26:a6:02:64:16:55:
0c:24:c9:0a:02:83:73:1b:4c:1f:b1:94:20:bf:df:
37:3f:cf:53:5b:1a:46:b6:c0:92:68:7e:08:c5:53:
11:d1:c4:6e:e5:56:04:02:9b:d2:70:16:21:d3:99:
01:34:03:b3:5d:95:e8:1c:92:b2:a9:c9:8e:97:0e:
ea:a3:58:60:9c:7f:07:a9:dc:2d:42:5b:15:37:93:
92:ba:ae:f0:52:b8:f3:86:ad:22:88:f2:3b:05:be:
00:3e:e3:96:a3:e4:9b:64:04:c7:67:a2:e4:8f:1e:
9b:32:64:a1:e0:97:1d:b7:37:b3:2c:22:7a:69:4e:
25:42:a1:59:44:ce:52:7e:d0:3f:21:93:a3:ac:b3:
1f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:99:FF:7C:0F:7C:F7:61:3D:5D:46:6C:22:1A:75:10:43:81:E5:8A
X509v3 Authority Key Identifier:
keyid:6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/EZn_fA9892E9XUZsIhp1EEOB5Yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.175.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:0a:e3:e4:f2:56:04:e4:06:42:13:89:a7:0d:1a:d2:e5:8a:
24:75:59:e4:c5:20:58:93:12:66:49:5d:aa:b5:e6:a2:97:24:
c3:86:8d:69:92:e2:12:82:5c:b2:09:61:cc:f9:31:46:8f:f1:
80:db:95:92:71:81:3c:68:91:47:cb:62:79:28:79:81:d7:eb:
10:52:3a:ec:59:c3:83:f4:19:08:53:93:0f:d0:cf:31:49:8d:
e5:af:51:16:a9:ed:87:2d:d6:d0:45:16:e8:ae:ec:23:90:49:
7a:81:f2:e2:38:1c:99:44:0b:ef:cb:5c:cd:87:47:77:d7:15:
b6:c9:2c:b5:92:32:b3:6c:5c:40:76:ca:a2:5d:d8:c5:bd:32:
91:cd:a4:1f:9a:52:24:16:4a:47:e5:fe:5d:65:63:69:7b:ba:
59:58:1e:bf:6d:20:80:ac:a8:60:65:bc:ae:b9:e2:71:15:ca:
41:1f:69:e9:0b:af:df:c3:5a:5e:3a:1c:ac:06:93:bf:27:50:
95:ff:c1:29:54:29:21:61:0e:ca:ce:3f:c8:13:e7:ef:93:d2:
83:4a:f9:1b:8c:0a:25:ea:33:ca:7b:4e:6d:89:73:9c:f5:d8:
d3:1e:a2:19:af:47:30:77:08:ac:0f:68:ee:e9:8c:19:c8:52:
59:7c:df:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:04 2024 by rpki-client on console-fra.rpki-client.org