Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/eGCIbCOT096daEx0_bdAC8d_a_s.roa
File: eGCIbCOT096daEx0_bdAC8d_a_s.roa (raw, json)
Hash identifier: CyOuoGblMO9yQbs06j9jxzWMDI3xUS4zEuzElbchpWo=
Subject key identifier: 78:60:88:6C:23:93:D3:DE:9D:68:4C:74:FD:B7:40:0B:C7:7F:6B:FB
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 01856C6F0BECFE6BE4BBA551B2933EA09987
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/eGCIbCOT096daEx0_bdAC8d_a_s.roa
Signing time: Sun 01 Jan 2023 08:24:54 +0000
ROA not before: Sun 01 Jan 2023 08:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207960
IP address blocks: 45.129.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:0b:ec:fe:6b:e4:bb:a5:51:b2:93:3e:a0:99:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 1 08:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7860886c2393d3de9d684c74fdb7400bc77f6bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:49:d8:24:99:ec:1b:bc:60:4f:56:1b:c1:64:
9a:00:7b:4c:05:43:ff:13:9d:1e:83:f4:3b:8f:4b:
ec:f5:d2:9b:e7:f9:41:68:8f:a3:c8:00:7e:a9:e6:
6a:2f:ad:3b:fd:b0:4e:02:35:44:3a:87:bf:20:42:
5b:e8:ad:61:21:9b:4d:8b:f4:b9:1f:54:11:a0:2b:
5b:bd:2d:a9:6a:9b:3b:4a:61:1f:9b:35:f3:7b:f3:
6a:16:ec:65:b0:4d:9a:7b:d6:65:99:da:3f:57:d3:
aa:6d:43:2d:11:8c:98:37:ab:35:57:56:b1:a6:22:
be:f3:44:af:60:c8:bb:78:5a:2b:41:bf:c1:c7:dc:
1a:9b:3d:ae:14:f9:7d:80:68:ea:94:2f:9e:74:da:
0d:22:76:6a:19:b9:50:94:ec:13:a4:dc:f5:b2:e0:
45:73:37:2d:1d:7d:c5:61:26:09:a3:0c:1f:9d:22:
9b:50:a7:00:7e:0c:75:81:e3:9b:1c:73:19:fe:7a:
92:c9:71:27:f2:fd:b7:84:3b:cf:2a:01:d3:c2:ac:
13:ac:05:dd:8f:d8:af:5e:0b:86:8f:bc:2c:4c:f6:
ac:a0:8e:05:9d:e1:ac:67:d4:d1:79:36:a2:2c:39:
58:58:65:00:83:56:3e:30:de:75:5d:09:e5:50:e7:
4d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:60:88:6C:23:93:D3:DE:9D:68:4C:74:FD:B7:40:0B:C7:7F:6B:FB
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/eGCIbCOT096daEx0_bdAC8d_a_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.95.0/24
Signature Algorithm: sha256WithRSAEncryption
54:77:d5:c6:86:cd:e7:c6:e8:c0:b2:02:d3:68:1b:3e:74:c5:
29:f0:c2:84:b8:03:b3:92:eb:fb:da:5d:a7:c4:89:f2:f6:4c:
6e:bc:bb:07:99:99:09:9a:af:d2:44:da:ba:40:01:4f:7e:c8:
85:3c:27:41:85:b3:7b:03:27:fa:7f:33:13:b7:1f:fe:88:a5:
d4:e6:e3:b3:6a:e1:bd:b8:a7:d2:e6:64:84:6a:61:79:ba:1a:
55:d2:97:ba:25:c7:96:c5:b6:95:6a:1d:58:82:8a:c2:27:c0:
4a:77:11:79:d7:d1:ef:34:77:f9:52:93:d9:aa:de:3b:f1:97:
ab:9c:ab:de:e4:59:12:20:df:a9:b2:14:a6:1d:c6:ca:57:2c:
15:5e:aa:f8:95:42:a1:cd:12:52:a0:fe:fb:04:40:be:36:68:
a2:7c:06:bb:a9:f8:17:62:49:f2:40:34:47:67:ba:92:65:b5:
dd:32:a3:27:ae:92:ca:25:be:a9:18:ab:ba:0d:4c:cb:e9:dd:
5a:eb:93:d8:ce:93:a2:77:42:e2:f4:84:39:1b:68:78:64:16:
fd:cb:58:42:a9:57:56:2a:87:e8:80:00:49:81:ac:1c:b2:b7:
5c:7b:e4:f3:aa:b9:66:3a:ab:1f:c2:0d:ce:32:59:07:e3:a2:
ab:cc:d0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:39 2024 by rpki-client on console-ams.rpki-client.org