Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/EanWtpVM-r8BnnlwNNpVfOaoo0g.roa
File: EanWtpVM-r8BnnlwNNpVfOaoo0g.roa (raw, json)
Hash identifier: iAGjwESu6AbCUP5ceEdItq5x+9BjAsSt5c+DZ0Qy/N8=
Subject key identifier: 11:A9:D6:B6:95:4C:FA:BF:01:9E:79:70:34:DA:55:7C:E6:A8:A3:48
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 018708CCB7E35E81DD663D14FC6DFA3BAE6B
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/EanWtpVM-r8BnnlwNNpVfOaoo0g.roa
Signing time: Wed 22 Mar 2023 10:10:46 +0000
ROA not before: Wed 22 Mar 2023 10:10:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.146.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Mar 2023 07:45:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:08:cc:b7:e3:5e:81:dd:66:3d:14:fc:6d:fa:3b:ae:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Mar 22 10:10:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11a9d6b6954cfabf019e797034da557ce6a8a348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:56:dc:a9:a4:bb:2e:8b:30:84:da:40:e3:3c:
71:e3:5a:f4:1f:99:b9:07:c0:68:e5:be:aa:a7:92:
28:c2:47:6a:60:39:75:f5:65:10:e7:47:4f:a6:14:
c4:37:22:2d:97:6f:e9:b3:5b:f4:b3:6c:c4:42:83:
62:54:eb:d9:b4:c9:4d:44:31:da:16:16:c9:0c:e1:
87:4b:ea:e7:11:e5:d8:7f:0a:03:84:f0:ac:87:f4:
40:1e:7e:91:1a:c7:d5:da:b4:47:88:1e:c3:77:a0:
c8:ae:31:ed:5a:e9:17:de:1b:34:01:e2:e8:13:18:
f2:fe:29:7c:c7:cf:0b:1b:d3:2f:63:24:02:76:c7:
d8:d0:a6:94:90:b7:9a:6b:f6:8f:a5:1b:ca:41:52:
e1:03:9b:4f:09:35:e6:75:70:98:05:52:42:d4:fb:
19:dd:75:7d:9c:71:6a:0a:27:ed:83:6f:1a:d8:10:
76:e2:96:59:4d:89:e5:77:0a:7a:00:87:da:54:0a:
c6:dc:84:71:6e:b7:41:df:76:82:fc:80:22:db:7c:
c3:20:0c:05:39:55:de:78:cf:ee:0c:3b:75:a9:ed:
93:57:c2:59:d9:6e:03:64:7f:c0:f6:93:70:92:69:
41:b9:61:41:94:7f:f6:87:2d:18:b3:d7:93:e2:ca:
ab:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A9:D6:B6:95:4C:FA:BF:01:9E:79:70:34:DA:55:7C:E6:A8:A3:48
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/EanWtpVM-r8BnnlwNNpVfOaoo0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.202.0/24
Signature Algorithm: sha256WithRSAEncryption
53:17:2e:ed:55:8d:21:39:2c:c1:7e:1b:cd:f6:fe:19:3e:61:
37:f7:37:fa:fe:e3:0e:e8:ff:2a:0a:6d:31:a8:c6:dc:72:bb:
f2:9a:18:09:dd:cc:4a:83:a0:4c:eb:d5:6e:c6:85:f4:f6:76:
05:68:f3:7d:3b:fe:89:92:dd:d8:f2:fc:7d:21:e3:b7:be:57:
5e:a2:3c:b8:30:f8:4f:f7:2c:c6:34:42:f8:85:71:3e:02:4f:
bd:5c:f6:30:1e:b2:48:87:42:aa:85:3b:7b:59:16:84:d3:6d:
f8:0b:ae:16:b3:9c:cb:16:c2:50:85:92:38:d6:ab:7d:a3:5f:
b8:60:69:dc:28:ec:47:a4:bf:2c:63:29:03:f7:30:fb:8c:d5:
1b:03:2a:a6:47:45:cf:fe:6b:77:2b:88:8b:54:df:f5:3d:86:
68:f0:53:21:60:41:18:9d:ce:7e:ac:6d:af:63:7e:35:5e:73:
81:fa:3c:2e:90:6e:a5:e4:c3:dc:00:56:e0:fe:eb:86:1c:e0:
53:ab:3b:24:04:75:8b:b8:1d:83:6c:84:40:d6:9f:56:a8:e5:
a9:4a:53:06:a2:82:54:5a:96:54:1b:c4:b6:c9:65:39:59:6f:
f2:21:65:aa:4b:b6:be:46:b6:dc:12:ff:25:77:3e:6b:05:8c:
11:cc:e6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:50 2024 by rpki-client on console-fra.rpki-client.org