Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/ECHmCLCiHP6xhhhIspOIx-NjfA8.roa
File: ECHmCLCiHP6xhhhIspOIx-NjfA8.roa (raw, json)
Hash identifier: bcR5QuPnST7Ye0Icyef+apHMs5vCUcyBESRxOPnq0II=
Subject key identifier: 10:21:E6:08:B0:A2:1C:FE:B1:86:18:48:B2:93:88:C7:E3:63:7C:0F
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 01856D6641F9DBDD84BEA27152B6EFA57EC0
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/ECHmCLCiHP6xhhhIspOIx-NjfA8.roa
Signing time: Sun 01 Jan 2023 12:54:56 +0000
ROA not before: Sun 01 Jan 2023 12:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35831
IP address blocks: 84.207.248.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:41:f9:db:dd:84:be:a2:71:52:b6:ef:a5:7e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 12:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1021e608b0a21cfeb1861848b29388c7e3637c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:84:22:85:8d:83:1c:3e:2a:72:21:52:1b:2f:
ad:2b:34:55:6e:b3:62:81:f5:50:cf:06:3f:03:53:
7d:7f:95:04:11:cd:6a:26:4a:6d:34:34:75:bf:57:
8b:8f:53:ba:1a:d8:72:fe:81:a6:52:8c:3e:64:88:
57:ed:0b:86:5e:8d:6e:03:bb:a8:10:30:68:55:df:
ea:5e:8b:5b:49:26:d7:28:d9:51:0b:25:81:89:fa:
fe:a2:08:b0:ef:58:29:bc:94:13:16:9a:b5:76:41:
eb:99:94:5c:da:9b:3b:34:01:84:29:80:74:3c:ff:
78:44:cd:62:33:c4:61:a8:33:2e:e0:c2:6c:fc:98:
b6:b5:d9:0f:10:80:7c:00:5c:cf:60:8f:61:fb:27:
f2:1c:6e:e0:d4:7f:f4:46:14:b3:96:99:ed:3b:d1:
30:0f:58:20:a2:ab:6e:5e:00:6d:8c:40:f3:e7:df:
1e:03:ed:42:cd:33:3d:16:25:34:8f:fa:f8:fe:2c:
9c:a5:d3:cc:4a:8e:a6:71:4d:c2:dc:c9:2a:98:19:
5a:a2:45:ea:ff:0a:48:8b:ab:46:e5:77:96:a6:24:
bf:ea:a9:ff:cb:04:2f:9b:ce:e5:4d:85:2f:12:73:
47:62:83:57:e0:11:22:83:f0:99:7c:97:53:c8:13:
7b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:21:E6:08:B0:A2:1C:FE:B1:86:18:48:B2:93:88:C7:E3:63:7C:0F
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/ECHmCLCiHP6xhhhIspOIx-NjfA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.207.248.0/23
Signature Algorithm: sha256WithRSAEncryption
06:6d:c7:2c:1a:8e:3b:f3:96:a8:96:47:7c:5f:2b:ee:0a:a6:
dd:b5:53:3a:3e:e2:6b:b7:64:11:bb:e7:a0:4b:93:10:6a:f4:
57:39:35:d8:65:a6:b7:22:15:0c:4b:bb:f3:9b:cc:44:ba:a7:
3a:9f:af:c0:0f:c8:8e:dc:21:03:9a:0b:ed:77:33:6f:58:86:
ec:f4:ad:13:a4:d0:2f:fc:ee:09:bf:bc:99:4d:46:8f:d6:42:
d6:8e:b5:4d:7f:df:eb:38:32:47:12:d1:a7:0b:30:a1:7e:82:
92:6c:8d:4f:2b:c0:9a:5c:c6:dc:41:d3:f9:28:de:35:01:43:
3c:bf:93:92:ab:55:7e:04:7d:b6:39:84:04:74:76:39:1e:12:
41:f7:a6:cb:ad:b9:91:a7:5e:e7:f8:e5:52:41:13:28:b6:17:
61:81:f8:2d:c8:29:06:77:a4:6f:d1:a3:31:b9:52:a1:06:9f:
5d:d8:37:85:c2:9d:c8:c0:24:77:24:13:d6:fc:13:8c:21:9e:
e8:2a:79:06:e5:8d:1a:f1:06:0c:bc:dc:19:94:66:a2:6c:73:
01:36:f2:51:c5:06:f6:e2:0c:a7:bb:19:31:9b:61:52:ab:92:
4d:39:a3:a1:dd:59:d2:9c:a5:8b:78:e5:f5:c4:5d:83:eb:27:
e9:44:c0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:06 2024 by rpki-client on console-fra.rpki-client.org