Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/Esse-AO7LjmhvAB-D_Oav1tLQeI.roa
File: Esse-AO7LjmhvAB-D_Oav1tLQeI.roa (raw, json)
Hash identifier: qQ6af7WEA6+8wfoxRZCjtFomWpMqfMWSIsf2Lu0XhR4=
Subject key identifier: 12:CB:1E:F8:03:BB:2E:39:A1:BC:00:7E:0F:F3:9A:BF:5B:4B:41:E2
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 01856FCB82870FA14B024B32D3537CDE21BB
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/Esse-AO7LjmhvAB-D_Oav1tLQeI.roa
Signing time: Mon 02 Jan 2023 00:04:46 +0000
ROA not before: Mon 02 Jan 2023 00:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8808
IP address blocks: 80.95.21.0/24 maxlen: 24
93.175.244.0/24 maxlen: 24
93.175.245.0/24 maxlen: 24
2a0d:3b40::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 31 Mar 2023 09:05:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:82:87:0f:a1:4b:02:4b:32:d3:53:7c:de:21:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 2 00:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12cb1ef803bb2e39a1bc007e0ff39abf5b4b41e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:29:11:5d:9c:ec:2a:7f:e9:04:3f:a0:f9:06:
bb:ca:8b:a1:46:e5:f3:db:fa:cc:fc:f1:ea:ae:8b:
f3:77:9d:6e:3c:81:41:fc:b4:a9:64:e9:a8:27:c6:
72:dc:f3:77:89:d8:c6:29:82:05:a5:41:85:19:da:
12:a0:58:4f:c7:f2:63:11:b4:b7:b8:c8:fb:1e:71:
b1:77:14:70:6b:98:45:df:e6:6e:86:d1:53:9a:1c:
c7:bd:2a:9b:16:46:85:b0:0f:02:05:09:d9:23:c1:
18:50:b5:31:89:11:e3:77:97:74:9a:45:3c:17:6e:
8a:de:5e:ea:f6:a3:13:3e:e6:3a:06:03:72:ec:01:
66:fb:34:53:d5:28:6c:1b:6d:ca:ca:8c:31:cf:9f:
77:b6:71:51:07:1d:61:de:79:a2:8a:e4:54:cb:58:
18:8d:ba:d0:5c:30:5f:6a:86:9c:71:1f:b5:51:29:
0f:a3:0e:55:8c:62:e3:68:55:60:f4:42:71:7c:5b:
3f:6b:4f:e5:bc:0f:50:9f:06:9b:8b:c5:d0:51:97:
73:7d:50:48:c3:cf:64:59:c7:d9:81:7c:84:68:46:
5c:7d:ed:7d:6a:aa:32:70:75:a4:0f:e5:e7:f1:0c:
86:d6:dc:fd:86:53:8e:bf:29:3f:f5:d6:51:80:bf:
6e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CB:1E:F8:03:BB:2E:39:A1:BC:00:7E:0F:F3:9A:BF:5B:4B:41:E2
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/Esse-AO7LjmhvAB-D_Oav1tLQeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.95.21.0/24
93.175.244.0/23
IPv6:
2a0d:3b40::/29
Signature Algorithm: sha256WithRSAEncryption
4e:bf:53:0f:57:0b:c2:c1:68:b0:aa:c8:9d:9f:33:9e:13:d9:
9b:43:51:82:1c:15:fe:5b:ff:6c:fa:d4:6b:46:55:a4:4d:8e:
4f:28:64:b0:92:77:1e:0e:21:7b:65:90:4f:89:34:0d:ea:9e:
0c:39:d1:0b:82:b8:06:d1:11:b3:87:de:64:c5:a8:1d:00:36:
5c:80:3c:fc:17:4b:05:19:3b:17:51:70:11:e7:f3:38:21:77:
ce:10:c1:4c:de:95:6e:9e:38:8e:59:40:f6:f7:f7:b8:4d:48:
70:cd:50:b7:a7:96:a5:7c:34:e9:b6:89:f6:82:60:3e:28:91:
3b:a4:8d:85:e1:c8:9d:05:0b:7d:53:15:a4:70:1d:ef:90:a7:
96:33:64:49:75:4c:3a:c2:97:55:77:7f:a5:73:b4:b4:67:aa:
c0:4c:cf:88:f5:d8:0a:a5:f1:7c:75:2f:f7:b9:66:7b:e0:ea:
1e:e2:0f:30:ce:be:71:c7:fb:0b:f7:cd:f4:3a:48:2d:4d:24:
7d:e9:5e:7b:dd:cb:90:91:5e:77:8b:87:4d:37:38:f2:18:c6:
7f:33:f1:d2:30:6f:93:3c:f5:4e:f5:1c:61:be:c4:c3:1a:37:
86:41:7e:ce:4e:d8:32:be:ac:de:33:ac:d4:12:83:ac:82:d8:
28:7c:80:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:35 2024 by rpki-client on console-ams.rpki-client.org