Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/EkayXzV0vDf96fM8sEZz8bW245Q.roa
File: EkayXzV0vDf96fM8sEZz8bW245Q.roa (raw, json)
Hash identifier: XgZl15hCDnue3KFS8cIyf2BV4WAeAfNvKVg8zyWSRVc=
Subject key identifier: 12:46:B2:5F:35:74:BC:37:FD:E9:F3:3C:B0:46:73:F1:B5:B6:E3:94
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 0191C63DC5937867B91E9BBCCA28AE9F3062
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/EkayXzV0vDf96fM8sEZz8bW245Q.roa
Signing time: Fri 06 Sep 2024 07:30:22 +0000
ROA not before: Fri 06 Sep 2024 07:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 5.181.200.0/24 maxlen: 24
45.158.83.0/24 maxlen: 24
185.225.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 16:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c6:3d:c5:93:78:67:b9:1e:9b:bc:ca:28:ae:9f:30:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Sep 6 07:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1246b25f3574bc37fde9f33cb04673f1b5b6e394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f7:f9:26:75:e3:91:61:09:17:28:ea:1a:e1:
82:05:47:5b:cf:af:0e:6f:66:f4:40:32:52:2c:51:
6e:53:6e:1b:74:00:8f:a7:c2:4a:09:bb:8a:f8:a6:
35:d6:2f:a4:02:5f:c4:bd:1f:60:a0:99:5a:3d:c7:
f4:02:3d:e0:4c:3a:37:fa:bf:be:61:f3:94:29:05:
80:f8:64:2b:fa:d9:91:d9:e8:7d:01:b7:c1:1c:bd:
43:d9:b4:6c:5f:0f:a9:79:33:93:33:26:a0:33:c0:
39:fa:9f:d2:02:77:4c:d6:84:c2:28:68:5a:27:63:
a2:25:81:32:ba:25:99:15:99:ad:ab:f5:e5:cf:3a:
7e:f1:2f:9e:97:11:d1:db:7e:8b:7b:9e:38:e2:c0:
99:c5:96:98:b6:ae:3a:0a:2f:5f:85:85:ef:c4:23:
e6:69:b1:45:c6:0a:63:b5:35:74:aa:c9:a5:90:d3:
6d:3b:b3:44:8c:59:52:1b:19:e7:86:74:27:b0:6c:
aa:c7:ae:71:ca:ff:f6:9a:ec:35:c0:c6:30:f6:ce:
2f:cc:07:ce:67:56:8a:f7:4a:24:64:3d:ce:45:f8:
bd:c5:c5:de:ef:91:da:b2:d4:eb:e9:1f:97:f4:ec:
f2:b7:0c:8c:d4:19:2c:a1:da:ef:e4:7d:19:05:53:
b1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:46:B2:5F:35:74:BC:37:FD:E9:F3:3C:B0:46:73:F1:B5:B6:E3:94
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/EkayXzV0vDf96fM8sEZz8bW245Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.200.0/24
45.158.83.0/24
185.225.206.0/24
Signature Algorithm: sha256WithRSAEncryption
53:cb:3b:03:07:dd:96:fb:03:ca:d7:0d:19:1b:c5:6f:b9:ab:
3e:c5:a6:7e:87:28:3a:75:a3:ff:c4:7d:85:dd:82:13:11:76:
cf:85:d3:a0:6c:20:fb:b9:ca:b2:87:ae:3c:1c:6e:ee:c8:7c:
c7:bd:54:9a:48:fd:0a:ef:75:bc:b7:35:e9:6d:4b:04:62:81:
bb:5d:57:ab:89:99:0a:cc:88:39:79:c8:ab:1f:af:8e:36:89:
f7:dd:0d:c8:1d:35:d4:25:ba:d9:11:b8:01:c7:65:8a:0c:70:
60:8c:1f:8c:34:38:97:87:bf:7d:88:37:94:4e:e7:61:8a:27:
b5:55:01:d2:40:72:57:6f:da:a5:7c:06:9e:82:db:8d:33:ac:
e4:22:6b:05:5f:72:fd:c1:fc:b4:20:0a:27:cb:90:59:5a:ff:
22:7f:9b:4e:de:a4:03:2a:bf:f6:43:6e:6c:ed:39:fe:91:b6:
80:f0:f6:b7:76:f6:9d:c6:81:93:32:ce:76:2f:06:07:ad:91:
cc:bb:69:f7:0d:32:53:33:4d:85:75:ae:40:9c:11:54:f3:a1:
e6:54:d0:04:c6:4d:b8:3d:26:10:3c:93:f9:ff:76:a2:80:dc:
c0:f1:7a:d2:d3:88:ae:b8:49:6a:01:e0:c6:f9:89:f4:68:8e:
73:77:04:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:33:53 2024 by rpki-client on console-ams.rpki-client.org