Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/E0lygxM8tL8wVqaUBE3ZsfvSGME.roa
File: E0lygxM8tL8wVqaUBE3ZsfvSGME.roa (raw, json)
Hash identifier: Fno3PCmHDL1EXXpR50ilWuR3gxlDqMAugKUu+QOtdUE=
Subject key identifier: 13:49:72:83:13:3C:B4:BF:30:56:A6:94:04:4D:D9:B1:FB:D2:18:C1
Certificate issuer: /CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Certificate serial: 018CC50044628EC4BECFF58B8AD1E191822F
Authority key identifier: E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/E0lygxM8tL8wVqaUBE3ZsfvSGME.roa
Signing time: Mon 01 Jan 2024 12:29:38 +0000
ROA not before: Mon 01 Jan 2024 12:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15703
IP address blocks: 213.171.72.0/23 maxlen: 23
79.98.176.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 14 May 2024 15:05:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:44:62:8e:c4:be:cf:f5:8b:8a:d1:e1:91:82:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Validity
Not Before: Jan 1 12:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13497283133cb4bf3056a694044dd9b1fbd218c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a0:65:52:64:8c:d0:b2:36:62:e2:2f:2d:0a:
31:e6:ab:e0:a9:78:7b:64:b9:fc:aa:9a:d6:52:97:
e1:ea:ef:6b:cd:c1:fa:e1:a8:d3:0e:4e:33:82:62:
bd:b9:06:40:4a:c8:26:75:36:af:3e:3b:35:38:69:
f5:9a:a3:94:cb:cb:a7:72:02:6e:71:f6:8f:e7:d0:
1d:7b:6e:2a:ce:95:af:ae:74:8f:4d:86:13:76:72:
25:aa:50:dd:49:ad:8c:41:3b:c2:00:05:d4:c9:20:
18:64:89:d8:1d:4e:13:87:3e:5e:34:d8:f0:b9:77:
0d:79:99:ab:8d:e2:11:88:31:d0:59:2e:f8:79:d7:
46:ba:43:9c:6c:52:99:03:28:97:07:d9:02:31:d6:
32:48:a8:59:26:0d:84:2c:c4:11:31:be:9f:2a:3a:
41:81:96:0a:5d:c7:5e:8c:66:40:e6:4f:86:77:dd:
5d:3a:8c:8d:09:a6:2c:1f:4e:fc:89:3e:95:fa:e2:
e7:59:52:0d:df:2f:57:57:b2:a6:bc:2b:1f:1b:02:
a7:a8:47:70:02:7b:82:d4:64:1c:d6:00:9b:99:6f:
da:c5:71:35:59:b5:a2:b8:57:a9:06:2d:0d:e0:6b:
53:33:dc:e9:d7:90:4a:d6:ef:48:e3:b5:02:ce:b1:
00:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:49:72:83:13:3C:B4:BF:30:56:A6:94:04:4D:D9:B1:FB:D2:18:C1
X509v3 Authority Key Identifier:
keyid:E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/E0lygxM8tL8wVqaUBE3ZsfvSGME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.176.0/22
213.171.72.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:70:a9:b0:5b:00:21:45:28:55:82:5b:3b:b8:f1:86:5d:4e:
46:bd:01:95:4f:07:8e:e9:1d:aa:90:b0:b5:34:9c:f0:07:de:
c0:73:8a:1b:25:4a:c3:26:3a:26:ab:14:63:3e:e7:ae:97:91:
95:b8:07:e0:72:8d:8c:48:4f:ab:7e:19:e9:6f:cd:78:51:44:
9b:e4:6d:96:19:43:0e:c8:f9:92:90:b2:32:86:a7:1a:c4:45:
8c:83:64:b1:9a:0b:8d:19:94:81:41:fd:14:c7:9a:dc:eb:26:
79:d1:0e:e9:2f:8d:b9:65:ad:c4:ae:78:88:a2:98:c6:10:96:
0b:c0:1d:2c:0c:b3:0d:70:24:66:14:0e:d9:6e:66:c5:59:e2:
c9:de:37:4b:6d:c8:83:e1:52:4f:16:96:d0:65:50:8a:1b:2c:
9e:2d:17:54:c8:02:27:d4:b3:01:89:20:ce:28:26:c1:12:55:
4e:1f:1d:a3:b8:d8:7f:6c:d6:c1:67:17:f7:41:91:ed:e4:ec:
42:2c:d7:13:2a:98:2b:78:56:2d:fb:ba:e3:53:82:b3:57:a6:
65:9b:85:9d:e7:e4:aa:bf:85:a3:97:c1:94:e7:ce:56:dc:78:
9a:88:6e:d1:49:bd:ea:9b:2f:6e:ff:90:ca:a4:a2:fe:b1:9b:
14:54:b3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:47 2024 by rpki-client on console-ams.rpki-client.org