Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/848274-493f-484d-9c48-a8ef33ff5bb0/1/eOvc7pSWPGM8dEGNA92MOxseXGQ.roa
File: eOvc7pSWPGM8dEGNA92MOxseXGQ.roa (raw, json)
Hash identifier: YXvbveeyGS/Q2dpqlexIW5V7jO/7OLCzpWWaWbBq+Qc=
Subject key identifier: 78:EB:DC:EE:94:96:3C:63:3C:74:41:8D:03:DD:8C:3B:1B:1E:5C:64
Certificate issuer: /CN=7994a43de69d14fb1447424e2cade54f9922baaf
Certificate serial: 018570E7522CC811134BD2CC60586AF62314
Authority key identifier: 79:94:A4:3D:E6:9D:14:FB:14:47:42:4E:2C:AD:E5:4F:99:22:BA:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZSkPeadFPsUR0JOLK3lT5kiuq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/848274-493f-484d-9c48-a8ef33ff5bb0/1/eOvc7pSWPGM8dEGNA92MOxseXGQ.roa
Signing time: Mon 02 Jan 2023 05:14:46 +0000
ROA not before: Mon 02 Jan 2023 05:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209311
IP address blocks: 45.132.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:52:2c:c8:11:13:4b:d2:cc:60:58:6a:f6:23:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7994a43de69d14fb1447424e2cade54f9922baaf
Validity
Not Before: Jan 2 05:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78ebdcee94963c633c74418d03dd8c3b1b1e5c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:89:a2:f8:38:76:1a:d2:87:9b:d1:87:ad:31:
38:6e:f7:aa:ef:4f:5d:6c:e6:41:e4:1f:81:ae:3f:
ec:24:22:e9:db:95:74:9a:a7:c0:ec:16:47:40:31:
20:a9:89:32:74:be:ae:ef:b4:af:4a:14:f1:8e:b6:
84:7f:f8:69:ea:e7:3d:30:26:88:a0:32:cb:54:5e:
c7:2b:f9:fa:f0:de:c2:a6:85:0a:d8:69:88:5e:56:
6c:0d:c0:be:89:88:8b:40:ad:a8:fc:09:9d:b4:45:
b8:0d:ae:86:9f:a6:9a:72:48:e1:25:46:e6:59:58:
fe:f8:1f:a8:5c:48:fb:54:8d:4d:b2:ca:c7:03:ae:
02:80:f8:e8:7b:c5:04:c6:cf:5c:44:79:e7:02:a0:
d8:9f:e9:a3:75:9c:e9:3e:02:85:4b:29:86:17:4e:
89:26:a9:ad:04:bb:32:d2:1a:3c:ca:1f:71:03:b2:
87:c9:31:0d:6c:70:3d:22:16:8b:d8:d2:0a:64:16:
49:04:a9:de:3c:a7:97:dd:91:5d:2b:8c:7c:fd:4e:
79:e3:8e:ea:cb:28:a9:7b:29:dd:e1:9c:32:da:5d:
5a:80:19:cd:a6:8c:de:ac:27:65:91:1d:61:5d:a0:
99:c4:d2:a3:8a:00:32:c6:40:07:25:ea:95:bb:43:
db:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:EB:DC:EE:94:96:3C:63:3C:74:41:8D:03:DD:8C:3B:1B:1E:5C:64
X509v3 Authority Key Identifier:
keyid:79:94:A4:3D:E6:9D:14:FB:14:47:42:4E:2C:AD:E5:4F:99:22:BA:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZSkPeadFPsUR0JOLK3lT5kiuq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/848274-493f-484d-9c48-a8ef33ff5bb0/1/eOvc7pSWPGM8dEGNA92MOxseXGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/848274-493f-484d-9c48-a8ef33ff5bb0/1/eZSkPeadFPsUR0JOLK3lT5kiuq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.2.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:8e:25:18:c8:d0:02:fb:66:98:0d:ee:b1:41:78:16:78:1c:
17:9f:1d:ad:8d:12:e0:36:e7:5f:65:a2:ae:31:71:03:b4:d3:
b1:5c:d7:ef:52:7a:ad:b6:6f:d2:1b:24:b9:7b:16:92:43:82:
45:1a:0a:0e:e8:42:8a:2d:9d:22:e1:fc:f5:f4:70:9c:c4:da:
49:46:8c:6d:c8:13:2f:93:95:be:2f:2d:18:c3:94:a3:1b:76:
84:75:1e:e7:bc:56:56:ab:99:41:87:75:53:e4:1e:3d:5f:0e:
79:36:3a:88:27:ed:cb:43:7d:9c:bd:a5:e1:1e:80:07:d9:5b:
2a:1d:69:15:a9:78:12:bc:ec:d5:86:dc:78:48:56:64:2e:7e:
f8:ab:a5:e6:2d:74:0f:1f:fb:c8:8e:cc:7d:78:ea:71:9b:9c:
ef:1b:8b:02:50:9b:dc:4c:0d:7f:87:8e:e4:98:74:e0:88:08:
ff:5a:19:05:bd:50:1c:b2:34:3d:76:27:d3:db:dd:3e:14:91:
a7:62:f3:cc:4d:c9:66:8b:af:61:d4:b7:52:85:d8:d1:af:6e:
a8:41:d2:3f:f4:fa:be:b2:18:19:94:53:2c:da:bb:38:d3:21:
e3:e1:40:95:24:51:e0:2a:0f:a2:a6:07:65:a7:92:75:95:75:
68:71:42:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:38 2024 by rpki-client on console-fra.rpki-client.org