Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/E8VJLvZ7vYHwePKzUDQJJThC3qc.roa
File: E8VJLvZ7vYHwePKzUDQJJThC3qc.roa (raw, json)
Hash identifier: 7cMvaCRa6NxY32v5jR94rZKgxOYxAJ1WnOrgEc404Eg=
Subject key identifier: 13:C5:49:2E:F6:7B:BD:81:F0:78:F2:B3:50:34:09:25:38:42:DE:A7
Certificate issuer: /CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
Certificate serial: 018CD9BF64E0ED717E409CBD309ADC3AAC3A
Authority key identifier: EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/E8VJLvZ7vYHwePKzUDQJJThC3qc.roa
Signing time: Fri 05 Jan 2024 13:10:48 +0000
ROA not before: Fri 05 Jan 2024 13:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49581
IP address blocks: 149.74.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Mon 08 Jan 2024 09:24:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d9:bf:64:e0:ed:71:7e:40:9c:bd:30:9a:dc:3a:ac:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
Validity
Not Before: Jan 5 13:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13c5492ef67bbd81f078f2b3503409253842dea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:25:ed:85:24:6e:73:6e:b5:d1:3b:90:92:0d:
fb:59:d0:31:33:5b:73:8a:09:cd:e0:a3:e0:c7:55:
05:fa:99:69:61:33:fa:50:54:4a:8f:19:f2:41:e6:
dc:24:ec:69:77:4e:cd:5f:99:89:11:c4:f0:cc:da:
5f:c5:8f:12:7a:ec:27:27:dc:e7:a4:35:91:2a:2d:
b0:5a:03:64:78:d9:20:fa:4f:44:4e:46:49:ad:70:
e2:01:c0:a1:af:6c:1b:8e:9a:55:8c:61:c1:fd:c0:
70:ac:52:cf:f0:3c:d4:b0:f5:9f:e5:85:6e:d5:4a:
64:ac:3f:59:e3:ad:c9:8c:c1:c7:5f:2a:d3:a8:be:
83:80:ad:50:54:55:e9:10:a9:2d:d8:df:dd:5a:c2:
03:f1:27:2b:ba:79:7c:4e:56:1e:b0:8c:8a:8c:53:
36:8f:ec:c2:0b:fe:c5:55:5a:9d:10:f7:8e:1b:b5:
82:e9:a0:c8:a5:7a:e3:21:37:12:9c:e6:9d:7c:98:
f5:fc:1d:ea:ef:50:5d:10:cb:76:a3:be:a7:b6:7f:
df:ff:2b:b3:b2:89:af:18:0c:5c:5d:00:6c:a2:76:
8f:f4:c5:a8:f2:c9:ff:e5:41:8f:b2:bf:e8:0f:e4:
7d:e9:06:1e:61:3d:ec:44:cf:a8:ce:94:e9:a0:cd:
74:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C5:49:2E:F6:7B:BD:81:F0:78:F2:B3:50:34:09:25:38:42:DE:A7
X509v3 Authority Key Identifier:
keyid:EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/E8VJLvZ7vYHwePKzUDQJJThC3qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.74.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1a:5b:fb:cc:9b:bc:4c:7f:67:ab:c7:61:16:64:e1:fe:f7:f0:
b5:1a:f9:98:af:83:41:7a:eb:69:15:f4:d8:80:23:84:1f:f4:
b1:34:7d:f1:47:34:db:36:1b:4c:dd:68:c7:b8:69:67:e4:9a:
29:66:8b:87:4f:52:27:5f:ac:e9:df:29:1b:08:88:68:6f:67:
38:d0:01:1b:9d:7d:33:02:ec:32:03:3a:f4:3a:51:67:1d:ba:
51:1c:e2:dd:9f:92:1f:a4:38:d1:da:2c:55:98:1e:a9:d6:9b:
7e:7b:88:75:3d:27:2f:00:8b:9e:b1:3c:57:ca:ac:62:15:fe:
3c:9e:09:12:2f:36:63:10:47:c8:3a:29:cb:81:6a:a1:ba:36:
12:62:63:d9:6e:79:e7:31:fb:05:e6:51:7a:34:bf:55:63:f6:
32:db:7c:5c:f0:5a:93:0f:37:f4:3a:4b:ca:89:c6:da:a0:30:
5c:70:3a:68:f2:53:fd:20:90:bf:60:2e:2d:4d:62:8f:7f:ca:
01:92:df:5f:e0:9d:f7:03:67:7a:9f:7e:6d:e3:8f:d6:45:47:
0e:15:41:3f:ab:10:76:10:ee:8a:d5:3c:d5:08:b2:f5:0d:49:
a9:a0:63:4f:5c:87:36:e5:cb:b2:e0:27:79:9d:eb:29:3d:1b:
c6:c9:e2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 8 12:45:27 2024 by rpki-client on console-fra.rpki-client.org