Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/Ebo5W40IowCfDfZ8j3FDDPwM3UA.roa
File: Ebo5W40IowCfDfZ8j3FDDPwM3UA.roa (raw, json)
Hash identifier: 0hlmU01U6QFQqJN+CvVHM2KmGuOfHPdWibH5c2LlYLA=
Subject key identifier: 11:BA:39:5B:8D:08:A3:00:9F:0D:F6:7C:8F:71:43:0C:FC:0C:DD:40
Certificate issuer: /CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5
Certificate serial: 01856C9CC955A4D0AC20505BB13E42F66B32
Authority key identifier: AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/Ebo5W40IowCfDfZ8j3FDDPwM3UA.roa
Signing time: Sun 01 Jan 2023 09:14:52 +0000
ROA not before: Sun 01 Jan 2023 09:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39460
IP address blocks: 195.66.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:c9:55:a4:d0:ac:20:50:5b:b1:3e:42:f6:6b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5
Validity
Not Before: Jan 1 09:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11ba395b8d08a3009f0df67c8f71430cfc0cdd40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:57:30:cb:f3:ec:1a:51:ec:77:30:9e:42:7c:
78:3c:3a:a9:15:ff:bf:95:60:f4:b2:91:b6:22:ff:
b3:3e:09:d6:e9:42:99:02:25:a3:ea:ed:ff:32:98:
91:36:77:d9:99:d3:fd:2e:83:fe:f4:83:a5:a9:41:
a4:33:3e:43:26:3a:4c:ab:ad:1d:d9:b2:46:b9:12:
05:80:5b:4e:65:60:af:20:10:98:34:49:b6:8a:eb:
f3:a1:bb:7e:43:4e:14:6b:d3:e2:5d:5f:e1:84:f7:
15:ed:eb:8e:4b:7a:78:52:6b:bc:57:e2:c8:ce:a8:
c8:1f:f8:50:04:2f:e2:fd:70:44:65:d0:5e:42:74:
8a:3b:3a:ac:34:d9:aa:a9:95:3a:b4:9b:1d:4e:88:
a1:1c:18:e8:33:0b:b7:8a:7f:d1:ff:8e:59:fc:7c:
e6:96:c8:ba:fa:2a:ac:bd:e9:5c:4a:41:ba:ae:e3:
a4:3f:12:40:a2:00:ca:a3:6d:8e:dc:78:bd:27:39:
29:4e:ae:7f:c7:c4:08:19:9a:36:04:e4:1a:88:0d:
59:a5:fb:75:e4:fd:23:c4:2b:86:53:34:4c:77:a0:
08:0a:50:2d:cf:ce:b6:e7:ed:5f:91:6a:4f:43:a1:
5d:76:a2:86:cf:be:16:6a:fe:94:86:75:c8:e3:7c:
71:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BA:39:5B:8D:08:A3:00:9F:0D:F6:7C:8F:71:43:0C:FC:0C:DD:40
X509v3 Authority Key Identifier:
keyid:AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/Ebo5W40IowCfDfZ8j3FDDPwM3UA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.92.0/24
Signature Algorithm: sha256WithRSAEncryption
17:4d:b2:8d:d0:fa:fc:c4:88:08:e4:6d:ff:a7:7b:a4:9f:29:
dd:ee:d7:48:79:4c:b7:71:e0:d0:50:bc:34:67:f8:c9:15:97:
ed:53:42:e6:ee:bf:82:24:3f:47:bf:c3:17:78:d5:3b:2b:00:
9e:1f:02:c8:c8:2d:6e:ea:ae:6f:69:3a:b8:5e:cb:15:13:47:
e0:dc:8c:6c:08:d7:b2:cb:a3:3c:0b:be:26:fe:16:ec:f6:26:
88:53:3f:47:ae:58:0d:a0:b8:87:36:1f:0e:96:f0:e2:fd:da:
24:06:51:4e:ee:b2:b5:06:3f:49:a4:fb:64:2f:cc:e4:b8:fb:
ac:2f:fb:ea:5f:d8:60:5a:0b:a7:d6:4b:31:ad:e5:42:ee:63:
13:4e:2d:9a:aa:fd:ab:f5:24:59:62:49:d7:05:3b:01:9e:59:
cf:26:d2:de:cb:9d:31:55:88:15:69:19:10:ed:e8:3d:10:d4:
3a:27:69:9c:8a:76:b8:26:a7:4c:d9:ff:de:1d:d7:8d:86:e6:
12:4a:5f:96:95:19:83:10:1a:45:28:67:f0:5d:da:af:ed:29:
ee:01:85:62:6e:dc:2f:d1:aa:61:70:1f:16:2f:cc:35:5a:7c:
a1:f0:35:b9:8f:e3:81:ca:56:71:f7:9c:af:0f:ac:c6:ca:67:
15:e5:dd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:51 2024 by rpki-client on console-fra.rpki-client.org