Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/EJMC7q4xBxGLNmMhnRrBLopY6ww.roa
File: EJMC7q4xBxGLNmMhnRrBLopY6ww.roa (raw, json)
Hash identifier: 7yJmkVLo/W0lp9iq/EONP4G8EH6uBuKkYWspEywSugs=
Subject key identifier: 10:93:02:EE:AE:31:07:11:8B:36:63:21:9D:1A:C1:2E:8A:58:EB:0C
Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Certificate serial: 018570B07C9F4FD3AA812F56AB5C4B27EDBD
Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/EJMC7q4xBxGLNmMhnRrBLopY6ww.roa
Signing time: Mon 02 Jan 2023 04:14:52 +0000
ROA not before: Mon 02 Jan 2023 04:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 45.150.224.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:7c:9f:4f:d3:aa:81:2f:56:ab:5c:4b:27:ed:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Validity
Not Before: Jan 2 04:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=109302eeae3107118b3663219d1ac12e8a58eb0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b4:d9:d7:6c:13:66:cf:9b:47:97:34:a7:2d:
ee:4a:dc:50:24:93:80:ae:5c:e8:2d:7a:c9:cc:0e:
f2:a4:fe:a5:97:50:f9:f9:43:5c:4f:98:9b:fe:b8:
a2:f1:f0:e1:36:ad:e2:0f:a5:56:56:47:67:de:b7:
e4:1d:ff:78:6c:66:49:b3:65:0c:a8:b3:3a:79:31:
be:a7:65:8d:e7:2e:57:a8:5e:de:ad:72:02:81:ba:
eb:86:4b:81:42:e1:2f:8b:79:7f:60:46:3e:01:fb:
8e:57:d3:46:76:10:44:d2:58:31:29:ad:f9:46:e0:
d8:19:c2:86:e1:97:91:5c:de:c3:40:da:e1:c5:fa:
d5:c5:6b:93:a8:d3:1d:19:ab:12:e3:d2:ec:cd:b5:
93:7a:c5:6d:77:17:6a:22:0f:5c:28:45:ad:a1:28:
6d:3e:05:49:74:b0:f8:07:ed:f8:0c:18:3d:a1:42:
85:c2:74:f2:cd:1a:cc:24:1f:5a:ac:cc:f2:f4:29:
77:44:df:ee:8d:55:90:1b:4e:0b:a7:4e:fd:7f:7a:
c9:ab:8f:a6:a3:c9:3b:c5:fa:41:c8:f8:b2:66:ae:
ed:db:0b:da:3c:a1:b7:c1:2f:29:1c:13:76:a2:2f:
fc:86:1d:b1:35:21:13:d7:4a:91:62:82:25:c4:b2:
40:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:93:02:EE:AE:31:07:11:8B:36:63:21:9D:1A:C1:2E:8A:58:EB:0C
X509v3 Authority Key Identifier:
keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/EJMC7q4xBxGLNmMhnRrBLopY6ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.224.0/24
Signature Algorithm: sha256WithRSAEncryption
82:6c:ee:3d:13:77:f5:a3:19:23:de:e3:10:d8:dd:83:ee:a1:
67:68:19:b0:9b:6d:00:0d:21:54:12:89:1a:ba:f3:df:91:f5:
4a:03:7e:5f:e5:08:00:4f:36:85:47:15:7f:c4:dd:fd:4b:fa:
81:58:bc:d2:5b:c7:2a:ac:f5:f1:34:6d:d2:d6:08:59:1e:6b:
e7:68:04:1c:e2:32:1d:4c:bf:8e:20:49:61:3e:f9:67:f5:6a:
cb:d1:93:29:c6:31:bc:cb:97:ce:56:65:67:39:bb:01:38:c7:
0d:a2:d7:b5:ad:fc:6a:00:6f:13:28:24:6e:a1:c5:5d:93:e1:
06:e0:e2:5a:c9:e0:39:b1:b3:d4:39:10:91:c1:92:34:d6:62:
0e:f8:b6:6d:ce:1a:f6:4c:66:d0:e6:04:a0:a2:08:77:6b:b2:
e5:9c:64:bd:13:bc:2f:48:ab:4a:f1:20:d8:48:20:33:4e:9d:
a0:d1:ac:c2:70:f1:e2:ef:31:39:fc:a5:41:15:8e:f9:14:57:
8a:fe:11:d9:3b:5e:a2:44:db:d3:b6:ac:95:ba:8a:7b:e5:72:
c3:3d:15:98:bb:e2:f6:dc:1f:05:f7:f5:c4:cb:99:8f:34:f6:
20:cc:49:b8:eb:57:de:ed:6a:0c:43:5f:af:35:27:30:61:ef:
b0:14:68:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:38:07 2024 by rpki-client on console-fra.rpki-client.org