Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/EB3kdB2_C5EGbiga4KNspvTgUbY.roa
File: EB3kdB2_C5EGbiga4KNspvTgUbY.roa (raw, json)
Hash identifier: ijj2ftCsiWDEKFxTfaj7Uy+oz1WdlLjTNuMGeVhHjE8=
Subject key identifier: 10:1D:E4:74:1D:BF:0B:91:06:6E:28:1A:E0:A3:6C:A6:F4:E0:51:B6
Certificate issuer: /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Certificate serial: 01856F26D4FA779D8838803019242193710C
Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/EB3kdB2_C5EGbiga4KNspvTgUbY.roa
Signing time: Sun 01 Jan 2023 21:04:53 +0000
ROA not before: Sun 01 Jan 2023 21:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 559
IP address blocks: 193.134.216.0/21 maxlen: 21
185.144.36.0/22 maxlen: 22
2a07:3e00::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:d4:fa:77:9d:88:38:80:30:19:24:21:93:71:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Validity
Not Before: Jan 1 21:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=101de4741dbf0b91066e281ae0a36ca6f4e051b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:42:68:68:22:b9:3f:c9:9b:35:16:a4:1f:13:
a4:4f:20:a1:90:bc:e6:c6:f8:4f:a5:c2:b7:52:7d:
b0:0b:b0:ce:5f:6f:bd:cc:bd:17:a9:4c:2b:dd:ae:
a9:41:d7:13:5e:cd:69:b0:0a:7f:af:e0:59:60:fa:
08:28:b3:8d:f9:cb:34:45:23:d4:c3:cb:db:1c:50:
b4:6b:6d:24:f9:78:43:35:ed:08:60:4b:1c:bd:b5:
b7:76:ba:a6:0e:79:02:36:f9:05:06:1b:9f:01:7d:
a9:dd:9e:79:c9:a5:96:07:51:33:2c:88:b3:77:ae:
54:d2:14:52:00:43:93:0e:e6:80:ac:63:d7:17:b0:
bd:16:c4:c7:63:5b:ed:47:1b:71:2c:9d:73:92:c3:
3b:9d:3d:cd:1a:0f:b2:24:d9:ab:17:5c:6a:34:93:
36:e9:bb:b4:6a:f0:3b:e9:01:21:cb:d2:d6:ee:ac:
a0:28:34:79:fd:dd:0d:ed:6d:9e:67:a0:d3:45:99:
a9:5b:db:ac:8e:4e:72:f9:ac:2c:10:bd:f9:cf:be:
1d:4d:f8:0f:0c:6e:22:82:af:9f:41:e7:b4:db:ca:
04:d0:22:7c:68:a5:20:a5:ac:4a:86:3e:a4:7a:e3:
84:c0:12:e1:53:1f:fe:59:20:d4:e4:6c:e4:f3:27:
8e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1D:E4:74:1D:BF:0B:91:06:6E:28:1A:E0:A3:6C:A6:F4:E0:51:B6
X509v3 Authority Key Identifier:
keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/EB3kdB2_C5EGbiga4KNspvTgUbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.36.0/22
193.134.216.0/21
IPv6:
2a07:3e00::/29
Signature Algorithm: sha256WithRSAEncryption
37:ac:b7:1f:ed:69:e6:cc:2f:10:28:a5:b4:55:67:85:36:5d:
e2:44:45:36:de:87:08:5d:04:c7:4a:a5:df:0f:9f:cf:98:af:
39:e5:22:a3:40:d1:da:31:ad:20:41:93:64:db:ed:d4:3f:ba:
f7:25:10:a4:88:e4:25:ca:c7:d6:f2:22:92:b6:7d:52:1d:53:
8e:22:dd:3b:e1:c6:74:47:ad:07:6c:f5:14:55:0c:d2:bd:ea:
78:d3:e5:23:99:9a:f3:bf:58:bc:e4:67:63:4b:4d:4f:51:ee:
1d:f4:83:d4:cf:87:1c:88:dd:f5:7a:3d:4d:c6:be:c7:23:11:
c6:db:e1:fe:26:91:7f:64:16:29:3a:f7:35:64:b7:03:64:6b:
99:05:ac:84:77:87:b2:a2:5b:18:1c:28:62:2d:61:8f:48:33:
da:c3:e5:f9:d5:0d:e3:87:49:b4:00:1e:97:6a:4b:73:4c:f4:
65:2c:fe:db:9c:86:ee:de:19:ae:ff:f0:43:de:5d:39:f3:51:
85:12:d6:c0:30:75:07:61:7f:80:38:26:4c:18:95:6c:8a:cb:
a9:9f:7c:4b:3a:23:fe:12:8e:fc:25:63:dc:55:ae:d6:b5:99:
02:f4:62:37:92:7c:96:a5:3e:fa:cd:97:63:63:2e:17:18:be:
8e:0c:08:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:24 2024 by rpki-client on console-fra.rpki-client.org