Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/EF03u7U5c-7uWycVM6o18XGzkys.roa
File: EF03u7U5c-7uWycVM6o18XGzkys.roa (raw, json)
Hash identifier: Cs9ZVwz4UZI9Qh6BEIOgF3azisjGRHH1BPFdHkeNELw=
Subject key identifier: 10:5D:37:BB:B5:39:73:EE:EE:5B:27:15:33:AA:35:F1:71:B3:93:2B
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 018AFA901CA8007F6FDF46AF7D7B4781E8F6
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/EF03u7U5c-7uWycVM6o18XGzkys.roa
Signing time: Wed 04 Oct 2023 12:01:02 +0000
ROA not before: Wed 04 Oct 2023 12:01:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42055
IP address blocks: 45.66.93.0/24 maxlen: 24
45.66.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Oct 2023 09:12:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fa:90:1c:a8:00:7f:6f:df:46:af:7d:7b:47:81:e8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Oct 4 12:01:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=105d37bbb53973eeee5b271533aa35f171b3932b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:88:14:82:93:7b:c9:fc:b3:64:5e:55:c9:06:
ed:f0:98:d4:54:e2:c8:a0:95:ef:c7:74:ec:ea:52:
3e:3c:43:83:85:4a:0c:b3:f7:ac:ac:27:ad:19:4f:
fc:d8:13:a1:aa:b2:e5:a5:14:35:45:da:95:f3:4d:
f7:5f:6c:fd:d6:d2:be:af:0e:87:ff:5e:0c:1e:a0:
9c:8d:11:38:78:02:ce:80:11:5f:2b:4c:f9:da:e0:
30:89:d3:86:ba:62:4f:27:ac:fe:f2:5b:07:4d:d7:
8d:6a:dc:b6:81:c8:75:52:eb:85:cc:61:14:d2:90:
b3:10:b6:8f:37:e2:04:b0:af:71:79:a4:21:c9:80:
bc:4b:2e:51:71:4b:90:bf:47:04:a6:38:c7:a2:61:
da:33:d1:ed:f3:08:59:4d:3e:ed:e6:19:65:22:98:
09:e5:4d:04:cf:d2:36:c6:1d:36:9d:ce:98:86:2e:
a2:bf:13:7d:66:a1:73:23:ec:82:ba:f2:b2:cd:3d:
4b:0d:29:1a:5f:78:af:8c:49:eb:59:6a:ff:ff:d4:
4e:4c:e1:d7:89:76:69:b1:a3:48:49:2e:11:93:64:
eb:46:3c:47:a7:9d:19:2e:bb:26:02:85:1d:c8:45:
4c:04:e2:f5:4d:20:e6:ca:22:c2:14:b9:00:46:37:
23:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5D:37:BB:B5:39:73:EE:EE:5B:27:15:33:AA:35:F1:71:B3:93:2B
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/EF03u7U5c-7uWycVM6o18XGzkys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.92.0/23
Signature Algorithm: sha256WithRSAEncryption
38:3c:e0:c3:2b:2e:31:f1:13:32:6e:f5:8c:f7:0b:a4:be:7d:
14:b5:4d:b1:bc:fb:59:84:82:da:9f:b3:62:6c:27:5e:5d:71:
42:e2:00:f5:5e:0f:f9:ae:27:84:f8:dc:18:13:b7:47:27:9b:
be:8e:29:69:2a:b0:26:b0:d4:c0:19:77:51:be:3d:f7:94:f9:
49:fd:68:e0:09:37:b1:0e:df:fc:fe:ee:97:c3:de:b2:ee:bd:
cf:d4:ad:3d:86:50:86:3c:5f:49:da:33:e9:e6:f0:8f:3f:78:
f8:c2:36:9c:75:96:db:12:52:ef:48:4b:68:fc:de:8a:f9:52:
55:ac:65:ad:d5:99:4d:97:d4:8c:93:c6:4f:d2:23:77:cc:4a:
b3:ca:e9:73:eb:ea:fe:02:53:d8:a5:8e:a4:db:2d:fc:d6:10:
f7:01:45:9b:ef:58:45:c3:66:3f:16:9d:f3:82:e2:ab:03:79:
6b:e0:01:c2:01:29:08:90:77:98:9e:b0:cd:89:ca:d3:e7:0f:
bf:b9:2f:15:0e:20:fe:31:3b:c9:5b:71:7f:67:1e:45:3d:03:
60:65:a0:df:fe:9e:fb:cc:be:79:13:af:a5:4b:a5:ec:c3:2d:
8b:8e:51:6d:5c:99:4f:09:66:e3:51:94:5a:e4:2d:48:8c:c3:
23:6b:9c:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYr6kByoAH9v30avfXtHgej2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl
M2ZlZjMwHhcNMjMxMDA0MTIwMTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDVkMzdiYmI1Mzk3M2VlZWU1YjI3MTUzM2FhMzVmMTcxYjM5MzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4gUgpN7yfyzZF5VyQbt8JjUVOLI
oJXvx3Ts6lI+PEODhUoMs/esrCetGU/82BOhqrLlpRQ1RdqV8033X2z91tK+rw6H
/14MHqCcjRE4eALOgBFfK0z52uAwidOGumJPJ6z+8lsHTdeNaty2gch1UuuFzGEU
0pCzELaPN+IEsK9xeaQhyYC8Sy5RcUuQv0cEpjjHomHaM9Ht8whZTT7t5hllIpgJ
5U0Ez9I2xh02nc6Yhi6ivxN9ZqFzI+yCuvKyzT1LDSkaX3ivjEnrWWr//9ROTOHX
iXZpsaNISS4Rk2TrRjxHp50ZLrsmAoUdyEVMBOL1TSDmyiLCFLkARjcjAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBBdN7u1OXPu7lsnFTOqNfFxs5MrMB8GA1UdIwQY
MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt
NTk1ZTBiZjVjNjEzLzEvRUYwM3U3VTVjLTd1V3ljVk02bzE4WEd6a3lzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz
LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLUJcMA0G
CSqGSIb3DQEBCwUAA4IBAQA4PODDKy4x8RMybvWM9wukvn0UtU2xvPtZhILan7Ni
bCdeXXFC4gD1Xg/5rieE+NwYE7dHJ5u+jilpKrAmsNTAGXdRvj33lPlJ/WjgCTex
Dt/8/u6Xw96y7r3P1K09hlCGPF9J2jPp5vCPP3j4wjacdZbbElLvSEto/N6K+VJV
rGWt1ZlNl9SMk8ZP0iN3zEqzyulz6+r+AlPYpY6k2y381hD3AUWb71hFw2Y/Fp3z
guKrA3lr4AHCASkIkHeYnrDNicrT5w+/uS8VDiD+MTvJW3F/Zx5FPQNgZaDf/p77
zL55E6+lS6Xswy2LjlFtXJlPCWbjUZRa5C1IjMMja5x3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:15 2024 by rpki-client on console-fra.rpki-client.org