Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EqYh0aK01vWFuMVs5B0x5AxkSvU.roa
File: EqYh0aK01vWFuMVs5B0x5AxkSvU.roa (raw, json)
Hash identifier: etT+i4glxmVQvSR5j4jW36UKxM51f1F1qw5m/3Q9mPE=
Subject key identifier: 12:A6:21:D1:A2:B4:D6:F5:85:B8:C5:6C:E4:1D:31:E4:0C:64:4A:F5
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0186879BB92FC756B75CBE7FC44CC8DB48FA
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EqYh0aK01vWFuMVs5B0x5AxkSvU.roa
Signing time: Sat 25 Feb 2023 08:06:14 +0000
ROA not before: Sat 25 Feb 2023 08:06:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 85.208.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:87:9b:b9:2f:c7:56:b7:5c:be:7f:c4:4c:c8:db:48:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Feb 25 08:06:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12a621d1a2b4d6f585b8c56ce41d31e40c644af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f1:a2:7a:6a:23:65:28:db:63:92:62:1c:45:
81:b8:ca:26:48:3f:79:44:61:a5:cc:01:c2:24:44:
81:fc:8b:50:9d:24:08:e3:a9:c7:63:5d:67:1f:8e:
be:91:8e:51:90:c1:f1:9c:69:92:22:67:e0:51:00:
f2:79:4c:12:ca:4d:06:1c:40:47:f0:4e:df:df:07:
3d:e2:37:5d:3a:70:6a:0e:08:d3:77:10:c6:a4:96:
3a:5c:ad:f1:ba:9f:bc:9d:77:b5:73:16:b3:28:29:
ff:7f:d0:7c:a9:a2:4c:09:87:f7:c8:7a:d0:8f:d3:
0e:03:86:d3:c8:4f:bc:57:3a:5e:5a:2e:65:4b:6d:
82:60:d3:b4:f4:e7:5c:e4:f9:22:23:c7:4f:40:a2:
8d:e8:d9:fa:bd:96:51:20:ad:3d:f7:ab:5d:1e:59:
a4:e7:37:95:72:00:17:4c:e8:7d:1d:be:58:4f:14:
81:8e:f3:1c:6c:0a:b9:07:0b:89:a9:05:81:4f:d3:
20:74:77:8d:e5:5b:2c:da:91:f5:a2:32:fe:74:4f:
5b:f0:51:b2:2f:6a:9c:f9:10:f3:56:20:e6:b6:97:
5e:b1:52:02:48:2c:6d:ec:15:70:43:70:ee:73:b8:
b6:84:f6:ab:ac:f3:7f:6f:7c:25:48:0b:11:ea:57:
22:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A6:21:D1:A2:B4:D6:F5:85:B8:C5:6C:E4:1D:31:E4:0C:64:4A:F5
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EqYh0aK01vWFuMVs5B0x5AxkSvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.106.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:16:5f:33:21:47:b0:8a:14:95:8a:38:87:b0:6f:29:46:8c:
2f:13:a1:6a:0d:3d:1e:dc:8d:28:f2:26:cc:b1:f4:b8:e8:a8:
87:04:61:de:a4:8d:f4:cc:5c:39:85:6e:6f:43:af:d5:dd:ae:
0e:17:30:3f:17:ed:2a:bb:c2:3e:b3:ee:bc:53:be:83:e3:bf:
5d:5c:fa:ba:17:7f:3b:d0:be:f5:a9:57:14:b5:87:20:a3:1d:
42:f2:8f:b2:00:23:a0:f7:53:93:22:c9:da:86:16:d2:6c:9d:
24:58:83:fc:07:4d:01:1d:0a:ce:d0:4f:ae:f2:ba:35:63:ff:
ca:1d:80:7b:d4:68:4c:b6:3c:ac:5b:43:21:a2:40:ba:fe:4d:
ae:bb:69:84:fe:3a:c1:13:b5:49:86:08:30:9b:a3:28:17:7d:
ce:da:ac:a5:51:b1:f9:d9:9a:be:e2:87:97:b1:c4:0a:d3:0d:
b0:59:b7:14:cd:83:26:db:13:24:8b:24:12:11:e7:d6:d5:02:
98:ef:78:6b:48:71:f3:5d:e8:ee:e7:f6:02:fd:72:28:ae:56:
6e:9c:36:84:e8:57:29:14:2b:a5:9a:84:57:99:e3:a8:65:c1:
b3:9b:eb:27:d8:09:d8:47:d3:6b:4a:2b:a1:fc:41:78:60:3e:
23:3f:c8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:29 2023 by rpki-client on console-fra.rpki-client.org