Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/eeL-sArAXPQHU-k8gpP0z2lAMdo.roa
File: eeL-sArAXPQHU-k8gpP0z2lAMdo.roa (raw, json)
Hash identifier: ZOSvFNtMP8f1BWE3bvKGC3rCgnZzOBPJSwDL0h6F1t4=
Subject key identifier: 79:E2:FE:B0:0A:C0:5C:F4:07:53:E9:3C:82:93:F4:CF:69:40:31:DA
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018B8A4E1B65567F24E39A68A8111D374502
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/eeL-sArAXPQHU-k8gpP0z2lAMdo.roa
Signing time: Wed 01 Nov 2023 09:54:16 +0000
ROA not before: Wed 01 Nov 2023 09:54:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216183
IP address blocks: 45.9.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8a:4e:1b:65:56:7f:24:e3:9a:68:a8:11:1d:37:45:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Nov 1 09:54:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79e2feb00ac05cf40753e93c8293f4cf694031da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:51:75:0c:37:5b:67:95:21:48:78:42:32:a2:
e1:57:6d:6e:d7:0e:7a:64:e7:61:96:c0:33:08:df:
e4:78:6b:b3:cc:59:a3:83:da:64:e5:4c:13:75:da:
49:d6:0d:dd:56:94:dd:87:7d:77:c2:e5:b2:b0:35:
3e:db:93:10:37:3d:be:50:b9:7f:f6:81:58:f0:92:
f5:f5:a1:b6:52:5d:7e:75:10:39:02:cb:1d:d0:bd:
a1:79:f2:88:a3:01:48:01:ab:8e:86:54:cd:60:08:
56:8d:8c:7a:6f:83:65:1d:58:02:0f:6b:65:b4:45:
25:6b:f5:94:b5:6b:a1:aa:f9:1d:be:03:11:76:3e:
b6:10:d6:db:c4:84:1a:d3:02:f6:c3:94:25:6e:9a:
f1:3f:34:a9:9e:2f:8a:c4:5c:9a:db:c3:14:ff:47:
17:22:9a:26:0a:87:31:8b:8b:5c:bb:d1:a1:d3:4c:
e5:ea:a6:01:89:48:de:1d:32:0e:bf:e9:6f:34:98:
3d:f7:d2:86:fe:4d:d8:8a:ea:7f:6d:09:1f:89:23:
8b:be:0f:88:fb:00:b0:03:37:ef:73:d4:17:a4:d0:
84:e6:9b:d5:90:cc:b5:81:d5:be:bf:17:a2:f5:a8:
de:d8:9d:1f:ba:65:2c:6e:22:82:fd:43:82:08:3d:
56:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E2:FE:B0:0A:C0:5C:F4:07:53:E9:3C:82:93:F4:CF:69:40:31:DA
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/eeL-sArAXPQHU-k8gpP0z2lAMdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.2.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:d2:d1:34:d6:45:44:9f:b7:1b:65:d3:97:05:da:e0:5c:b8:
80:ce:09:c9:9c:d2:4f:0d:26:8b:3f:ce:f8:ec:ba:f8:50:e7:
2e:bd:b0:e0:d5:f5:1a:f7:d3:83:23:fb:91:2d:48:69:59:eb:
18:a9:04:aa:51:e5:00:05:50:19:58:61:fa:92:bf:8a:3d:eb:
bf:de:38:5f:ce:c6:b2:2b:cb:ec:fd:0d:a0:38:9e:88:e1:f7:
d1:0e:ba:52:73:7f:3b:83:a3:b6:7d:f3:8d:36:37:4b:05:a9:
36:9e:2d:32:93:23:61:30:21:02:69:47:28:c0:47:5b:70:50:
4b:8f:2c:d4:4d:95:a0:0b:36:d5:e0:28:1f:a2:2a:c5:6e:9f:
a8:7b:0f:80:c3:99:41:fb:3f:9f:0c:ad:aa:de:ad:5f:bb:43:
24:77:76:e1:5f:3a:01:37:1c:6c:c9:e2:1d:38:31:de:39:86:
de:9a:82:13:1f:4f:3c:81:8f:8d:be:83:43:18:4b:7c:44:3d:
76:5b:1d:f6:36:09:03:61:d2:f7:51:2f:36:b9:a5:a5:f4:af:
18:90:fc:2b:a0:9e:d6:6f:68:0f:e2:ac:47:9a:82:87:fa:96:
0d:a9:2a:b3:8a:13:c5:a0:42:ba:7b:05:3e:2f:ef:a9:4f:95:
c1:33:8d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:17 2024 by rpki-client on console-fra.rpki-client.org