Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/1eFIpdhrJjLk13DR9toVg2fCcj4.roa
File: 1eFIpdhrJjLk13DR9toVg2fCcj4.roa (raw, json)
Hash identifier: im3XO1TTu20beg6cqvbmWstg4g79B0ohcwOhfQeuvTg=
Subject key identifier: D5:E1:48:A5:D8:6B:26:32:E4:D7:70:D1:F6:DA:15:83:67:C2:72:3E
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 019327DCEB9B551C77D17C24A1D3256D16EC
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/1eFIpdhrJjLk13DR9toVg2fCcj4.roa
Signing time: Wed 13 Nov 2024 23:30:09 +0000
ROA not before: Wed 13 Nov 2024 23:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 64.190.139.0/24 maxlen: 24
147.185.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Nov 2024 08:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:27:dc:eb:9b:55:1c:77:d1:7c:24:a1:d3:25:6d:16:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Nov 13 23:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5e148a5d86b2632e4d770d1f6da158367c2723e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:43:0e:e0:9b:a9:91:d4:2a:54:a7:89:0c:a5:
38:0c:54:f2:e5:33:2c:9d:da:2b:36:27:19:50:f5:
81:df:4e:34:6a:30:18:6d:88:43:c0:12:78:3b:76:
ac:a7:41:75:90:82:5a:d3:02:b3:fe:59:84:04:87:
f6:41:ea:9c:65:45:3c:9c:76:6a:dc:51:00:ea:fc:
0d:6a:67:2e:55:09:df:e3:4a:69:11:e5:0a:25:38:
7e:2f:1f:19:9d:aa:e5:54:d5:7e:b7:0c:11:ad:54:
d9:56:63:bc:18:56:7f:d1:9c:4e:9b:a0:1b:91:82:
1b:be:7e:fc:e3:b9:ec:46:71:53:bd:7b:c1:15:85:
6b:82:7f:e8:08:7e:1a:dc:90:69:eb:1b:4b:b1:77:
35:6d:71:d7:b4:c2:55:87:e9:a3:b7:2d:c0:49:41:
e7:83:d1:3a:77:da:ae:b6:6c:ea:2c:92:a6:64:38:
ff:cf:43:2b:8b:84:8b:d2:68:10:ee:76:03:6e:d2:
c2:78:d1:6b:dd:45:66:fd:37:af:4f:c1:43:bc:dc:
7b:38:36:a9:ef:c7:75:7e:2e:8c:90:a9:4d:90:c8:
f6:9f:dd:41:85:93:b7:47:fc:c0:e5:6d:e2:3d:51:
f5:ef:6a:e0:b5:a4:06:fc:93:4f:e2:f9:76:91:a4:
ce:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E1:48:A5:D8:6B:26:32:E4:D7:70:D1:F6:DA:15:83:67:C2:72:3E
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/1eFIpdhrJjLk13DR9toVg2fCcj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.190.139.0/24
147.185.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:f0:35:84:80:68:36:6e:71:73:3b:44:bd:54:97:af:85:be:
6c:2b:9e:6b:e0:f8:a0:db:e9:db:8f:0b:fb:ca:e9:5b:f2:7c:
4a:0d:7f:80:9d:21:ea:6d:12:af:35:3e:b2:bf:c3:c7:0c:41:
f4:48:6a:b9:6a:bb:6b:37:14:fe:96:31:77:07:68:c7:94:30:
99:84:fe:98:3c:50:53:00:18:0d:df:f3:90:dd:07:73:26:b1:
6f:6a:3d:69:64:24:87:7b:14:6f:7e:d2:69:dc:07:48:b4:0a:
0c:bc:6c:ff:ec:f8:fc:98:15:9f:a7:c4:2a:c2:f9:e4:4c:c3:
34:35:e6:63:2b:87:b3:13:46:f9:fb:90:ee:69:ad:91:cd:3a:
80:7a:1e:8d:01:76:c8:38:9b:7f:b3:a9:d9:c0:ce:a4:83:74:
7a:fe:66:68:31:f8:ae:87:d2:53:35:c6:15:9f:73:a2:88:96:
75:f2:a6:e9:5f:3a:79:83:a0:16:18:91:80:5d:fa:b7:cc:67:
70:47:07:b5:c8:6e:03:3a:d1:7a:84:e6:dd:8a:a6:f0:41:71:
33:cb:14:4a:75:82:36:b1:d2:c4:e3:77:d3:eb:95:43:ba:e9:
1e:ad:fc:6f:58:f7:36:ea:e1:c4:aa:d0:66:ad:2e:5b:c0:52:
1a:c5:4a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 10:12:22 2024 by rpki-client on console-ams.rpki-client.org