Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/ea0U4kSZkg1o62yWqSYZQWpjgdM.roa
File: ea0U4kSZkg1o62yWqSYZQWpjgdM.roa (raw, json)
Hash identifier: yfQPqBVEQeHsToUG4BF5JxmFz44EIUJrQ8ahBmsSU74=
Subject key identifier: 79:AD:14:E2:44:99:92:0D:68:EB:6C:96:A9:26:19:41:6A:63:81:D3
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 01888A704060E8E0A44D4A895F68871FB9F4
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/ea0U4kSZkg1o62yWqSYZQWpjgdM.roa
Signing time: Mon 05 Jun 2023 07:23:12 +0000
ROA not before: Mon 05 Jun 2023 07:23:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44092
IP address blocks: 185.22.56.0/24 maxlen: 24
185.22.58.0/24 maxlen: 24
185.22.57.0/24 maxlen: 24
185.22.59.0/24 maxlen: 24
147.185.163.0/24 maxlen: 24
147.185.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8a:70:40:60:e8:e0:a4:4d:4a:89:5f:68:87:1f:b9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Jun 5 07:23:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79ad14e24499920d68eb6c96a92619416a6381d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:00:7d:9e:12:1e:e0:df:ee:58:56:72:4b:77:
1a:d5:ce:c2:c2:35:30:af:ba:e3:14:a9:ce:bd:e9:
4a:73:9d:ad:65:19:9a:b8:2c:b3:ca:a4:1a:29:e0:
b3:8a:51:1f:7c:89:ea:f8:b9:d6:49:2e:a3:b3:13:
04:44:2b:43:9f:76:4d:72:85:c8:8b:8a:de:9c:66:
cb:b4:f8:2f:66:e3:63:0c:6a:51:f7:2b:e2:f5:28:
29:54:7f:79:2e:a5:e9:e6:5b:51:33:39:8f:cd:8e:
74:e0:1b:1a:c0:ab:87:87:66:5b:c2:f3:e2:26:77:
ae:41:5e:10:27:fa:9f:55:16:1a:a4:6c:31:43:96:
41:cf:82:b5:33:12:f9:a7:5a:7e:63:59:62:2d:eb:
7f:94:ab:85:61:07:3a:67:20:48:ea:81:ca:5f:02:
d0:9a:3b:66:89:c4:25:69:f9:61:5a:25:c2:62:02:
72:fc:d7:13:ed:66:c6:06:e6:d7:9d:02:78:38:ea:
8e:fc:7c:ee:b4:ad:e8:dd:52:9a:f5:63:49:a5:17:
05:e5:86:b8:f8:d7:9d:88:d1:94:7f:5b:af:19:aa:
66:89:7f:dd:86:b8:81:21:b3:91:9c:ff:3a:14:b3:
08:d9:42:95:f2:e3:6e:98:40:78:60:b9:a9:a5:f1:
ff:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AD:14:E2:44:99:92:0D:68:EB:6C:96:A9:26:19:41:6A:63:81:D3
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/ea0U4kSZkg1o62yWqSYZQWpjgdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.162.0/23
185.22.56.0/22
Signature Algorithm: sha256WithRSAEncryption
38:40:e8:4e:2f:31:74:88:a7:73:ce:3c:26:d8:e2:57:8f:69:
40:47:7a:7f:17:4b:ee:15:0d:54:2c:bf:ca:7e:f5:31:fa:0b:
51:cd:9c:de:81:61:b3:21:c1:7b:53:0e:12:c7:a6:97:a1:31:
09:f3:bf:f7:39:13:60:3f:5b:42:52:a9:e5:14:c2:39:bc:94:
58:2e:94:a0:11:44:b5:8f:66:e2:76:9c:3d:fb:4f:e4:0e:18:
97:d6:14:c5:f5:25:fd:ce:25:4c:2a:bc:e0:4e:e1:11:e3:ed:
00:85:f7:04:9a:66:7b:24:1d:04:97:7c:3b:0a:c0:b4:5c:5a:
80:6a:4a:54:dd:02:df:d4:d0:3f:4b:7b:e2:b5:18:98:0d:8d:
19:28:d8:80:fe:28:ce:d5:f7:bc:8f:10:a7:69:57:02:26:d0:
41:85:ac:da:ae:0d:75:5c:b1:18:c3:28:45:43:83:fe:5d:91:
86:c4:dc:7d:31:32:d4:0c:60:d4:1c:1a:54:e9:c4:93:11:2d:
59:b1:4e:e6:56:e9:09:3b:03:bd:57:5d:f6:28:16:64:a0:ec:
54:19:d3:08:f6:7f:46:90:10:24:97:6f:46:83:cc:05:cb:d9:
e4:5a:a9:3a:9b:8e:cc:dc:e0:4d:bc:a3:42:21:5c:70:20:87:
3a:6d:29:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-fra.rpki-client.org