Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/EayKZLyspMcf6QHpGJLD3rAfxtA.roa
File: EayKZLyspMcf6QHpGJLD3rAfxtA.roa (raw, json)
Hash identifier: jXJX5oBD6jbKRsTSgbvqiahBYRNIwLSZX63AAalOWtI=
Subject key identifier: 11:AC:8A:64:BC:AC:A4:C7:1F:E9:01:E9:18:92:C3:DE:B0:1F:C6:D0
Certificate issuer: /CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Certificate serial: 018F0EF54F018EDA0E717B3D9BFCB9EA4B83
Authority key identifier: D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/EayKZLyspMcf6QHpGJLD3rAfxtA.roa
Signing time: Wed 24 Apr 2024 07:15:08 +0000
ROA not before: Wed 24 Apr 2024 07:15:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215137
IP address blocks: 91.217.219.0/24 maxlen: 24
2a12:62c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 28 Apr 2024 12:43:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0e:f5:4f:01:8e:da:0e:71:7b:3d:9b:fc:b9:ea:4b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Validity
Not Before: Apr 24 07:15:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11ac8a64bcaca4c71fe901e91892c3deb01fc6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:40:fe:04:95:f6:a1:05:af:6d:83:ac:74:ac:
ff:91:94:c9:eb:7c:a4:d0:99:26:2e:b0:b9:b3:eb:
92:be:4a:2e:43:25:e1:f9:8e:6b:58:76:41:2c:68:
99:3d:e2:47:c3:92:5d:66:94:53:11:59:19:41:68:
e8:1b:4f:bc:b1:6b:52:c5:2b:27:10:d0:37:5e:1d:
9f:3c:1b:09:a3:9b:6c:06:17:4b:69:72:f2:cf:0f:
f0:6b:d3:71:8b:4f:c0:01:d8:ed:a9:ca:7a:38:d0:
f3:ef:79:3c:50:d1:a1:85:22:29:0e:45:3f:a2:74:
5b:c1:ab:a6:b1:ca:61:c7:1c:6f:df:3a:5d:a9:49:
1b:13:64:35:a4:53:12:bf:29:46:57:47:78:f6:6e:
2e:51:ca:b7:66:03:0f:ae:84:1d:37:04:12:cc:aa:
9e:f4:c9:ee:87:89:50:81:4b:c7:d4:c9:15:f2:ad:
2d:10:f9:98:f9:98:2d:99:dc:0f:e1:e4:48:88:9a:
24:2e:fa:55:4f:5e:d2:19:ae:08:10:9a:f2:e5:cf:
25:a3:41:ff:2a:e6:d4:56:0c:a4:b7:58:33:30:b1:
a4:c1:b6:b4:4d:45:53:29:b7:86:a8:67:17:7d:43:
d6:81:e2:54:da:d7:bf:bf:7c:78:40:72:95:ac:f3:
cf:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AC:8A:64:BC:AC:A4:C7:1F:E9:01:E9:18:92:C3:DE:B0:1F:C6:D0
X509v3 Authority Key Identifier:
keyid:D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/EayKZLyspMcf6QHpGJLD3rAfxtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.219.0/24
IPv6:
2a12:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
b7:d6:72:86:cb:94:de:84:6f:7f:8e:70:63:20:4c:e7:27:eb:
cf:87:84:2c:89:44:6a:48:e3:db:a7:34:3e:dc:42:bb:fb:41:
20:2e:d4:5d:f6:69:30:4e:2d:93:cf:6d:33:bb:fe:b8:f4:a8:
ad:25:a2:4d:d7:3e:3c:7d:a5:ea:a4:46:bf:31:f1:4b:09:5c:
db:98:8b:49:26:70:a7:e8:03:3c:a6:af:26:65:8e:e8:7b:18:
c0:08:9c:b7:86:01:09:c1:57:57:1c:2f:53:fe:b5:ef:5d:41:
43:9f:1e:fb:21:31:0a:73:e2:12:69:77:ce:de:02:b1:e7:4f:
c8:52:5d:77:cf:c1:e2:53:47:e4:2f:94:51:14:20:70:96:fc:
79:a4:9c:fa:0d:1b:35:8a:a4:85:20:dd:21:0f:df:e1:3c:e4:
da:17:bf:b0:a3:bc:e6:9d:3c:8d:7d:e4:3d:c6:3d:20:22:86:
7a:a4:d9:47:36:69:6e:6f:0f:33:0b:d0:51:96:3e:b6:01:08:
f2:d2:f7:4b:d5:82:af:42:ac:61:0e:50:4a:a7:b5:c1:83:5c:
ac:28:97:ee:26:36:93:9e:40:f1:d8:41:80:04:9a:87:37:ab:
d5:cf:73:e6:07:1d:93:7f:8d:c7:3d:7d:46:8a:b8:bc:64:fb:
d7:f0:4a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:00 2024 by rpki-client on console-fra.rpki-client.org