Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/EAScB0GvqQbVxqpUblfDEQN-sDw.roa
File: EAScB0GvqQbVxqpUblfDEQN-sDw.roa (raw, json)
Hash identifier: 8LfZ/Q+iXvay6wQIvnSMc8mL66OdELI87uRPOEg0Pp0=
Subject key identifier: 10:04:9C:07:41:AF:A9:06:D5:C6:AA:54:6E:57:C3:11:03:7E:B0:3C
Certificate issuer: /CN=2c61264467b1a7fef1c51867779e5ad616b619cf
Certificate serial: 01877A7F14C715AC9BBED2CC5A6ACBEF3587
Authority key identifier: 2C:61:26:44:67:B1:A7:FE:F1:C5:18:67:77:9E:5A:D6:16:B6:19:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LGEmRGexp_7xxRhnd55a1ha2Gc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/EAScB0GvqQbVxqpUblfDEQN-sDw.roa
Signing time: Thu 13 Apr 2023 12:02:41 +0000
ROA not before: Thu 13 Apr 2023 12:02:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201006
IP address blocks: 2.58.220.0/22 maxlen: 22
185.89.52.0/22 maxlen: 22
2a05:ce40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:7f:14:c7:15:ac:9b:be:d2:cc:5a:6a:cb:ef:35:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c61264467b1a7fef1c51867779e5ad616b619cf
Validity
Not Before: Apr 13 12:02:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10049c0741afa906d5c6aa546e57c311037eb03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c0:7a:de:99:9b:4b:92:09:5f:ed:95:e0:8b:
77:35:12:d4:21:22:30:44:73:96:3c:0e:a0:80:4b:
8c:af:86:ca:35:15:9f:11:05:3b:17:2b:2e:09:fb:
92:85:2b:3c:fa:e5:b8:29:33:bb:f7:46:54:6d:29:
7e:1c:d0:12:99:7b:01:74:2b:fa:4e:1a:ff:d2:7c:
e9:1a:7a:d1:4d:85:e6:88:4d:55:96:3b:3d:d5:b7:
69:9f:8a:7c:3d:9a:bc:ba:43:8b:49:4f:d5:ca:3e:
a4:57:63:25:c2:8d:41:47:20:b4:c9:e9:f2:ba:ab:
b0:a2:fe:cf:eb:b0:ca:0c:63:1a:e6:2c:b2:68:7a:
b9:2d:94:51:bd:af:68:89:7a:a4:f8:20:5a:ea:3c:
29:2e:27:3d:a9:a1:87:a3:dd:df:89:bb:6d:81:87:
bd:82:49:36:b0:51:c5:0c:1b:6c:d3:43:00:1a:4b:
f6:a8:ea:f8:0d:96:73:d9:a9:4b:86:f2:da:3c:a4:
43:99:29:3c:0c:92:9f:de:12:1c:64:18:80:a9:a9:
e2:19:d6:bb:dc:de:84:90:6b:52:21:1c:f4:41:ef:
4c:27:38:33:f4:a1:c1:3d:ff:6a:20:bc:c0:32:7c:
ad:9a:37:09:1e:fc:95:9c:06:b2:a8:f4:5c:ab:d9:
e6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:04:9C:07:41:AF:A9:06:D5:C6:AA:54:6E:57:C3:11:03:7E:B0:3C
X509v3 Authority Key Identifier:
keyid:2C:61:26:44:67:B1:A7:FE:F1:C5:18:67:77:9E:5A:D6:16:B6:19:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LGEmRGexp_7xxRhnd55a1ha2Gc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/EAScB0GvqQbVxqpUblfDEQN-sDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b363cd-5a14-417e-80f5-9215865d37b9/1/LGEmRGexp_7xxRhnd55a1ha2Gc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.220.0/22
185.89.52.0/22
IPv6:
2a05:ce40::/29
Signature Algorithm: sha256WithRSAEncryption
3f:1f:e4:c7:e6:2a:e8:d6:37:af:c1:ac:e0:bc:5b:fa:46:5d:
ee:38:99:73:02:e7:15:73:88:f0:38:a2:02:d0:a8:b7:78:3a:
7c:34:dd:2c:7f:c7:ac:7e:3b:88:f4:a0:e6:d3:a7:ae:d1:84:
d3:37:a8:2b:56:7c:d7:f8:f4:e1:cd:09:f3:73:8b:9a:ac:b1:
8e:ad:11:d5:03:e7:04:9f:9c:e7:3e:6d:74:c9:e7:c5:82:c2:
25:6f:64:14:21:b4:ce:cc:e1:54:78:3c:e3:2b:a2:0f:bf:ce:
b1:d4:62:06:35:29:46:23:bd:fc:3c:1d:32:6a:b2:ea:03:a4:
38:c9:8b:e1:9d:d2:85:3c:1b:42:19:41:6f:95:03:ff:ff:12:
d2:53:41:51:f8:47:64:29:9a:16:7d:43:44:0a:11:93:f0:4a:
6c:4b:12:42:a6:c1:8c:8f:37:c5:9d:b5:e0:8b:d5:db:6f:4b:
8e:1a:9e:0b:06:71:3e:e0:28:1c:05:e1:3d:c2:be:99:64:29:
14:4d:f2:8d:06:4c:6d:da:8b:bb:46:45:13:97:9f:b0:90:b4:
91:2c:2d:9b:28:36:9a:54:8b:ce:84:a0:95:b7:42:cf:bf:14:
12:65:10:d8:f6:75:0f:3e:9b:10:f8:76:3e:36:e1:c8:ad:63:
b7:f1:85:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:04 2024 by rpki-client on console-fra.rpki-client.org