Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/eCvzzugCyn8GPHsgTr5y5uTYt3s.roa
File: eCvzzugCyn8GPHsgTr5y5uTYt3s.roa (raw, json)
Hash identifier: bJzgwqBsKePn2KJC02IF2EDmh/X7tCn/FRYdlXruFcU=
Subject key identifier: 78:2B:F3:CE:E8:02:CA:7F:06:3C:7B:20:4E:BE:72:E6:E4:D8:B7:7B
Certificate issuer: /CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Certificate serial: 0190778403050ECD0D32EB8A31B05127A101
Authority key identifier: 47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/eCvzzugCyn8GPHsgTr5y5uTYt3s.roa
Signing time: Wed 03 Jul 2024 07:34:18 +0000
ROA not before: Wed 03 Jul 2024 07:34:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215239
IP address blocks: 45.143.0.0/22 maxlen: 24
2a14:2d40::/29 maxlen: 128
Validation: Failed, certificate revoked on Tue 19 Nov 2024 07:15:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:77:84:03:05:0e:cd:0d:32:eb:8a:31:b0:51:27:a1:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Validity
Not Before: Jul 3 07:34:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=782bf3cee802ca7f063c7b204ebe72e6e4d8b77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:9f:95:d3:a8:68:c9:18:28:66:73:3d:b7:
68:75:ae:25:0b:7a:49:fb:e6:17:4c:09:c0:70:8d:
d0:84:06:90:22:d6:6b:0a:06:b4:0a:31:37:f1:6e:
c4:5f:5a:c8:2d:9b:db:83:70:55:e8:6d:63:94:99:
6f:03:29:51:cd:09:a2:e0:93:69:15:8a:e0:6c:6e:
57:46:e6:77:79:80:79:08:62:18:57:a8:21:f8:1a:
c7:37:45:9e:6c:19:ac:69:ce:16:2c:8f:2d:db:80:
42:e5:34:5c:fe:19:15:c7:ca:de:41:27:dc:43:3f:
31:5f:bb:6b:8a:f1:a0:ab:e7:73:38:9d:9c:7a:2a:
23:88:6e:fc:b5:e8:82:a7:12:05:a6:27:b1:14:99:
31:67:cd:17:aa:d7:c3:78:ce:af:dc:ee:66:9b:ed:
f3:59:18:b2:58:36:cb:fd:13:37:6d:f1:e6:30:ff:
f9:6b:2a:2c:fe:af:fd:27:2b:3c:74:b0:c8:6e:f7:
7a:40:2b:a9:65:04:0f:c4:c0:a2:50:d6:1c:8c:5e:
e1:71:57:03:d7:36:b0:c5:58:c4:90:e8:26:b4:e9:
cb:3b:16:b7:88:66:80:b1:f2:26:81:b0:20:24:d3:
2b:4c:0c:c6:d4:a9:87:5f:7b:fc:e0:7e:e7:7c:6c:
dd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2B:F3:CE:E8:02:CA:7F:06:3C:7B:20:4E:BE:72:E6:E4:D8:B7:7B
X509v3 Authority Key Identifier:
keyid:47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/eCvzzugCyn8GPHsgTr5y5uTYt3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.0.0/22
IPv6:
2a14:2d40::/29
Signature Algorithm: sha256WithRSAEncryption
5f:0e:0a:ba:4a:3a:45:1f:eb:9f:e6:51:6d:5d:a1:0c:63:ac:
3b:4e:5c:7b:66:94:29:b6:c7:85:17:27:cb:28:f3:5e:8f:9c:
ea:c8:f5:66:49:1a:1f:f6:50:4a:bc:2b:66:38:7a:1f:65:8a:
7e:da:5a:8e:67:9a:bc:b3:d0:66:8f:d9:29:85:19:4e:f8:b1:
2b:c1:14:79:f3:c6:07:7a:c0:c7:9b:6c:fc:06:58:77:07:d9:
6f:2a:3d:c1:35:28:1f:ad:5c:12:c1:5c:44:24:5e:6e:67:1f:
d4:8b:45:4f:5a:b2:ab:4d:60:c5:62:02:a5:9e:ad:81:fc:65:
74:3a:6a:2b:91:e5:0f:f9:98:25:93:ef:a0:eb:0a:88:9c:f3:
9b:54:7c:6f:d5:c7:f3:b8:09:db:53:30:07:f7:b9:70:b3:d7:
aa:84:8c:4a:4b:8b:4d:aa:3a:4c:8c:c8:8d:e2:cf:00:b7:f3:
d1:73:45:08:d8:9b:53:fd:6e:51:3a:bc:a7:bc:36:48:9a:2f:
b5:af:4f:cb:6b:ca:7f:d3:7d:59:fc:29:f2:e2:18:19:65:7c:
d2:11:5a:3a:4f:e4:71:54:60:69:ae:8f:d8:6d:6a:87:b9:0b:
90:58:f2:d0:cc:6e:51:c4:f8:0e:a1:6c:de:a7:04:f2:41:d9:
da:43:02:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 08:10:02 2024 by rpki-client on console-fra.rpki-client.org