Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/EBc-gMpTsdw7ivrr02kQW_9hGQg.roa
File: EBc-gMpTsdw7ivrr02kQW_9hGQg.roa (raw, json)
Hash identifier: 97NE+4iWPi41aKS5cbAmFqDPJqZ4tBwuCg8jro0H4HU=
Subject key identifier: 10:17:3E:80:CA:53:B1:DC:3B:8A:FA:EB:D3:69:10:5B:FF:61:19:08
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 018AC1D0210F60A778F2072081D8A51E061E
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/EBc-gMpTsdw7ivrr02kQW_9hGQg.roa
Signing time: Sat 23 Sep 2023 11:32:37 +0000
ROA not before: Sat 23 Sep 2023 11:32:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.84.112.0/23 maxlen: 24
31.193.240.0/22 maxlen: 24
45.84.114.0/23 maxlen: 24
31.193.244.0/22 maxlen: 24
185.74.52.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Oct 2023 07:53:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c1:d0:21:0f:60:a7:78:f2:07:20:81:d8:a5:1e:06:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Sep 23 11:32:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10173e80ca53b1dc3b8afaebd369105bff611908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f3:22:bc:d1:ad:b0:5c:30:80:96:b9:76:13:
3b:fd:05:c2:09:8d:db:23:2d:82:76:58:b9:c8:f1:
43:c2:6a:96:2a:0c:27:f7:0e:ec:76:f4:09:62:b9:
e6:1a:9e:41:11:8e:69:2c:77:8e:b7:83:dd:a0:d6:
eb:89:42:d1:58:3a:fa:64:86:36:72:cb:a2:f9:62:
03:17:3c:93:76:c1:ba:ec:db:3c:e1:cf:e5:01:de:
43:ff:b7:ea:80:2e:cb:81:50:4c:64:4e:05:c2:d6:
6a:e5:6b:1f:f6:fb:4e:6e:ac:24:c8:15:36:ee:50:
a0:ea:24:9a:dc:5b:17:4f:a0:36:73:e5:99:24:c0:
ee:5c:15:92:bb:fb:c7:17:3e:2d:7d:88:c3:7a:0f:
64:44:cc:30:82:b2:bf:40:55:45:02:cd:35:81:3c:
53:c8:55:20:0c:a2:e3:92:9c:11:c0:44:58:7f:fe:
01:9a:07:3e:82:53:2a:eb:7b:4a:66:04:70:17:8b:
7b:97:b6:22:d4:8a:4b:ea:2d:46:63:2d:76:32:76:
22:95:df:3a:bf:42:be:45:9c:5a:d4:47:d7:f6:b8:
67:35:ed:ae:da:11:d0:19:1c:e7:33:fb:cf:50:72:
b6:d1:6a:46:ec:4a:1e:38:b6:4a:2f:df:19:41:1d:
e6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:17:3E:80:CA:53:B1:DC:3B:8A:FA:EB:D3:69:10:5B:FF:61:19:08
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/EBc-gMpTsdw7ivrr02kQW_9hGQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.240.0/21
45.84.112.0/22
185.74.52.0/23
Signature Algorithm: sha256WithRSAEncryption
37:b2:24:cf:ea:ba:fd:80:e3:5e:6d:c8:bc:09:c2:1c:89:d3:
f6:b6:bb:8a:b6:6d:cd:c2:60:90:db:a5:3a:20:75:e4:38:d6:
a3:09:0e:bb:51:73:50:65:19:ec:c5:b0:08:d4:3b:6f:be:f0:
90:24:b3:4b:49:2b:ef:10:80:ff:2b:7f:ec:41:35:4b:b8:8a:
ac:f7:d0:c8:9d:f9:18:7c:e8:f4:50:b1:84:90:4e:eb:46:06:
77:4f:e2:16:c4:3a:c0:48:ec:e9:3c:13:f5:aa:61:96:fb:3e:
16:37:ce:5d:c4:28:bc:31:b9:f9:55:fb:ca:b8:fe:43:fb:5a:
bf:58:f1:b6:e7:9e:f5:7e:29:83:8f:4f:5c:8c:53:a8:4f:7e:
db:c4:13:7d:e1:cc:42:88:09:77:02:61:1f:07:69:86:27:3c:
36:b4:2f:77:e4:8d:5a:6e:fe:33:ac:75:d9:26:d4:a1:5e:2d:
56:c9:1f:ab:04:80:13:8d:c1:c6:18:9a:aa:4d:3a:4d:41:b5:
d4:5a:36:12:c4:be:1e:41:01:f0:9c:47:06:42:e3:9d:d3:ae:
23:a7:a1:e0:18:3f:ef:2b:e7:01:2e:9a:21:04:d7:d8:67:71:
f3:f4:c1:3f:d8:94:0c:93:2e:38:b9:9d:10:88:82:f0:73:47:
0f:cf:be:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:26 2024 by rpki-client on console-ams.rpki-client.org