Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ecfYamxQgEdRlZy-61b8T5cdZZ8.roa
File: ecfYamxQgEdRlZy-61b8T5cdZZ8.roa (raw, json)
Hash identifier: bCCUJpqRLPCh81kn/p3FKX/A2OwuFPSMRrCZbWCM430=
Subject key identifier: 79:C7:D8:6A:6C:50:80:47:51:95:9C:BE:EB:56:FC:4F:97:1D:65:9F
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185EE55A5A3E614773F00EE5288C94C6CDC
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ecfYamxQgEdRlZy-61b8T5cdZZ8.roa
Signing time: Thu 26 Jan 2023 13:47:48 +0000
ROA not before: Thu 26 Jan 2023 13:47:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211409
IP address blocks: 94.142.138.0/24 maxlen: 24
185.106.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Apr 2023 13:40:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ee:55:a5:a3:e6:14:77:3f:00:ee:52:88:c9:4c:6c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 26 13:47:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79c7d86a6c50804751959cbeeb56fc4f971d659f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:06:3f:35:1e:e6:a4:7d:9e:9a:64:47:a8:e9:
ed:92:33:5e:be:a4:d6:fb:13:a6:89:f2:dd:9e:01:
eb:ef:46:ee:1e:9b:2c:3d:b1:d5:f2:c1:64:7e:48:
be:01:13:06:01:e4:f5:81:a3:30:8e:f9:72:ff:a9:
45:22:71:d5:af:ba:98:21:9e:bf:b6:6e:4f:48:53:
38:b5:9e:87:dd:76:78:62:a9:f6:a6:6a:d6:9a:ef:
43:56:5f:0e:94:41:f3:f3:20:8a:dd:b6:0a:c0:cf:
46:14:e7:7a:a3:0f:af:c9:ba:65:e4:01:d2:22:2f:
36:f0:f6:a3:33:3b:c7:68:aa:99:49:60:fd:c3:56:
89:47:71:84:ee:52:2c:0c:bf:87:d9:88:71:ec:05:
9e:94:11:76:4d:69:8f:b7:ab:f1:dd:0c:eb:5b:ff:
05:21:56:62:5a:2a:57:cd:c4:30:1d:03:06:02:ea:
90:4d:62:ab:9a:32:f0:a3:43:4d:9a:db:ed:07:ab:
8a:06:07:2a:d9:b7:a1:99:f4:a2:d9:79:9c:30:d1:
7a:ca:22:b2:cb:75:21:29:ea:ce:70:bc:62:ad:69:
3a:b9:8c:05:ff:da:32:06:0a:bc:80:a2:03:fd:e8:
1d:a3:81:5b:2f:5c:e1:03:56:c0:8a:7b:56:f1:17:
0e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C7:D8:6A:6C:50:80:47:51:95:9C:BE:EB:56:FC:4F:97:1D:65:9F
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ecfYamxQgEdRlZy-61b8T5cdZZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.138.0/24
185.106.93.0/24
Signature Algorithm: sha256WithRSAEncryption
32:3c:29:51:96:1f:1a:dd:bd:d4:20:da:7c:a3:4e:44:e3:c1:
fc:4f:eb:fc:f4:c6:9d:d0:bd:32:b4:84:27:6c:11:b3:3e:2d:
30:63:bd:4a:f9:e4:93:26:93:0d:59:43:5a:10:b0:00:26:f9:
1c:ef:dc:8f:14:e9:4a:94:80:0f:e5:00:e6:cf:45:85:34:ef:
f3:0c:5c:2e:f2:ad:b5:8e:86:0b:86:ec:86:a7:29:0b:10:b9:
51:f9:02:25:2f:23:75:10:be:0a:da:3f:cb:5c:00:80:b5:52:
f0:67:eb:b7:69:fd:91:bf:4b:76:e9:e6:43:ce:b3:91:75:0a:
8c:de:45:2e:17:f6:4b:66:d9:4f:5f:93:a2:52:12:7d:09:1f:
7e:b1:9c:79:2f:42:d5:b7:12:72:79:f4:b5:e7:5b:b9:12:6e:
7c:20:6b:99:73:ff:18:ef:17:d8:58:2a:bd:e2:50:21:2c:94:
c8:00:7f:73:dd:ed:25:bb:11:be:1e:06:93:7d:aa:62:87:21:
ff:7c:a1:6f:42:3d:7e:93:aa:0b:54:eb:7b:ec:52:0a:d6:a7:
75:c2:c5:2a:c8:f5:36:b7:5a:90:cf:ca:25:3f:97:15:81:41:
b2:4f:64:90:78:e0:af:96:9e:5b:78:71:e0:eb:e9:2b:d1:70:
3d:6a:d2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org