Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/EUF2zgXow2N_IyxumIyPyKhAjIE.roa
File: EUF2zgXow2N_IyxumIyPyKhAjIE.roa (raw, json)
Hash identifier: aoqwW1ORdW3bg6VzD6iRiWUer+S2cnXMOgGpGzquCrc=
Subject key identifier: 11:41:76:CE:05:E8:C3:63:7F:23:2C:6E:98:8C:8F:C8:A8:40:8C:81
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018BFCC662198DB0002BD3522663F3623E4E
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/EUF2zgXow2N_IyxumIyPyKhAjIE.roa
Signing time: Thu 23 Nov 2023 15:22:21 +0000
ROA not before: Thu 23 Nov 2023 15:22:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199738
IP address blocks: 176.32.54.0/24 maxlen: 24
176.32.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fc:c6:62:19:8d:b0:00:2b:d3:52:26:63:f3:62:3e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Nov 23 15:22:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=114176ce05e8c3637f232c6e988c8fc8a8408c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2e:7b:8e:54:ca:f2:c3:61:1c:3e:17:dd:e3:
b3:5a:7d:95:10:c6:23:44:be:10:ad:2d:ad:a7:27:
97:02:71:94:15:1f:1c:85:2a:fa:7b:01:8d:9b:a2:
10:db:17:6a:8d:c8:56:ff:db:2c:52:fd:4c:87:9e:
19:09:90:0a:ca:f0:49:b0:bf:2c:6b:78:e2:10:f4:
78:d8:ce:6e:34:89:74:43:74:64:07:6f:5d:d0:cb:
a3:d8:61:fb:91:a4:83:18:b8:f1:4b:81:73:bf:93:
65:0a:b3:ed:c5:68:55:92:64:fe:e5:0f:e4:b9:59:
c2:77:77:b7:30:ef:e8:da:d0:68:25:5e:c2:a4:ef:
1e:8f:11:b3:2c:6a:57:c9:d3:e4:e8:87:02:ff:68:
ac:67:af:3d:c8:31:23:98:24:e7:7a:21:22:84:24:
c9:9a:6f:11:2f:57:b9:f2:a0:c3:64:78:cc:8c:17:
b5:99:af:a5:05:08:e7:c5:b5:b9:40:85:8e:14:da:
d8:47:57:7f:af:a5:67:99:45:dc:6f:23:49:76:f5:
4d:f1:57:62:5b:89:b3:f0:47:71:5c:ba:d4:9a:1e:
09:de:11:8a:db:57:46:19:90:5d:55:87:5d:76:7a:
32:f9:dd:f0:53:40:7f:f6:b5:52:23:a3:ff:f6:47:
a7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:41:76:CE:05:E8:C3:63:7F:23:2C:6E:98:8C:8F:C8:A8:40:8C:81
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/EUF2zgXow2N_IyxumIyPyKhAjIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.50.0/24
176.32.54.0/24
Signature Algorithm: sha256WithRSAEncryption
18:20:db:52:e9:71:00:3e:30:75:99:68:ef:79:c4:a1:9e:1f:
1b:46:ae:dc:be:7c:06:dd:be:74:b6:ee:fb:17:ce:db:f1:1c:
8d:cc:9b:c4:b9:a1:23:da:85:98:1e:93:89:7c:2b:70:c8:30:
58:60:6b:ab:8e:a8:89:c0:a0:d1:62:8c:4b:dd:ef:aa:8c:22:
d7:01:b3:3e:86:68:4e:fa:c6:29:11:80:0f:80:96:fc:f3:83:
b7:40:d5:a2:16:db:59:8b:ec:d1:18:6e:5d:c6:0e:ad:b9:a7:
77:f8:f5:d1:0a:3b:ae:20:3b:ee:32:57:f8:61:42:a6:e4:9f:
31:0d:c6:94:4f:13:6d:98:0a:ac:1f:69:98:71:c7:b3:8f:b3:
ae:fc:ff:42:64:bc:03:96:dd:03:6e:42:eb:55:03:5d:53:43:
4a:bd:67:7a:8a:12:71:49:9b:6c:af:55:ad:6c:1a:de:4d:dd:
6f:2e:1e:24:7a:9d:b3:fc:bc:e9:ec:32:80:32:28:96:68:f9:
12:f7:a1:d2:ae:dc:74:32:32:a8:11:ce:25:50:95:c8:27:85:
8b:3f:5b:9a:c3:72:bf:29:a2:f8:ea:33:78:92:44:74:e3:8b:
02:7d:cc:35:89:d1:4c:82:1c:05:f5:93:d1:5b:ec:af:cf:38:
a0:0a:7f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:50 2024 by rpki-client on console-ams.rpki-client.org