Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/EIujKd2W4WB97xvlTBfrgPs9VDU.roa
File: EIujKd2W4WB97xvlTBfrgPs9VDU.roa (raw, json)
Hash identifier: CBgk3g2cnFgLHFmMVyAsVjf9Ipxe9VG2l0rnpzKV7rY=
Subject key identifier: 10:8B:A3:29:DD:96:E1:60:7D:EF:1B:E5:4C:17:EB:80:FB:3D:54:35
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 018573717F59E19A7905C7CBFCD4389E3613
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/EIujKd2W4WB97xvlTBfrgPs9VDU.roa
Signing time: Mon 02 Jan 2023 17:04:56 +0000
ROA not before: Mon 02 Jan 2023 17:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211970
IP address blocks: 185.234.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Mar 2023 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:71:7f:59:e1:9a:79:05:c7:cb:fc:d4:38:9e:36:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: Jan 2 17:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=108ba329dd96e1607def1be54c17eb80fb3d5435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5b:75:ab:1d:07:2c:79:e3:ef:55:e7:f5:e7:
5d:a0:da:c6:dd:39:00:fb:9b:88:12:e4:07:3b:ef:
2a:76:03:8d:5b:4f:68:2c:ba:bf:50:15:a2:ec:45:
db:85:8d:b8:38:27:84:91:72:b1:ac:9f:7d:73:9c:
7f:f1:d4:4a:9f:7f:52:65:5d:80:52:94:ca:02:71:
90:39:43:04:4d:b8:52:c2:f9:29:7d:e6:f2:8c:89:
f1:d1:51:b8:59:68:d9:fe:b0:9b:58:3e:b6:ed:f8:
c2:1d:8a:58:1d:22:0f:f9:45:d5:99:dd:42:89:df:
65:44:ff:bb:7f:3f:77:95:a7:e4:d3:96:1a:25:d5:
91:93:96:b5:60:35:e6:a6:f5:4f:18:47:df:ed:59:
be:1a:83:0c:8b:e7:4d:a4:d7:88:bd:84:2e:44:d2:
42:1b:3c:e7:dc:43:c9:23:e0:d4:ad:95:bf:a5:1e:
a3:a1:28:b5:a8:32:f0:9b:ed:17:dd:14:ce:09:3c:
ef:62:36:9d:aa:c7:e0:59:d5:02:f6:ea:7e:ec:b6:
19:69:44:9e:a4:e4:fd:2e:f4:fa:69:75:be:69:00:
cd:54:ae:1e:42:78:d2:74:4b:7a:4f:78:a2:3c:85:
8d:95:10:b2:1f:d4:47:df:73:c6:f2:b9:60:08:b4:
d1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8B:A3:29:DD:96:E1:60:7D:EF:1B:E5:4C:17:EB:80:FB:3D:54:35
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/EIujKd2W4WB97xvlTBfrgPs9VDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.245.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:b0:f6:82:f9:a8:dc:ca:2d:6e:5b:f2:df:78:9a:bb:ec:5b:
03:50:ec:15:f6:79:06:20:fd:63:8f:23:a2:5f:32:a3:c9:ff:
2f:18:a9:cf:c4:63:c2:79:b2:72:e7:17:ad:3e:0f:8e:04:4a:
90:53:b9:f7:7e:94:7b:c8:be:d8:50:9b:96:97:2b:41:c1:ad:
59:2e:30:b8:ba:89:04:5d:d4:27:f9:2d:78:14:33:cd:a6:ba:
8c:75:bd:87:07:61:52:0f:f8:7e:54:ef:79:63:75:82:0a:d8:
44:a1:9c:49:07:e0:49:14:56:18:34:3d:d9:2c:9a:73:2b:8e:
e6:53:1e:ba:75:26:eb:27:12:c2:ef:9f:31:1e:10:ce:c0:4f:
44:9f:fc:e3:3b:a7:43:c9:f7:71:2a:60:0f:61:da:7c:dc:bd:
58:67:4b:12:86:c8:c5:3c:a1:c8:c8:27:b8:82:1e:20:67:46:
36:24:a0:8d:a8:81:25:d4:0d:65:74:d5:5c:c5:9f:e2:fb:5d:
be:0b:9a:e2:df:9b:37:83:05:67:1b:6d:73:ad:d9:53:93:d6:
7b:eb:0b:7c:a2:a8:35:5a:99:44:c8:28:b3:94:e4:cb:93:38:
84:a4:e7:a6:c0:da:4f:01:14:ef:73:c1:af:62:56:5f:73:d3:
16:3a:ea:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:06 2024 by rpki-client on console-fra.rpki-client.org