Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/EbU7V02haR737w6AR-0dpyY6CGU.roa
File: EbU7V02haR737w6AR-0dpyY6CGU.roa (raw, json)
Hash identifier: /km8mBu1iusmhy0CvcalNcOAgi6c0kC1nPkd0ccLJYY=
Subject key identifier: 11:B5:3B:57:4D:A1:69:1E:F7:EF:0E:80:47:ED:1D:A7:26:3A:08:65
Certificate issuer: /CN=d1f7cd0ec4c3bc54c59431307eec36ef03827733
Certificate serial: 01856D8AE02C4869A6E61CAFAB132C065493
Authority key identifier: D1:F7:CD:0E:C4:C3:BC:54:C5:94:31:30:7E:EC:36:EF:03:82:77:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/EbU7V02haR737w6AR-0dpyY6CGU.roa
Signing time: Sun 01 Jan 2023 13:34:55 +0000
ROA not before: Sun 01 Jan 2023 13:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47944
IP address blocks: 94.125.200.0/21 maxlen: 21
94.125.207.0/24 maxlen: 24
2a03:2ba0::/32 maxlen: 32
2a03:2ba0:1:888::/64 maxlen: 64
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:e0:2c:48:69:a6:e6:1c:af:ab:13:2c:06:54:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f7cd0ec4c3bc54c59431307eec36ef03827733
Validity
Not Before: Jan 1 13:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11b53b574da1691ef7ef0e8047ed1da7263a0865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c6:d7:9d:62:6a:75:15:fd:95:a3:63:e1:dd:
0f:08:b5:c1:30:e4:0d:9a:4a:95:c2:92:7a:6e:da:
9f:92:06:bc:87:65:9e:ac:9a:65:cf:61:4a:85:d2:
40:0f:6d:be:b1:43:c3:89:37:11:42:e6:b6:6c:b6:
6f:a0:5c:11:d2:42:a9:96:87:87:34:13:b3:75:3d:
84:a7:f3:4e:c2:e7:58:8b:fc:62:78:3a:e4:1c:1a:
b4:0a:eb:1b:35:0b:78:07:3b:bc:75:28:48:33:6e:
71:e4:db:2d:f0:be:48:32:42:5d:eb:76:74:42:5d:
9f:de:cc:4d:8c:17:5f:66:22:40:27:cf:1f:3a:9e:
48:42:8e:7d:32:ca:55:31:50:6e:f8:fa:ca:fa:05:
39:9b:22:4a:b2:70:f3:53:74:a8:b1:c4:44:49:14:
4b:7a:12:f6:4f:6a:fb:f2:14:e3:c2:85:81:46:9c:
3c:bc:5a:36:e7:46:44:c3:58:e7:63:41:85:f9:1a:
94:85:52:47:fd:d1:ba:72:ff:ff:29:ee:b3:b3:1e:
63:60:7f:09:6c:76:e0:72:7a:aa:5f:c4:96:27:1b:
3c:63:d1:38:a0:bd:17:62:6a:66:f7:d1:c5:8b:5f:
1d:90:ae:1e:38:e9:95:05:35:2b:3d:c8:45:fa:c1:
e3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B5:3B:57:4D:A1:69:1E:F7:EF:0E:80:47:ED:1D:A7:26:3A:08:65
X509v3 Authority Key Identifier:
keyid:D1:F7:CD:0E:C4:C3:BC:54:C5:94:31:30:7E:EC:36:EF:03:82:77:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/EbU7V02haR737w6AR-0dpyY6CGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.200.0/21
IPv6:
2a03:2ba0::/32
Signature Algorithm: sha256WithRSAEncryption
ab:cf:9d:6c:e1:c6:ba:58:48:5a:95:5f:d6:62:fa:39:49:21:
73:1d:e3:ee:89:4a:b6:cf:e8:11:5f:af:d5:22:94:1e:29:78:
4b:1c:d4:b9:08:b4:c5:ea:ed:f8:41:1e:1e:e9:1f:04:da:d9:
3b:6a:7e:0b:e1:66:13:ff:dc:0f:87:80:36:82:61:a5:d8:5e:
bd:a0:c7:77:36:ce:98:77:06:75:c4:23:71:fe:b4:f4:ea:8b:
8e:bc:00:bb:34:90:bd:c6:f0:c6:d2:07:7b:8b:9b:25:1d:86:
d0:5d:5f:a1:6e:00:f4:44:d0:05:6e:6f:f3:90:80:5d:5b:27:
0b:67:a6:c8:ce:10:2b:fd:89:e3:95:cf:73:33:03:bf:39:4c:
ef:5a:9b:36:1a:58:e2:2c:82:17:4f:ad:70:77:9f:90:98:1b:
5b:d8:cb:0a:a9:18:25:3f:27:77:20:ee:8e:4b:3c:24:6a:9f:
e3:7d:da:55:98:9c:b9:cc:04:b5:fa:94:35:ea:96:32:a2:65:
b3:e0:bd:54:fc:04:e6:14:11:03:5c:86:ac:c8:1c:10:df:2e:
d9:02:33:6d:fb:a5:71:a1:63:45:c8:31:a0:25:e6:c1:d2:c0:
97:1c:2a:41:7c:f8:83:cc:44:31:ab:7b:36:be:75:93:37:97:
d2:f6:eb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:38 2024 by rpki-client on console-fra.rpki-client.org