Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/EMEP7u-LH-dO4g-NhOmhBjDd_ns.roa
File: EMEP7u-LH-dO4g-NhOmhBjDd_ns.roa (raw, json)
Hash identifier: BryGx9cgmThhL97c5brTPLxtNPdMwUZ2veNULgCcHrM=
Subject key identifier: 10:C1:0F:EE:EF:8B:1F:E7:4E:E2:0F:8D:84:E9:A1:06:30:DD:FE:7B
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 01856FB11F4DED521A888D0446EA58C88F2F
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/EMEP7u-LH-dO4g-NhOmhBjDd_ns.roa
Signing time: Sun 01 Jan 2023 23:35:56 +0000
ROA not before: Sun 01 Jan 2023 23:35:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203061
IP address blocks: 5.183.92.0/23 maxlen: 23
5.180.220.0/23 maxlen: 23
5.180.222.0/23 maxlen: 23
45.10.232.0/23 maxlen: 23
91.204.48.0/23 maxlen: 23
91.204.50.0/23 maxlen: 23
92.118.12.0/23 maxlen: 23
92.118.14.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:1f:4d:ed:52:1a:88:8d:04:46:ea:58:c8:8f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jan 1 23:35:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10c10feeef8b1fe74ee20f8d84e9a10630ddfe7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:73:07:27:09:f4:56:b8:7f:08:a3:70:43:
35:54:1a:89:33:84:06:9e:b1:31:b6:e6:82:4f:35:
a1:58:8e:f5:fd:16:53:11:8b:d0:35:c0:16:8b:0a:
d8:b0:3c:ab:27:5d:11:01:f8:d2:55:6c:88:1e:11:
66:57:17:25:3d:b2:aa:7e:3c:34:16:2b:3e:9a:8c:
fa:0e:30:d2:b4:ab:15:07:dd:ca:12:95:91:a9:b3:
45:92:0d:cf:27:dc:5d:8c:90:fc:d4:a6:68:da:89:
24:2e:cd:35:01:51:55:2d:c3:41:c1:aa:96:eb:8d:
88:c9:72:28:8c:82:a4:ed:17:5a:84:5a:8f:70:cc:
51:b1:a6:29:86:3a:bb:ad:87:34:11:79:d0:55:aa:
22:1a:be:59:a6:ab:2a:d9:0a:88:26:f9:57:1a:2f:
0f:e0:69:77:35:83:91:36:86:3e:59:e1:b7:af:c3:
94:f9:57:d7:48:0d:d6:7e:14:18:66:ec:e1:80:e5:
f0:21:9a:cb:01:4f:6a:14:66:8e:49:9c:a2:41:82:
f6:91:8a:b6:06:ba:fe:9e:ba:6d:4e:31:b7:68:5a:
b4:3c:06:c6:b0:bc:7d:ad:0d:d4:a3:98:ee:45:d8:
92:99:38:19:2f:d6:86:15:bd:3e:4f:8d:d5:d9:02:
07:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C1:0F:EE:EF:8B:1F:E7:4E:E2:0F:8D:84:E9:A1:06:30:DD:FE:7B
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/EMEP7u-LH-dO4g-NhOmhBjDd_ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.220.0/22
5.183.92.0/23
45.10.232.0/23
91.204.48.0/22
92.118.12.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:89:e0:0b:d2:f1:0e:cd:b4:68:8d:2a:0e:66:60:f4:92:2f:
93:4e:76:c3:ef:7b:68:57:84:50:d3:7e:bc:b0:6e:96:c0:89:
fe:c4:15:da:75:bb:c5:89:40:29:79:90:57:d1:31:4a:4a:fc:
5b:00:ba:d0:f9:90:0a:1a:8d:54:02:ae:2a:46:34:71:ab:c6:
59:05:a3:69:b9:f6:a0:2d:c7:34:9e:51:dc:87:89:3f:f1:ac:
7a:67:14:6a:46:07:7f:1e:a9:40:cb:c7:10:21:85:ec:2b:37:
4e:b9:4b:25:05:12:eb:04:9d:43:41:49:15:df:dd:cb:32:6e:
db:84:9f:43:6c:e1:a4:83:f7:04:5c:0a:c4:6e:af:64:f9:8b:
cd:a6:54:da:ff:f1:a5:34:4b:8d:b6:d8:3c:df:a4:e2:db:18:
b2:5a:3a:1f:fc:0f:03:6d:cb:1c:c3:3d:a7:24:ac:8d:28:6b:
c7:4a:8c:e8:20:77:1e:d4:27:8f:af:70:28:04:83:99:63:13:
ed:fb:54:80:b3:d7:67:59:f9:73:2d:c1:0d:50:83:28:85:94:
1d:5b:88:a6:92:51:bd:c9:09:8a:a5:b8:81:ee:f3:7c:35:ab:
d3:8a:7a:de:6d:9c:61:d7:78:a1:c7:46:a9:d3:a8:e8:99:b8:
41:3e:5a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:36 2024 by rpki-client on console-ams.rpki-client.org