Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/7-EQ-etXQmY_5sWlAvmwUtC5S3M.roa
File: 7-EQ-etXQmY_5sWlAvmwUtC5S3M.roa (raw, json)
Hash identifier: 9Nq7fPya+h7MulvWxAiKlURn8F1UMj7HQ7WZtvLwJqU=
Subject key identifier: EF:E1:10:F9:EB:57:42:66:3F:E6:C5:A5:02:F9:B0:52:D0:B9:4B:73
Certificate issuer: /CN=89aed2cff8ce31b334f83a0b305feef01d71da75
Certificate serial: 01856EC2260731A48288CA24E121AA843E8E
Authority key identifier: 89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/7-EQ-etXQmY_5sWlAvmwUtC5S3M.roa
Signing time: Sun 01 Jan 2023 19:14:55 +0000
ROA not before: Sun 01 Jan 2023 19:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31655
IP address blocks: 92.207.0.0/16 maxlen: 24
151.2.128.0/17 maxlen: 24
2a04:4440::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 27 Nov 2023 15:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:26:07:31:a4:82:88:ca:24:e1:21:aa:84:3e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aed2cff8ce31b334f83a0b305feef01d71da75
Validity
Not Before: Jan 1 19:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efe110f9eb5742663fe6c5a502f9b052d0b94b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:70:93:69:66:7b:00:3a:fd:62:2c:91:8a:b0:
0f:bb:13:3d:58:96:c7:ab:05:ee:62:65:0e:79:fe:
9e:13:f6:78:98:28:26:27:19:4b:4d:3e:1d:35:29:
5f:d3:1f:09:6d:3a:ec:c3:2e:a6:df:be:4c:29:96:
20:b4:61:61:ad:37:cc:5e:8d:45:04:5e:e9:c5:a8:
3d:49:a7:46:c4:ca:02:1b:d0:04:f0:da:cb:49:65:
23:9a:a4:47:7a:fd:65:75:b8:8e:4f:9b:f9:42:ff:
3d:5e:21:8b:4d:e8:7d:da:a1:80:30:85:3e:e5:ad:
a6:7e:df:9c:f9:bf:41:09:cf:d1:c9:63:ab:66:c6:
ce:97:69:fe:21:2f:59:63:38:17:af:2a:f8:99:44:
01:21:64:30:a6:a6:b8:ef:47:3d:47:82:51:24:0d:
a7:ae:b2:e9:8c:a3:34:3f:5b:aa:64:bc:f1:4b:84:
50:b6:84:d4:84:88:2e:c1:71:06:83:e4:5a:3a:c4:
b4:52:88:aa:41:8a:be:dc:1e:55:ba:2b:ea:15:38:
f6:bb:ae:20:c4:bc:5c:8f:c4:e2:97:e5:97:ca:3a:
93:81:5b:03:bf:1a:79:63:a8:fe:4e:2d:3a:a8:43:
e4:07:00:f8:18:b7:f9:86:fd:49:31:de:1b:aa:0e:
3e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E1:10:F9:EB:57:42:66:3F:E6:C5:A5:02:F9:B0:52:D0:B9:4B:73
X509v3 Authority Key Identifier:
keyid:89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/7-EQ-etXQmY_5sWlAvmwUtC5S3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.207.0.0/16
151.2.128.0/17
IPv6:
2a04:4440::/29
Signature Algorithm: sha256WithRSAEncryption
16:a6:eb:35:f7:12:a3:6c:37:35:5a:36:f0:28:37:30:a7:80:
cd:f8:02:0a:81:ef:8c:54:52:27:51:6f:24:91:4d:71:5e:2e:
8a:94:8b:44:ae:b4:b5:a5:c5:1e:8e:f9:90:b2:02:be:b4:c2:
99:07:2c:33:6e:1c:7d:b8:78:f1:34:84:13:8c:af:6b:e9:89:
15:97:fb:c7:f3:ff:2c:e6:d5:f8:10:eb:19:d0:a3:88:59:ad:
fe:78:1c:4d:66:71:ed:79:c6:94:35:50:0c:22:ad:4e:b6:67:
95:e9:db:56:ff:76:85:72:69:de:51:c8:ea:87:23:91:cc:8a:
48:06:83:4f:2b:24:13:e6:de:97:81:70:53:df:2a:05:d4:25:
1b:50:6c:55:19:c1:4f:4b:c9:f3:80:9e:cb:4f:31:41:7c:b0:
b8:eb:f4:b6:89:0a:ce:e5:34:65:02:6e:02:c5:a5:53:02:12:
4d:da:51:12:c5:89:6c:aa:5b:a7:be:40:14:78:33:19:16:fd:
b5:ab:a9:d0:8e:51:14:a5:00:9f:19:91:df:24:eb:8b:9d:73:
dc:00:3b:1c:d1:bb:7b:fc:3d:73:c1:58:0a:07:07:b9:b5:2c:
df:f0:f8:80:7a:38:52:47:72:3b:0d:2c:e2:d6:c6:15:63:87:
ec:d9:b9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:05 2024 by rpki-client on console-fra.rpki-client.org