Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/EasklYNfEJjoZTfKry4vJ-PHjF0.roa
File: EasklYNfEJjoZTfKry4vJ-PHjF0.roa (raw, json)
Hash identifier: RCTPVACUmq9SRwPiTfLvsNcFqMfetNfBEV77UMuOzv8=
Subject key identifier: 11:AB:24:95:83:5F:10:98:E8:65:37:CA:AF:2E:2F:27:E3:C7:8C:5D
Certificate issuer: /CN=4b529a4d22faef23135d6eff8912266623c49255
Certificate serial: 01896DDD9A0DDA6CD9B6E4804DD4DB3266CE
Authority key identifier: 4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/EasklYNfEJjoZTfKry4vJ-PHjF0.roa
Signing time: Wed 19 Jul 2023 11:16:26 +0000
ROA not before: Wed 19 Jul 2023 11:16:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42705
IP address blocks: 80.251.0.0/20 maxlen: 20
80.251.10.0/24 maxlen: 24
80.251.11.0/24 maxlen: 24
85.31.64.0/19 maxlen: 24
5.11.16.0/24 maxlen: 24
5.11.17.0/24 maxlen: 24
5.11.16.0/22 maxlen: 22
5.11.18.0/24 maxlen: 24
5.11.24.0/23 maxlen: 23
5.11.24.0/21 maxlen: 21
5.11.24.0/24 maxlen: 24
5.11.26.0/23 maxlen: 23
5.11.25.0/24 maxlen: 24
5.11.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Aug 2023 07:19:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6d:dd:9a:0d:da:6c:d9:b6:e4:80:4d:d4:db:32:66:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b529a4d22faef23135d6eff8912266623c49255
Validity
Not Before: Jul 19 11:16:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11ab2495835f1098e86537caaf2e2f27e3c78c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f0:03:19:01:5e:16:5f:f3:fe:62:d5:6f:70:
be:99:5c:32:34:14:42:6e:e2:1a:cd:9d:69:a3:bf:
61:94:80:4a:fd:00:e6:1f:cb:1f:3d:18:ff:bf:a8:
d0:b6:89:e8:da:78:1a:42:df:73:ac:6e:49:3e:3a:
d2:2e:e5:e6:3d:b7:0a:41:da:42:8d:c1:9f:ff:0e:
05:bc:b7:1c:85:0a:71:39:55:56:aa:dc:d5:31:5c:
3e:42:d2:17:44:eb:55:6f:4b:ee:2b:2e:f9:f3:e4:
cc:5b:76:28:79:7c:1c:c1:15:ce:69:1f:fb:93:5b:
a2:f3:98:ac:a9:11:d7:3c:72:2a:67:45:46:df:d2:
52:b6:c5:b9:ae:dc:63:dd:39:02:2d:34:71:32:3f:
a9:46:5e:47:99:6f:2e:ff:b6:3a:50:f2:c5:e1:30:
ce:48:e7:e1:bb:48:36:9c:29:c7:ca:3d:30:87:45:
6f:82:8c:cd:5a:c0:66:f5:21:28:b1:ae:f2:d9:05:
43:74:e6:d8:49:18:b0:50:31:f1:5c:d5:10:a1:a2:
36:80:25:7d:ea:44:c7:3b:b1:55:55:15:d9:4c:ab:
c5:5b:bb:ff:6a:48:3c:ff:13:72:7c:f2:06:75:94:
3c:3a:fc:29:bf:57:76:da:db:ca:af:4a:78:96:84:
58:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AB:24:95:83:5F:10:98:E8:65:37:CA:AF:2E:2F:27:E3:C7:8C:5D
X509v3 Authority Key Identifier:
keyid:4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/EasklYNfEJjoZTfKry4vJ-PHjF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.16.0/22
5.11.24.0/21
80.251.0.0/20
85.31.64.0/19
Signature Algorithm: sha256WithRSAEncryption
93:f4:21:a6:52:09:ab:e2:37:46:eb:af:cd:a7:da:46:ec:9e:
b8:86:12:27:db:1f:40:13:a0:6d:0e:36:29:29:a1:4b:c7:06:
a1:8c:a5:bc:a4:16:a7:65:e2:e2:96:5f:e6:45:03:0b:f8:ed:
e8:9f:49:d3:fd:17:40:4f:22:dc:d6:d5:08:a4:bf:eb:bd:ed:
91:1d:29:fb:a0:09:35:04:26:19:4d:8f:97:22:8e:32:63:d5:
b3:ea:db:68:a4:53:10:46:2b:09:05:12:3e:26:21:7b:83:e3:
c6:4d:30:00:7a:57:6f:74:1b:9a:de:9b:b1:84:f9:ce:9b:2a:
67:7d:ec:69:46:95:07:44:fc:26:52:9b:0e:01:b0:5a:69:57:
e7:ab:b9:7b:07:16:76:fb:36:e6:bc:0b:bc:70:3a:d0:8b:3b:
f2:c8:76:69:2c:d4:60:a6:44:95:fd:b6:08:37:1a:59:7a:24:
93:03:60:9c:e9:e7:e4:25:d5:6d:8b:51:7d:2b:4e:0a:e6:bf:
df:c1:11:e0:bd:12:ff:a5:6a:f1:d3:f2:0d:bc:9c:b5:f2:75:
c6:ea:65:c7:d7:62:e4:53:19:f1:33:82:18:c3:4b:d2:77:76:
4a:61:6e:17:57:36:4b:84:37:c6:60:2d:18:90:ee:1a:f5:76:
41:1c:19:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:06 2024 by rpki-client on console-fra.rpki-client.org