Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/EZJDrS-UROetyR3iITZgO_9l3_o.roa
File: EZJDrS-UROetyR3iITZgO_9l3_o.roa (raw, json)
Hash identifier: zJV9JIWwaLj7X7mb1sWooISAwi3s5Ie1dcWXwpcUGrE=
Subject key identifier: 11:92:43:AD:2F:94:44:E7:AD:C9:1D:E2:21:36:60:3B:FF:65:DF:FA
Certificate issuer: /CN=92319bcd9b09a984b070e2ef588ffcfa8b73c8a2
Certificate serial: 018CC56EDB8D7D229E3C7AAAF6F121CFAD71
Authority key identifier: 92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/EZJDrS-UROetyR3iITZgO_9l3_o.roa
Signing time: Mon 01 Jan 2024 14:30:25 +0000
ROA not before: Mon 01 Jan 2024 14:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62597
IP address blocks: 185.103.34.0/24 maxlen: 24
185.103.33.0/24 maxlen: 24
185.103.32.0/22 maxlen: 24
2a00:edc0:1f0::/44 maxlen: 44
2a00:edc0:100::/44 maxlen: 48
2a00:edc0:1003::/48 maxlen: 48
2a00:edc0:1001::/48 maxlen: 48
2a00:edc0:1002::/48 maxlen: 48
2a00:edc0:1005::/48 maxlen: 48
2a00:edc0::/32 maxlen: 32
2a00:edc0:1010::/48 maxlen: 48
2a00:edc0:1000::/48 maxlen: 48
2a00:edc0:6259::/48 maxlen: 48
2a00:edc0:1004::/48 maxlen: 48
2a00:edc0:10f::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 07 May 2024 22:55:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:db:8d:7d:22:9e:3c:7a:aa:f6:f1:21:cf:ad:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92319bcd9b09a984b070e2ef588ffcfa8b73c8a2
Validity
Not Before: Jan 1 14:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=119243ad2f9444e7adc91de22136603bff65dffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:28:49:56:00:4f:10:a8:36:71:71:8b:c5:42:
43:e2:a8:e4:c4:2d:bf:7d:b5:70:71:78:e2:f2:2a:
d1:03:97:8f:bd:9e:ac:26:e4:b9:42:a1:a6:25:44:
d6:1c:8d:a6:87:05:e4:1a:59:fd:e6:b8:dd:08:45:
4f:75:26:21:e9:ef:d0:e9:1b:15:1f:2f:96:95:3b:
86:71:c5:5d:14:59:29:ac:0e:88:81:09:6a:db:6f:
16:48:1d:46:69:28:af:f1:4d:5d:ef:25:1a:62:62:
ec:71:36:17:e2:75:9d:c2:ad:85:10:9c:40:eb:66:
1a:b3:b0:24:e3:05:88:d8:6d:6a:de:bd:32:c4:9d:
8c:e1:ed:5a:1f:f8:ce:7d:39:0f:c2:20:72:d6:3f:
0c:fa:88:0a:a4:ea:bd:56:77:2b:56:9e:3b:16:a1:
ee:7f:1c:32:d2:5f:72:0a:8d:80:ab:39:39:b1:ee:
de:0d:7b:1f:c2:b7:23:e9:cc:02:c6:99:06:70:73:
9a:0f:64:fb:8f:8b:4d:9b:3b:60:88:4d:de:c6:75:
86:14:2e:e7:0c:06:57:4e:97:10:b9:0c:61:ae:83:
7e:02:41:d2:a0:fb:16:71:5d:5f:a4:d2:de:73:22:
92:a6:76:f0:6b:c7:23:26:5b:39:f8:3b:30:04:86:
00:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:92:43:AD:2F:94:44:E7:AD:C9:1D:E2:21:36:60:3B:FF:65:DF:FA
X509v3 Authority Key Identifier:
keyid:92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/EZJDrS-UROetyR3iITZgO_9l3_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.32.0/22
IPv6:
2a00:edc0::/32
Signature Algorithm: sha256WithRSAEncryption
86:c8:5d:7b:5f:f1:21:81:79:e0:4e:69:ec:3c:8f:44:66:7a:
dd:3d:8b:91:c4:44:a7:2a:ba:a7:8d:a7:28:d7:3d:c2:b7:cd:
d8:e2:39:e0:d6:07:af:ee:cb:f5:f9:a5:e5:15:8e:56:a0:3a:
c8:2a:24:99:7f:38:f9:b2:f0:cd:e2:f3:23:34:4e:f9:fc:76:
5a:ce:d0:f3:2e:fc:31:d4:97:94:9c:6f:a5:76:da:ad:38:29:
99:2e:be:c6:05:b5:f2:bd:a7:07:73:05:0b:bd:cb:da:6c:dd:
6d:ec:bd:c9:41:db:de:2f:49:c6:d4:b5:6f:4a:b8:ed:0c:0e:
4a:88:c0:39:d6:26:59:d9:44:30:fb:ef:f1:b3:7f:45:81:39:
eb:41:92:53:90:a9:45:3d:72:ec:ce:15:f1:48:96:4d:af:12:
f2:b2:32:c6:00:d8:cc:d3:f0:16:8f:f3:dd:3b:2c:3b:1a:88:
66:65:a2:a9:04:07:2a:ff:64:59:96:25:14:f1:de:62:f1:d5:
1e:b5:8b:61:0b:d9:eb:d7:86:ba:17:91:9f:73:44:1e:7d:a6:
30:7d:17:53:fe:d3:dc:7c:9b:4f:15:21:31:52:c5:55:e8:aa:
e6:97:0b:52:8c:5c:d0:c3:10:a0:c6:bc:00:7d:fe:3b:ba:e1:
fa:82:be:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:21 2024 by rpki-client on console-fra.rpki-client.org