Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/EGnnzes0Uj_h7xqzTjGYW-fhGg4.roa
File: EGnnzes0Uj_h7xqzTjGYW-fhGg4.roa (raw, json)
Hash identifier: amS8iNGjBRF8g2q+yI/NBOnIkWyWJ6UmSD8jQV+wowI=
Subject key identifier: 10:69:E7:CD:EB:34:52:3F:E1:EF:1A:B3:4E:31:98:5B:E7:E1:1A:0E
Certificate issuer: /CN=e6f1dedaf4dbda60da990d685650e68c888c6100
Certificate serial: 018992A22384C1182EED95691929407B843C
Authority key identifier: E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/EGnnzes0Uj_h7xqzTjGYW-fhGg4.roa
Signing time: Wed 26 Jul 2023 14:37:26 +0000
ROA not before: Wed 26 Jul 2023 14:37:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 185.204.94.0/24 maxlen: 24
185.230.228.0/24 maxlen: 24
185.204.93.0/24 maxlen: 24
185.204.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:92:a2:23:84:c1:18:2e:ed:95:69:19:29:40:7b:84:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f1dedaf4dbda60da990d685650e68c888c6100
Validity
Not Before: Jul 26 14:37:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1069e7cdeb34523fe1ef1ab34e31985be7e11a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3c:e1:02:8c:6d:63:3f:48:d3:d8:5d:73:ce:
b7:4d:62:12:c8:75:3f:34:f5:03:7e:fc:99:22:30:
a0:9d:43:dd:73:df:0a:da:d4:30:59:b5:01:e5:7e:
10:8d:a1:fc:2f:72:4c:47:02:0f:70:48:ce:9e:02:
47:2d:e1:50:ae:94:81:0c:88:4c:c5:58:c2:e0:40:
a2:ed:26:a5:72:2a:b3:4f:ed:49:2f:e9:03:61:ab:
f3:27:ba:fb:e4:0b:0b:c7:07:7d:9f:d4:d7:e9:a6:
da:71:cf:b3:0f:89:d4:e9:78:fa:91:b9:d6:e8:f1:
8c:fd:69:cc:f2:0e:3b:51:10:f9:fd:66:12:0d:91:
2c:20:82:2e:42:fe:35:4d:7b:a1:f8:0a:35:35:de:
5b:61:d5:21:f6:99:bf:cc:ba:9a:dd:68:b2:c0:30:
71:c1:36:07:2d:83:30:99:7f:50:3e:39:4f:90:96:
e8:c6:06:9d:db:2b:85:30:e2:f0:e1:7a:ca:24:73:
ce:c8:a4:e4:a2:ce:31:4b:24:e8:13:87:39:85:f6:
f5:59:e7:cd:9d:2e:4a:44:94:df:ff:9c:e5:0f:ee:
01:8b:c3:31:ef:c9:a9:a8:78:89:dd:9b:5b:0f:bc:
94:95:14:41:58:95:61:c5:ed:6d:43:1d:21:5e:19:
87:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:69:E7:CD:EB:34:52:3F:E1:EF:1A:B3:4E:31:98:5B:E7:E1:1A:0E
X509v3 Authority Key Identifier:
keyid:E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/EGnnzes0Uj_h7xqzTjGYW-fhGg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.93.0-185.204.95.255
185.230.228.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:76:46:8f:6e:eb:fa:7f:29:57:75:14:85:cb:c7:df:54:90:
bc:83:63:dd:14:52:f2:d1:00:ff:a2:b7:8c:36:cd:19:39:53:
a1:bc:f5:99:eb:a0:e9:ee:92:5e:26:d1:ff:a0:0c:17:54:87:
bb:11:0c:c5:af:5e:04:b7:dc:bd:02:24:98:12:c8:c4:2b:90:
19:d3:bc:54:41:84:e5:5f:cb:89:05:05:5e:2c:bd:c8:98:e4:
fb:a9:22:de:84:00:5d:ba:1d:4e:da:02:38:90:a4:b2:f6:40:
71:c5:56:58:5d:f8:02:f3:8a:44:f2:95:d9:0d:c7:5d:af:a5:
2a:02:90:d6:f7:37:1b:ce:78:82:cf:fc:28:b4:bd:fc:3b:b1:
0b:08:2c:4f:64:4d:cd:5b:1b:58:55:5a:66:48:b2:24:74:fc:
5d:7b:f0:92:80:ab:2f:45:00:33:7a:c1:97:93:51:7c:9c:4e:
c3:4f:02:29:37:31:78:69:94:5a:92:83:ac:84:a8:54:81:c4:
30:95:40:18:35:f9:7a:56:57:82:c4:f3:84:48:38:99:4d:a9:
42:f9:b5:4e:b6:06:90:66:7f:f2:61:bd:cc:bf:40:5f:30:3f:
a3:ab:72:16:70:c7:73:b4:eb:b8:d2:47:54:e8:9c:03:33:1e:
df:b9:ba:1b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:59 2024 by rpki-client on console-fra.rpki-client.org