Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/ezclKP1_EviChG1XZRZQAwRwPgo.roa
File: ezclKP1_EviChG1XZRZQAwRwPgo.roa (raw, json)
Hash identifier: QLS6QFSc5K80/fYqRVZ+iR68EwaL2dUn020FSSdWma4=
Subject key identifier: 7B:37:25:28:FD:7F:12:F8:82:84:6D:57:65:16:50:03:04:70:3E:0A
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 01856EC23898F934456CA06F59301A8C380E
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/ezclKP1_EviChG1XZRZQAwRwPgo.roa
Signing time: Sun 01 Jan 2023 19:15:00 +0000
ROA not before: Sun 01 Jan 2023 19:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211871
IP address blocks: 89.252.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Dec 2023 12:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:38:98:f9:34:45:6c:a0:6f:59:30:1a:8c:38:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Jan 1 19:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b372528fd7f12f882846d576516500304703e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:48:a8:b5:76:af:55:b8:e2:3f:0f:ef:e3:68:
ae:a1:c8:7e:db:45:96:58:f0:64:15:bc:92:61:1a:
31:17:5b:23:29:0c:fd:b9:b1:bc:56:b1:d5:65:36:
1d:1b:70:06:e7:b7:b3:7f:e2:a9:61:2f:a4:d7:96:
91:e4:52:09:c0:fe:10:37:a1:5b:28:fc:e6:2b:ac:
29:9e:6c:b6:07:d9:71:37:00:45:2b:55:f5:d1:f5:
81:72:a1:04:2d:f4:73:2b:1f:9f:aa:61:ef:48:80:
24:71:10:28:e8:10:51:3e:fa:ff:eb:2a:cf:1a:e4:
42:39:55:f2:21:67:98:7c:f7:c4:57:6b:30:65:20:
b0:e3:87:f8:40:16:f4:f4:c6:72:85:c7:07:03:da:
ec:a4:da:eb:89:e2:d1:1b:25:0e:65:96:e9:01:cc:
fd:6e:21:c8:2c:ee:e3:04:55:4b:56:a1:f8:16:77:
e4:37:b0:c6:7c:80:ff:f1:a3:2a:ec:43:2d:03:31:
aa:b3:a4:91:9d:28:59:e6:bd:b6:7c:3b:62:88:03:
a6:6b:51:23:43:b1:fc:06:a2:35:9c:ce:0f:80:d7:
98:c6:f5:58:aa:f4:bc:8f:e3:a0:27:e0:e1:27:61:
46:24:10:3f:d0:25:60:8e:c8:39:9e:cf:e4:ad:38:
13:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:37:25:28:FD:7F:12:F8:82:84:6D:57:65:16:50:03:04:70:3E:0A
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/ezclKP1_EviChG1XZRZQAwRwPgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.252.156.0/24
Signature Algorithm: sha256WithRSAEncryption
40:81:41:ca:4e:4a:28:45:b2:41:ef:a0:60:2b:66:cd:9d:1e:
64:6b:04:ac:dc:42:55:d7:73:5c:12:c5:25:67:a3:67:52:f6:
f2:d1:22:e9:b5:08:59:a3:97:23:a2:49:a3:23:46:75:f1:2d:
f1:37:82:3f:d7:2d:e4:c7:97:8b:f8:d4:66:f5:82:51:d4:f7:
67:59:c1:f9:3e:52:9d:38:62:cc:f8:56:2e:94:df:41:b2:80:
db:80:ac:a0:a2:2b:9f:4b:e9:06:74:a2:af:95:fa:55:bd:23:
b2:a3:60:2b:44:5b:ea:01:89:58:c8:d7:81:82:6f:22:07:14:
4a:0f:5c:04:43:48:ce:05:57:6e:50:66:e0:56:7e:f6:4c:c9:
45:28:0f:be:12:e1:a5:77:1d:4e:62:9f:00:79:6e:34:3a:90:
b0:39:78:5a:bb:84:d8:d7:a5:b8:9c:9e:d3:99:49:91:db:e2:
9d:37:38:91:bf:05:73:b2:f7:1f:6a:1c:86:a1:8e:81:d0:1b:
59:50:79:98:9d:90:fe:f0:74:2a:42:82:09:c2:67:43:c9:e7:
3c:00:fb:9b:64:7e:c5:4d:f2:96:6b:12:aa:59:54:1e:15:65:
82:a2:53:68:2e:dc:e3:aa:5a:3b:e6:ec:b2:f0:7a:39:07:13:
47:92:fd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:08 2024 by rpki-client on console-ams.rpki-client.org