Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/ejqTz2IpjDxpb2Pl6Md00I9mU4k.roa
File: ejqTz2IpjDxpb2Pl6Md00I9mU4k.roa (raw, json)
Hash identifier: DghB9tJF5DDWawJTUvzwmL25Ru73B76bRxZ5Qc78Di0=
Subject key identifier: 7A:3A:93:CF:62:29:8C:3C:69:6F:63:E5:E8:C7:74:D0:8F:66:53:89
Certificate issuer: /CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
Certificate serial: 01856E0AEC0B704076ACF350A8EBEE478CC7
Authority key identifier: 9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/ejqTz2IpjDxpb2Pl6Md00I9mU4k.roa
Signing time: Sun 01 Jan 2023 15:54:47 +0000
ROA not before: Sun 01 Jan 2023 15:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 81.89.246.0/24 maxlen: 24
212.62.67.0/24 maxlen: 24
212.62.72.0/24 maxlen: 24
84.201.65.0/24 maxlen: 24
84.201.66.0/24 maxlen: 24
84.201.98.0/24 maxlen: 24
2a00:1348:10::/48 maxlen: 64
2a00:1348:11::/48 maxlen: 64
Validation: Failed, certificate revoked on Mon 19 Jun 2023 11:35:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0a:ec:0b:70:40:76:ac:f3:50:a8:eb:ee:47:8c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
Validity
Not Before: Jan 1 15:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a3a93cf62298c3c696f63e5e8c774d08f665389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5d:08:a6:e8:10:4e:8c:d1:d0:7d:b8:8c:4f:
92:e9:6d:85:18:f1:9d:90:d3:e7:1e:6c:a2:90:a0:
15:d6:7d:a7:76:51:3e:8c:dd:43:b2:13:e0:71:00:
2a:40:25:62:d9:f2:d5:27:24:d3:27:7a:32:ce:6a:
65:22:60:0c:8b:26:92:98:fb:8a:2c:2d:e3:52:c5:
d5:74:1b:08:f1:bc:57:db:5f:76:54:ec:fe:99:80:
0c:5b:9a:94:81:fa:af:29:31:07:13:34:7d:68:10:
98:ba:4c:3c:8d:36:17:81:28:3d:7f:cc:d0:34:54:
65:f4:bc:39:6f:40:32:b2:41:b5:49:24:90:1e:04:
01:7d:50:b9:d9:de:02:95:1e:50:be:fa:d2:60:f3:
cb:b5:ab:bd:28:35:50:f7:94:3b:fb:f7:9b:a0:43:
02:d3:93:fe:30:f1:b4:da:d9:dc:74:63:65:b8:d6:
f5:f6:03:11:55:24:10:56:35:9f:06:d5:44:b6:4b:
1d:d2:bd:6a:3a:47:e4:f6:b8:82:f5:d2:a6:0d:ee:
84:06:f7:01:7d:80:db:b4:dd:31:2a:8a:45:2b:c1:
80:34:c5:45:13:8f:90:c5:a8:0f:e7:4c:a9:23:de:
ef:40:cd:75:5e:5b:08:4e:30:f9:da:99:cc:82:71:
7b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3A:93:CF:62:29:8C:3C:69:6F:63:E5:E8:C7:74:D0:8F:66:53:89
X509v3 Authority Key Identifier:
keyid:9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/ejqTz2IpjDxpb2Pl6Md00I9mU4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.89.246.0/24
84.201.65.0-84.201.66.255
84.201.98.0/24
212.62.67.0/24
212.62.72.0/24
IPv6:
2a00:1348:10::/47
Signature Algorithm: sha256WithRSAEncryption
77:87:df:eb:f2:b0:45:24:c2:dd:3b:cb:d3:e4:62:a7:6c:63:
3d:42:f1:37:c1:29:c2:82:f3:6d:52:4c:3c:69:82:10:12:37:
09:24:39:bb:21:f6:70:58:ac:9e:1c:5d:b3:f3:48:c0:78:ea:
3f:b8:ea:70:c4:5a:cf:d5:68:bf:b7:8e:ea:fe:eb:c4:3f:a4:
ec:0a:8a:9e:01:4d:69:15:51:58:8d:c9:17:41:b6:fe:94:68:
c8:7f:3c:9c:c0:0e:b2:03:1e:45:f5:60:26:cd:fe:ee:c2:f0:
5f:2c:24:1d:8d:c7:9a:96:4a:1d:7f:2a:3f:2e:06:69:66:76:
4c:f7:1d:de:cf:0a:ff:23:0c:08:8f:5e:26:61:be:22:97:22:
15:02:10:a8:dc:c4:75:21:10:0f:e5:28:73:f1:34:4c:52:86:
0e:b1:30:d4:27:51:dd:ba:63:af:e7:4e:a6:1d:ad:27:31:5f:
39:6e:03:8b:b1:61:d0:bc:89:1d:ac:37:63:ae:25:de:9d:c1:
7e:61:62:ed:53:17:1e:08:79:f9:81:74:0b:f1:ba:d0:00:91:
93:af:d1:7c:8b:23:8f:01:0a:4c:22:b5:b1:6e:a5:4c:e3:b6:
1e:a1:dc:70:c3:83:e1:78:74:3a:87:61:63:fa:14:f6:96:64:
c2:88:6a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:22 2024 by rpki-client on console-fra.rpki-client.org