Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/eITXWYh_hm0DIsIqNrR5rF5Z88o.roa
File: eITXWYh_hm0DIsIqNrR5rF5Z88o.roa (raw, json)
Hash identifier: 1mC5v8tMybatvcD9jFDUkQTtGmQ86Zgc74tXXEZsaE0=
Subject key identifier: 78:84:D7:59:88:7F:86:6D:03:22:C2:2A:36:B4:79:AC:5E:59:F3:CA
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 01914C531A84B66A2288B7E32659CA34072B
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/eITXWYh_hm0DIsIqNrR5rF5Z88o.roa
Signing time: Tue 13 Aug 2024 15:20:00 +0000
ROA not before: Tue 13 Aug 2024 15:20:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58330
IP address blocks: 194.32.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 06:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4c:53:1a:84:b6:6a:22:88:b7:e3:26:59:ca:34:07:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Aug 13 15:20:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7884d759887f866d0322c22a36b479ac5e59f3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d4:72:9b:9b:0a:96:0c:f1:f5:5f:99:41:34:
87:6e:a8:72:32:24:06:30:86:dd:5d:20:ac:ca:1c:
77:45:01:61:d3:8d:ab:77:40:d8:64:68:ff:1c:8c:
c6:eb:6b:82:f0:62:b5:a9:cf:31:eb:28:e6:94:cd:
db:50:db:3e:1c:92:7a:b2:b2:c9:82:39:1a:a7:49:
a9:a4:06:17:db:cf:3e:df:95:1c:cf:e9:2d:b8:26:
07:9a:22:ea:c9:d8:1a:63:28:9b:2b:dc:6a:42:18:
58:da:3f:df:55:12:4d:e4:24:d2:6e:a7:52:93:08:
f2:f2:c7:a9:bd:ff:87:0b:ec:96:70:40:b6:fb:23:
4b:2b:73:12:35:46:64:70:6f:c9:b5:d3:55:17:6e:
91:72:37:cc:cc:c1:67:73:03:a0:d6:e9:01:51:ca:
20:55:03:cf:4f:0f:cf:a4:ac:75:73:b6:39:19:82:
cd:12:98:86:4f:07:d0:7f:0c:3c:bb:cf:11:06:2b:
1d:e5:11:f9:a0:d7:f1:c6:9c:4d:4a:51:a0:de:a4:
f9:35:ca:63:04:81:e2:1b:3c:d0:00:f6:3b:06:53:
1f:98:5c:58:89:ba:d2:ac:5c:01:95:4f:0f:99:80:
c2:fb:d5:19:26:a1:fa:0f:24:dd:3c:55:11:6e:da:
dd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:84:D7:59:88:7F:86:6D:03:22:C2:2A:36:B4:79:AC:5E:59:F3:CA
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/eITXWYh_hm0DIsIqNrR5rF5Z88o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.99.0/24
Signature Algorithm: sha256WithRSAEncryption
89:b6:c2:5d:22:50:98:81:40:c9:5b:62:0c:1c:ec:58:bc:92:
e5:42:ed:e3:3a:26:82:72:c0:ee:a8:16:c3:73:e0:00:5d:ec:
12:a8:32:d7:50:52:83:89:e2:e9:12:57:30:21:7d:3c:92:68:
07:1a:d9:7a:6b:7b:c0:f4:73:df:7d:fc:b9:21:d5:69:84:fc:
e1:32:89:6a:6b:32:26:63:03:80:46:f9:f8:56:d3:4b:06:a1:
73:08:7f:a6:c9:ee:85:ad:6b:fb:d4:2f:c8:30:76:1d:4d:92:
e6:bc:74:46:ed:c2:64:18:40:a1:ee:14:42:cd:e8:39:3d:cd:
41:c3:95:83:a6:bb:2b:99:44:23:8f:75:39:4e:13:63:69:cd:
f6:bc:77:8f:38:9d:d3:1c:b3:37:36:39:d8:79:a5:40:45:64:
ca:b5:1d:e4:24:a8:f2:ef:be:26:d6:08:ce:f1:00:13:f9:ea:
eb:75:e6:f8:08:a6:97:1c:b7:41:5c:ce:07:b2:3a:0f:72:5d:
17:97:1e:2e:e3:38:c3:3e:dc:18:b7:34:9e:ca:71:81:fb:3c:
a3:f3:94:3b:c0:26:85:3d:65:48:8a:d9:78:3f:64:3f:02:8e:
9d:34:9c:7c:5c:66:7b:8c:9b:20:10:75:47:83:ca:b6:23:bb:
8c:47:5d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 09:02:43 2024 by rpki-client on console-ams.rpki-client.org