Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/eB569W8uonAZFwepkJcNg9ooyms.roa
File: eB569W8uonAZFwepkJcNg9ooyms.roa (raw, json)
Hash identifier: UockquYXna1t2vis2Rq65bwsE9QAuPHe/2VAC3aqNvo=
Subject key identifier: 78:1E:7A:F5:6F:2E:A2:70:19:17:07:A9:90:97:0D:83:DA:28:CA:6B
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 01856EB8E209A6FB9B0E0471701C52E41D3C
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/eB569W8uonAZFwepkJcNg9ooyms.roa
Signing time: Sun 01 Jan 2023 19:04:48 +0000
ROA not before: Sun 01 Jan 2023 19:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25052
IP address blocks: 83.229.80.0/24 maxlen: 24
83.229.81.0/24 maxlen: 24
31.133.101.0/24 maxlen: 24
185.162.127.0/24 maxlen: 24
109.207.77.0/24 maxlen: 24
109.207.78.0/24 maxlen: 24
185.220.206.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b8:e2:09:a6:fb:9b:0e:04:71:70:1c:52:e4:1d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Jan 1 19:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=781e7af56f2ea270191707a990970d83da28ca6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d5:4a:92:be:29:96:8a:f3:8a:46:09:35:9f:
1a:9e:8c:7f:20:df:9a:6c:12:8d:84:b3:7b:bb:2e:
7d:89:39:6d:60:02:27:d0:cc:5b:84:75:97:31:e2:
ff:9d:81:93:d8:1d:6d:28:0a:21:2d:c3:a1:ae:ee:
ec:63:dd:84:76:f4:e0:13:02:9e:f4:db:d0:79:63:
c2:48:81:3b:92:75:d2:a5:3a:09:05:0a:da:49:fa:
9e:02:c1:e4:de:0f:23:51:8c:16:76:3c:0d:b5:12:
ab:89:75:f3:f9:cb:46:54:21:61:32:13:42:fc:b5:
2c:32:2d:e2:4c:e3:32:0f:6e:59:06:71:49:a4:cd:
26:e4:ad:f4:da:55:a9:f1:05:fe:3f:34:97:73:8b:
cc:4a:a5:5e:61:38:72:7d:55:82:50:43:06:eb:0e:
59:6c:f1:db:69:4a:9f:0e:14:45:b2:ad:c4:5f:ce:
7f:89:ca:ff:53:34:43:78:9e:ac:2a:06:c1:0e:24:
5d:bd:61:3e:15:10:68:bc:6c:3f:60:e8:9a:28:61:
88:14:6d:2c:06:3d:3f:64:cb:8f:02:00:a1:d8:6f:
1c:6b:ac:aa:e2:df:3d:f0:d8:e2:43:92:f9:2e:c8:
0c:a6:60:18:fb:0b:a2:4a:f1:17:08:97:d1:c0:26:
30:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1E:7A:F5:6F:2E:A2:70:19:17:07:A9:90:97:0D:83:DA:28:CA:6B
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/eB569W8uonAZFwepkJcNg9ooyms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.101.0/24
83.229.80.0/23
109.207.77.0-109.207.78.255
185.162.127.0/24
185.220.206.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:2e:0f:61:ee:a0:17:c2:28:12:d8:13:f8:36:5c:e2:47:c9:
c7:76:ed:7d:98:73:66:e5:13:f7:a2:48:c5:93:aa:81:41:e0:
66:61:4d:eb:a4:a9:38:8e:3b:a3:82:8d:1c:49:25:d2:05:18:
c7:31:ba:2c:78:b1:a4:90:c8:30:33:a8:e2:49:38:0f:e8:cb:
a9:c2:1b:39:f3:16:27:a5:03:e8:1c:64:1d:b0:21:c2:df:b1:
4d:67:01:9e:34:d3:c6:86:8a:0a:89:48:24:35:c4:16:ec:6f:
bf:90:f6:66:7c:99:1f:72:f0:67:b1:77:b9:39:d8:c0:ef:8b:
87:a4:3c:5a:a0:3b:bd:a8:46:60:34:9a:1a:12:3a:73:c1:7e:
4e:41:8d:e7:75:4d:4e:e0:d0:19:62:93:38:ca:97:01:85:4d:
f6:5c:15:4e:98:0e:a8:02:bf:02:88:02:d0:5d:f1:f3:97:39:
86:cf:e5:28:15:27:1f:cf:eb:51:10:c4:85:3e:73:27:d3:3a:
3e:66:68:46:f9:bc:20:6c:18:d3:3f:d9:14:5f:05:05:17:67:
14:2b:dc:a6:5c:1e:61:ec:35:9d:10:cc:be:cf:ec:f6:af:b2:
ed:ac:85:ae:e6:2a:43:4f:7b:eb:ff:98:d1:e6:5d:1c:ad:66:
62:2b:ae:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:48 2024 by rpki-client on console-fra.rpki-client.org