Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/eMVjpUBc2h2L9HycdR1PD6yrfzw.roa
File: eMVjpUBc2h2L9HycdR1PD6yrfzw.roa (raw, json)
Hash identifier: WRbRlt369iq+QrpCyO1MCEWotm4Ti26i2uZKOtAWNII=
Subject key identifier: 78:C5:63:A5:40:5C:DA:1D:8B:F4:7C:9C:75:1D:4F:0F:AC:AB:7F:3C
Certificate issuer: /CN=70c9d06c51add6829063f1b67b175d0c0001e736
Certificate serial: 018ACB91B2548FA7198824CF2FABE129ABB2
Authority key identifier: 70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/eMVjpUBc2h2L9HycdR1PD6yrfzw.roa
Signing time: Mon 25 Sep 2023 09:00:37 +0000
ROA not before: Mon 25 Sep 2023 09:00:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216451
IP address blocks: 37.230.40.0/21 maxlen: 21
89.107.160.0/21 maxlen: 21
185.188.200.0/22 maxlen: 22
2a0b:2400::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cb:91:b2:54:8f:a7:19:88:24:cf:2f:ab:e1:29:ab:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c9d06c51add6829063f1b67b175d0c0001e736
Validity
Not Before: Sep 25 09:00:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78c563a5405cda1d8bf47c9c751d4f0facab7f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dc:1f:4a:16:da:79:79:e4:67:00:e4:f0:72:
a0:d8:e0:f9:12:d9:3a:71:56:ed:0a:5b:bf:0b:4b:
38:17:c8:72:62:05:94:97:92:63:b5:05:c0:99:fd:
42:12:63:ca:de:60:2d:57:01:5d:4e:d7:b4:05:4d:
f8:5e:78:9e:b5:10:85:30:7c:51:c7:be:b7:b1:3c:
64:1d:a6:7f:9c:8e:c9:3a:5a:b7:a1:b8:0f:54:a0:
fb:4a:9d:49:c6:49:c5:d0:04:ee:47:12:ef:3e:15:
0c:29:ba:f6:d2:0c:7a:2f:fd:1b:3b:d3:00:57:7c:
b3:c3:12:62:a2:df:73:c5:e8:1e:6d:89:df:7d:3f:
c4:3c:cc:ab:08:0b:59:4a:1c:cd:9f:ec:88:b3:60:
a1:47:88:a1:2b:16:d3:29:29:8a:0a:00:fe:84:ac:
66:7b:6e:e7:bd:77:1d:a3:86:50:5e:50:61:6e:4f:
ab:83:c0:33:f8:8b:2b:f7:d9:34:a6:34:90:ad:fd:
70:36:eb:e3:3e:d6:5d:cd:0d:ae:74:b7:c2:ae:6b:
b3:ef:c5:48:02:42:a8:c8:2e:5b:7c:8b:fa:1a:cc:
d9:26:62:8a:02:0e:19:d5:f0:2e:09:cb:a5:f1:c6:
58:c3:8c:40:f1:c1:83:93:6e:57:bb:f3:1f:20:be:
a6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C5:63:A5:40:5C:DA:1D:8B:F4:7C:9C:75:1D:4F:0F:AC:AB:7F:3C
X509v3 Authority Key Identifier:
keyid:70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/eMVjpUBc2h2L9HycdR1PD6yrfzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.40.0/21
89.107.160.0/21
185.188.200.0/22
IPv6:
2a0b:2400::/32
Signature Algorithm: sha256WithRSAEncryption
20:d6:09:54:c0:6b:bb:25:df:ea:9a:12:ea:ec:ba:6e:98:e8:
0f:cd:ba:f3:91:f0:fb:f6:0a:95:d5:f6:3d:0f:b7:37:9d:7d:
06:22:46:0f:bd:f1:8b:ae:de:b9:59:e2:5b:d7:71:6d:a6:3b:
c2:e6:a6:d3:c6:3c:7b:73:d3:1f:fc:7f:57:8f:4b:45:b4:bf:
cc:68:b0:31:30:77:2d:18:ee:b2:26:0c:5d:02:63:45:bc:f0:
de:2b:35:7d:6f:39:a7:a7:12:ba:cd:dd:24:b0:ef:bd:26:fa:
4d:8f:82:94:9b:0e:c6:e9:10:60:d6:1e:cb:d0:8a:cf:cd:11:
eb:f9:fe:42:eb:27:58:73:7a:e5:7d:ae:c5:86:c6:a2:a1:2f:
9f:4c:a0:7c:7f:d9:51:97:eb:90:2f:90:88:96:8c:95:3d:ea:
72:48:70:37:7b:e9:ba:8b:e1:25:54:77:64:b0:7f:8f:b0:d5:
45:4b:c9:2a:a1:0c:75:7d:60:03:8b:2e:f9:c5:da:75:a2:53:
88:f6:fc:8c:4f:2b:2e:14:d2:30:62:1f:39:b4:aa:42:4e:51:
4d:18:fd:bc:59:bc:02:0c:a4:9e:0a:0b:f6:33:a6:dc:ce:74:
ab:08:11:83:14:e9:b2:f6:3a:27:38:5b:20:eb:f6:6d:64:b2:
bf:e4:10:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:40 2024 by rpki-client on console-fra.rpki-client.org