Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/EtP2vIdyQy50WCfk3_Gxp0krEOU.roa
File: EtP2vIdyQy50WCfk3_Gxp0krEOU.roa (raw, json)
Hash identifier: w2jkSFD6Nf536X6a0xjQNZOBpNXMcAKGqcijFwqcw8U=
Subject key identifier: 12:D3:F6:BC:87:72:43:2E:74:58:27:E4:DF:F1:B1:A7:49:2B:10:E5
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 018DE4FC01E0EA4F92E3FA269016360C0EAA
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/EtP2vIdyQy50WCfk3_Gxp0krEOU.roa
Signing time: Mon 26 Feb 2024 10:35:37 +0000
ROA not before: Mon 26 Feb 2024 10:35:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213220
IP address blocks: 194.31.72.0/24 maxlen: 24
2a03:f7c0::/29 maxlen: 29
2a0c:5c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 06 May 2024 20:58:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e4:fc:01:e0:ea:4f:92:e3:fa:26:90:16:36:0c:0e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Feb 26 10:35:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12d3f6bc8772432e745827e4dff1b1a7492b10e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:70:5f:d6:19:47:78:ec:4e:db:60:a6:59:
cd:26:c8:30:71:02:86:ee:9a:5a:4c:9b:0f:1b:6a:
a7:ae:1a:ff:f5:59:aa:aa:10:76:64:5d:58:34:10:
4a:07:28:ee:44:46:a6:c2:f5:97:47:6d:27:d8:a8:
98:7a:b3:68:f7:10:e3:d7:5d:be:9a:12:97:f9:38:
07:80:75:bb:49:d3:83:94:2f:31:55:25:87:6a:7b:
31:04:1f:23:0e:cc:64:56:d3:3c:e5:b2:e0:47:28:
26:ec:e5:3a:21:f6:0f:51:e4:63:52:27:ca:56:1b:
4d:b5:5d:76:04:9f:64:61:55:6f:83:4c:b3:a7:07:
97:78:4d:bd:94:2c:fb:f8:9f:e9:02:b6:10:39:ed:
10:f6:a7:a8:a9:ce:7a:ee:f4:27:ee:1e:27:c6:b2:
02:11:ad:e0:14:42:2d:73:c4:85:63:a5:ba:b8:e4:
d5:7e:7a:c0:e4:24:50:79:06:c0:21:8e:7f:90:f0:
ea:e5:f2:6c:42:ae:20:44:c1:ce:2a:36:4b:87:1d:
29:fc:5e:d5:21:40:57:f8:56:32:8d:3c:31:58:d8:
d6:fc:94:33:c6:e4:68:43:a7:9d:8a:c2:85:16:98:
9d:9a:27:23:d7:f9:95:40:e9:74:aa:d2:51:2e:d4:
07:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D3:F6:BC:87:72:43:2E:74:58:27:E4:DF:F1:B1:A7:49:2B:10:E5
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/EtP2vIdyQy50WCfk3_Gxp0krEOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.72.0/24
IPv6:
2a03:f7c0::/29
2a0c:5c0::/29
Signature Algorithm: sha256WithRSAEncryption
00:4f:b2:e9:ae:44:8a:12:48:f1:0f:6e:87:08:ae:08:17:4c:
fb:89:62:b4:8d:ff:2b:4b:a4:37:3b:cc:36:77:85:47:e8:58:
21:3a:fc:ea:ea:a5:b8:6b:f2:fb:67:63:dc:9c:0b:05:e5:61:
a6:22:99:42:95:d2:44:73:f7:8e:e6:e8:12:0a:1a:5e:e9:55:
c9:06:b4:66:2c:13:1b:6d:6b:f6:97:13:87:e0:17:d1:9e:9c:
f3:40:6c:e6:ad:93:96:ce:cd:1c:69:17:6a:88:14:60:6f:08:
17:30:b1:58:50:4d:1d:e6:1d:cc:41:81:33:3b:cc:30:48:16:
99:a6:82:01:fb:41:c7:66:1c:b7:30:8b:c6:9d:4a:4a:fa:b8:
9d:28:4e:4c:a0:04:83:56:be:83:b3:fb:4f:78:a6:a3:d2:07:
c5:3d:04:a3:77:45:40:80:4e:22:2f:b3:86:92:dc:84:d0:d7:
07:2d:4f:d5:ea:7f:42:5d:1b:a8:b7:36:2f:b2:0b:e8:c1:86:
0c:0e:ea:27:06:27:6f:5d:c2:43:1d:a0:14:f3:87:ad:4e:fd:
00:d0:ca:94:bb:b8:e9:3f:dc:89:0b:55:b9:bb:3b:08:09:bc:
fe:60:d0:f6:6f:3e:a9:04:e3:95:f1:63:31:7a:2b:e3:7e:f7:
7f:a3:2b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:13 2024 by rpki-client on console-ams.rpki-client.org