Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/2mKNdAYigRMWftVjZEPVELdi03c.roa
File: 2mKNdAYigRMWftVjZEPVELdi03c.roa (raw, json)
Hash identifier: U7CLvgBe+TzBaAIybhN6lUqnaeT0V5rNJfgoCOs6n/k=
Subject key identifier: DA:62:8D:74:06:22:81:13:16:7E:D5:63:64:43:D5:10:B7:62:D3:77
Certificate issuer: /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial: 018CC794A23DDF01D967C7A6D13BFFF44091
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/2mKNdAYigRMWftVjZEPVELdi03c.roa
Signing time: Tue 02 Jan 2024 00:30:55 +0000
ROA not before: Tue 02 Jan 2024 00:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41207
IP address blocks: 89.191.160.0/20 maxlen: 20
Validation: Failed, certificate revoked on Wed 14 Feb 2024 11:17:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:a2:3d:df:01:d9:67:c7:a6:d1:3b:ff:f4:40:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
Validity
Not Before: Jan 2 00:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da628d7406228113167ed5636443d510b762d377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:83:e6:b9:85:32:13:f0:b4:1c:13:6c:38:92:
ae:f6:66:64:9c:57:91:3b:bc:f7:a1:f7:cd:87:92:
61:5a:f3:5b:b6:4b:ad:f8:06:13:1c:b6:83:83:76:
03:6d:91:48:74:70:05:68:61:e0:19:38:c9:58:4d:
12:76:04:20:4d:d7:5c:9f:c1:bb:f9:c4:f9:1b:50:
ad:2b:e8:8b:af:1f:d7:d1:7b:61:14:44:a3:dd:3f:
ad:08:1e:04:c5:1d:af:00:b5:85:5f:b4:66:63:45:
b8:a9:20:97:ca:28:b5:5d:6f:3b:3e:9a:72:21:d4:
c9:ec:93:7b:8b:53:ee:b5:2e:38:0e:e4:27:77:b7:
7e:5b:6c:81:50:79:67:e0:38:74:68:27:d4:e6:9b:
54:61:bd:c8:a5:f5:f6:ec:ab:4f:89:dc:08:7e:9c:
a1:37:ea:d1:b4:e9:13:85:2a:98:51:f2:ed:65:0c:
90:29:c0:a7:8c:5e:3e:56:56:f2:30:b3:d2:2c:71:
4a:bb:05:33:d7:76:8f:8b:43:6e:7b:d7:2e:c5:bd:
fe:ed:f8:b9:22:51:4e:b5:ae:d8:6e:9d:1f:1d:41:
29:c5:87:a3:11:43:32:e7:66:f8:84:6a:3f:46:91:
6d:53:bc:68:a8:e1:ae:a5:32:01:15:04:b8:b0:d4:
95:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:62:8D:74:06:22:81:13:16:7E:D5:63:64:43:D5:10:B7:62:D3:77
X509v3 Authority Key Identifier:
keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/2mKNdAYigRMWftVjZEPVELdi03c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.191.160.0/20
Signature Algorithm: sha256WithRSAEncryption
3f:6d:8a:5c:4e:c8:a4:5c:f0:61:34:e7:9e:e7:4c:83:99:45:
e4:e9:cd:0e:7b:11:51:8d:e1:92:39:da:19:9f:ab:c7:e2:d8:
d3:7e:2b:f3:83:1e:8f:d8:a8:f8:e4:f5:5d:e0:b1:17:26:19:
80:4f:f8:ee:ad:b9:42:11:9b:93:f9:c1:c6:ce:da:1c:b8:17:
78:43:79:54:30:b6:6d:3e:ac:70:15:06:b5:e1:a0:1b:b0:3d:
09:ea:6f:b8:59:1c:93:54:57:8c:76:48:44:27:d4:f0:02:f8:
d9:09:f0:47:f7:39:25:5a:fa:11:6f:c0:f7:f1:11:41:a8:51:
05:6d:c2:06:87:22:66:c5:2d:9e:71:7c:19:bd:79:47:d1:ad:
0d:af:46:7d:82:61:78:96:e4:e2:68:1b:69:d1:bd:a3:36:fb:
e9:5b:be:08:81:65:ce:84:fd:a6:9f:0d:0f:1e:bb:80:b0:90:
ca:c0:20:19:23:fd:11:88:2a:e9:b5:f1:23:7a:52:2e:95:29:
75:ac:22:40:d3:aa:3a:d6:2f:07:d3:90:7c:04:5c:b5:9d:bb:
dd:8d:07:fb:74:fa:c7:a9:67:31:62:f4:02:67:de:31:57:ac:
51:2e:94:db:9d:c2:71:55:30:af:ae:ac:6c:03:b3:7c:83:63:
cb:1f:18:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 15:10:46 2024 by rpki-client on console-ams.rpki-client.org