Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/jeRDQw9p8wS7WE3iF56HBIwp61k.roa
File: jeRDQw9p8wS7WE3iF56HBIwp61k.roa (raw, json)
Hash identifier: EHybd0kDPiIqbRayOgybQ+jTgDB/WUd6MHOCxqWySlU=
Subject key identifier: 8D:E4:43:43:0F:69:F3:04:BB:58:4D:E2:17:9E:87:04:8C:29:EB:59
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 018573682C72F014E92DD5421E241F8462DE
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/jeRDQw9p8wS7WE3iF56HBIwp61k.roa
Signing time: Mon 02 Jan 2023 16:54:45 +0000
ROA not before: Mon 02 Jan 2023 16:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6584
IP address blocks: 194.69.96.0/19 maxlen: 19
194.69.96.0/22 maxlen: 24
194.69.100.0/22 maxlen: 22
194.69.126.0/23 maxlen: 24
2a01:110:8012::/48 maxlen: 48
2a01:110::/32 maxlen: 32
2a01:110:e050::/48 maxlen: 48
2a01:110:8008::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:68:2c:72:f0:14:e9:2d:d5:42:1e:24:1f:84:62:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Jan 2 16:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8de443430f69f304bb584de2179e87048c29eb59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5a:ff:57:0a:35:dc:88:b3:4e:0f:4b:c9:af:
7e:c6:5b:a0:ef:d7:e2:a8:49:0f:2e:e6:08:82:39:
13:cd:50:07:7c:78:2b:13:d5:06:24:83:fc:de:7f:
e4:de:14:c9:ad:c4:ae:f3:de:67:50:32:dc:fa:e1:
1e:34:3e:98:dd:cd:e2:02:ef:6d:10:84:39:00:29:
b3:44:19:aa:1b:7e:71:b6:42:37:14:a2:5b:fb:25:
33:fb:c7:e3:3a:52:09:0f:72:05:1c:73:ce:56:58:
3b:c6:70:ef:3c:52:5d:32:4e:20:00:6d:21:de:80:
a2:88:80:b8:0e:77:23:1e:7c:a7:3f:40:7c:4c:f5:
5b:3d:8a:ee:e1:f5:29:d8:b2:91:2d:34:4c:c5:64:
35:66:ef:71:6b:7e:3b:7e:6b:5d:9a:17:4a:38:72:
c1:1e:a3:ff:d7:53:0d:c3:02:6a:e4:e3:33:ab:4a:
67:3b:03:a0:0a:2a:a3:ae:4f:f9:26:45:85:f1:a5:
3b:0d:17:6b:af:86:b3:a9:10:6d:21:a4:df:ef:0d:
aa:27:e0:1c:60:fb:6c:8d:43:13:59:2a:bc:26:4e:
f0:82:d5:bb:31:b9:91:38:fa:c2:4d:bc:7f:44:61:
e9:fe:16:7d:d4:9d:14:8c:ed:ae:24:dd:12:aa:c1:
31:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E4:43:43:0F:69:F3:04:BB:58:4D:E2:17:9E:87:04:8C:29:EB:59
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/jeRDQw9p8wS7WE3iF56HBIwp61k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.96.0/19
IPv6:
2a01:110::/32
Signature Algorithm: sha256WithRSAEncryption
5d:89:f6:2e:97:2a:36:78:2c:f7:ec:44:85:9a:ac:a3:92:f5:
92:dd:8d:eb:90:3f:39:36:b8:92:22:8a:61:de:65:5d:ed:1b:
09:19:15:f7:a7:e4:c1:1f:fb:89:22:1a:53:6e:2d:f1:88:78:
73:7b:6a:c9:4e:14:b2:3b:17:c5:0b:ab:ff:e8:dc:fd:1a:70:
df:24:f2:45:29:e2:68:4e:ec:70:2e:07:a9:2e:5e:47:66:36:
95:3d:fc:c5:5f:9d:93:78:95:9c:41:c2:ea:41:07:81:34:76:
22:eb:05:cf:e2:89:5b:76:98:60:73:d8:c8:50:09:ed:23:b5:
c3:b0:64:4b:43:ef:f0:4c:00:c0:7c:67:94:cd:ca:6f:6f:67:
94:fe:d2:ec:2b:22:de:f4:3e:a1:66:9f:01:c5:e3:7d:91:81:
bb:6f:4a:ae:e4:84:ad:60:a6:53:e3:9e:b6:f1:93:ba:e7:23:
43:d6:fb:13:22:d5:3b:5a:84:d6:30:bb:73:4e:82:35:ad:1d:
17:ce:98:70:61:aa:d5:7e:ef:17:91:db:08:72:f8:f5:c2:84:
3e:5f:92:a3:76:94:cb:fe:a7:7b:5d:73:bf:28:ea:82:20:07:
dc:e2:36:42:fd:ee:9d:a9:cd:22:e2:2d:70:ab:bd:da:69:84:
72:7c:37:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org