Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/EA__DfDHztIaw1MHBH_9Tvvu6ps.roa
File: EA__DfDHztIaw1MHBH_9Tvvu6ps.roa (raw, json)
Hash identifier: y0cbPANljG7z1ujN2EFvDsvBnkT4iO1Rrb/NVdIGqH4=
Subject key identifier: 10:0F:FF:0D:F0:C7:CE:D2:1A:C3:53:07:04:7F:FD:4E:FB:EE:EA:9B
Certificate issuer: /CN=1534838bb317b8186699f0a4485db6d9da1908d2
Certificate serial: 01856F5DB1B1279887925EA1562FC9DA444B
Authority key identifier: 15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/EA__DfDHztIaw1MHBH_9Tvvu6ps.roa
Signing time: Sun 01 Jan 2023 22:04:49 +0000
ROA not before: Sun 01 Jan 2023 22:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51966
IP address blocks: 194.0.23.0/24 maxlen: 24
2001:678:1b::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:b1:b1:27:98:87:92:5e:a1:56:2f:c9:da:44:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1534838bb317b8186699f0a4485db6d9da1908d2
Validity
Not Before: Jan 1 22:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=100fff0df0c7ced21ac35307047ffd4efbeeea9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6d:d0:ef:ad:b0:9c:60:a4:19:2e:aa:1f:37:
fc:e9:e6:83:ca:66:14:88:ed:f5:98:25:9b:81:f4:
d6:9c:96:19:02:40:42:e5:02:13:2a:28:4c:4c:c9:
46:51:b4:0e:b8:67:24:bc:f2:6c:40:6a:dc:47:66:
7b:4c:89:39:9f:d9:05:0f:76:ea:25:78:48:17:d5:
a5:3d:98:e3:d9:31:1f:12:c6:94:3d:72:98:07:d9:
d4:86:05:4a:21:4d:5d:be:f5:76:05:8a:f6:38:3d:
a9:be:ef:70:37:3f:ed:f7:1a:15:77:59:16:b8:da:
8c:85:0f:c1:59:c0:58:3d:0d:53:f9:30:3d:58:53:
08:d3:ac:5a:22:fd:bf:70:3a:26:69:f6:89:06:88:
1d:42:49:a2:81:8d:78:09:69:64:0f:64:8a:42:cb:
61:6b:fc:77:b8:d2:da:10:8c:9a:7f:4d:c5:fe:2f:
4e:55:27:cc:11:b7:05:2a:15:bd:d3:52:92:a2:47:
65:5d:34:52:17:73:4b:4e:0c:19:4c:44:86:c0:46:
c9:1d:03:b3:68:9b:b3:69:a4:9d:49:65:d1:53:f2:
f0:0c:80:08:ad:a6:a5:62:41:31:90:79:71:01:f3:
03:fa:a4:6a:47:72:df:5f:7e:6e:c6:47:83:36:52:
c5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0F:FF:0D:F0:C7:CE:D2:1A:C3:53:07:04:7F:FD:4E:FB:EE:EA:9B
X509v3 Authority Key Identifier:
keyid:15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/EA__DfDHztIaw1MHBH_9Tvvu6ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.23.0/24
IPv6:
2001:678:1b::/48
Signature Algorithm: sha256WithRSAEncryption
6b:fb:d2:5b:cf:cb:f6:d4:80:37:65:aa:7b:8c:b7:29:38:cb:
23:de:f3:9e:0b:92:8c:bb:8b:36:65:62:02:8d:59:78:6a:9d:
cb:b6:44:4f:e2:c0:ed:21:de:7a:5a:ee:6f:4e:1b:2f:dd:ee:
1e:72:38:ac:af:63:1b:00:06:56:32:7d:dc:98:1f:32:bc:27:
ba:58:22:ed:2f:4e:29:17:df:49:83:7c:1f:2f:94:f8:2f:83:
13:2e:37:3d:f1:55:d0:d8:83:41:ea:09:66:96:9a:be:93:e9:
3c:84:ad:57:80:e5:b0:7d:99:ef:f1:2e:58:10:3c:20:a5:1e:
7e:68:16:06:77:dd:cd:40:c1:36:8a:ff:2b:86:c7:c9:ea:0f:
b1:6d:7c:9c:f3:22:9b:26:70:46:ce:79:0e:f6:64:31:7f:d0:
fe:e0:01:3e:5e:d2:ab:b9:93:6d:19:73:e1:23:b7:f6:aa:b1:
b9:89:7c:0a:1e:4e:85:f6:5b:23:8a:97:1a:87:0e:70:5f:a3:
dc:c0:4d:bd:fa:b6:1d:61:a8:f1:5e:fb:88:5d:3b:42:cb:4e:
1e:89:f4:0c:3b:91:f5:30:c0:fe:9e:0c:67:72:49:08:40:e6:
47:1c:93:0f:2e:56:db:5b:ed:a1:b9:6a:b4:70:b6:9b:31:34:
84:95:9b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:23 2024 by rpki-client on console-ams.rpki-client.org