Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/eiCoZJ1V00613ubseCGUM9UAeX8.roa
File: eiCoZJ1V00613ubseCGUM9UAeX8.roa (raw, json)
Hash identifier: a7gxk/vTd1YQtR6Rz2TnABxBf1gyeQt8HLGehyPFLz4=
Subject key identifier: 7A:20:A8:64:9D:55:D3:4E:B5:DE:E6:EC:78:21:94:33:D5:00:79:7F
Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial: 018871A5CF66CE9DCD99FA7039FB4855F126
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/eiCoZJ1V00613ubseCGUM9UAeX8.roa
Signing time: Wed 31 May 2023 11:51:11 +0000
ROA not before: Wed 31 May 2023 11:51:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202391
IP address blocks: 46.34.160.0/22 maxlen: 24
89.47.201.0/24 maxlen: 24
89.47.200.0/22 maxlen: 24
89.47.200.0/24 maxlen: 24
89.47.202.0/24 maxlen: 24
89.42.196.0/22 maxlen: 24
89.42.196.0/24 maxlen: 24
89.42.136.0/22 maxlen: 24
92.114.51.0/24 maxlen: 24
92.114.48.0/24 maxlen: 24
92.114.50.0/24 maxlen: 24
92.114.49.0/24 maxlen: 24
89.47.196.0/22 maxlen: 24
89.47.197.0/24 maxlen: 24
89.47.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Jun 2023 07:26:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:a5:cf:66:ce:9d:cd:99:fa:70:39:fb:48:55:f1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Validity
Not Before: May 31 11:51:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a20a8649d55d34eb5dee6ec78219433d500797f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0d:60:67:e9:5b:9f:73:06:ff:50:48:bc:b0:
94:71:76:fc:94:1f:b6:f4:8e:0b:cf:b9:7b:ab:f9:
12:3e:22:26:f8:41:59:d2:04:4d:2c:81:0e:53:dd:
7f:46:e1:1a:34:bf:30:ce:64:38:98:35:e6:8d:51:
c9:9b:3d:4a:89:26:8b:65:03:a4:2d:b0:7d:05:cc:
10:a3:56:f4:83:b3:0b:b0:73:41:05:df:cd:dd:42:
d3:4c:2e:ad:31:4c:4d:b5:34:80:03:58:d4:2d:2d:
fe:31:d9:02:91:31:d1:8a:3c:d1:fb:38:a2:1f:84:
78:09:f5:cf:38:1a:77:77:1a:d5:26:1c:30:0f:29:
39:b1:78:97:b2:aa:d3:36:52:7e:93:6b:7e:a5:90:
76:c0:88:ef:84:9b:f9:21:31:38:11:94:53:cf:93:
23:7c:7f:b0:d5:f9:3b:e0:fe:90:3c:68:9f:32:bd:
6c:22:17:78:c7:64:50:64:b3:1a:2b:0a:46:d3:61:
be:17:5b:c9:24:77:1d:1b:b0:c0:b1:69:db:c8:eb:
a7:ac:51:b8:bb:b1:d3:19:73:e2:63:ce:91:90:4e:
64:3c:e0:50:a0:0b:52:82:ed:ea:2b:32:f2:d1:66:
12:94:28:bd:85:4a:55:4f:18:0b:48:61:16:b0:1d:
1a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:20:A8:64:9D:55:D3:4E:B5:DE:E6:EC:78:21:94:33:D5:00:79:7F
X509v3 Authority Key Identifier:
keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/eiCoZJ1V00613ubseCGUM9UAeX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.160.0/22
89.42.136.0/22
89.42.196.0/22
89.47.196.0-89.47.203.255
92.114.48.0/22
Signature Algorithm: sha256WithRSAEncryption
18:c9:a9:3b:88:80:29:a9:30:bb:82:2c:11:bc:68:de:f7:7b:
6b:7f:1a:46:5e:3b:1c:30:14:38:02:a4:51:4e:54:60:19:3b:
4a:fc:a6:51:90:83:01:7a:35:6b:7e:27:3e:08:07:0e:da:c9:
5d:ac:a1:f7:bc:5e:b4:58:c5:56:9e:86:63:12:8c:c2:d3:49:
19:0c:97:5e:6a:81:3c:ed:33:93:93:cf:43:28:37:47:2f:b8:
c2:e0:09:e5:c1:56:8e:bc:7d:22:15:5d:31:ad:fe:e4:95:98:
42:21:fe:d3:13:fd:37:f1:92:2d:f9:92:78:6a:b7:0f:cf:0e:
b0:b6:70:43:89:80:e4:4e:02:7a:d8:88:1f:a6:03:12:e5:88:
aa:15:ba:2f:02:ce:7b:ff:69:c5:41:6d:02:d2:22:08:81:6e:
22:1f:43:2b:80:f8:38:00:24:7e:57:d0:35:93:c0:04:9c:3f:
86:6a:9f:cd:78:c8:36:a1:a6:27:b5:9c:2f:2d:cd:c5:36:ad:
0d:df:d8:af:9d:ee:17:11:6b:5f:0c:a9:f0:ff:20:34:eb:09:
ca:cf:4a:da:db:84:69:f3:19:7b:45:b9:99:d4:50:b7:90:be:
6a:a9:bb:eb:31:42:f2:dd:8b:bd:34:4b:f5:91:d9:8c:e8:c9:
0d:dc:31:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:27 2024 by rpki-client on console-ams.rpki-client.org