Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/EWiZLiDQhRxXQY2HBwP8euvqD6I.roa
File: EWiZLiDQhRxXQY2HBwP8euvqD6I.roa (raw, json)
Hash identifier: h++xambgkjuyACS0aGrD9GRVEeIRj3sYKtFK7kLuAAI=
Subject key identifier: 11:68:99:2E:20:D0:85:1C:57:41:8D:87:07:03:FC:7A:EB:EA:0F:A2
Certificate issuer: /CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb
Certificate serial: 0188298B9C4445A1AFE793B219D2B957C287
Authority key identifier: B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/EWiZLiDQhRxXQY2HBwP8euvqD6I.roa
Signing time: Wed 17 May 2023 11:49:55 +0000
ROA not before: Wed 17 May 2023 11:49:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 85.158.232.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:29:8b:9c:44:45:a1:af:e7:93:b2:19:d2:b9:57:c2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb
Validity
Not Before: May 17 11:49:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1168992e20d0851c57418d870703fc7aebea0fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:da:a8:6b:80:6d:b5:64:ad:7b:8b:6d:7d:ae:
3b:e0:16:a9:f7:a3:88:01:f3:c7:57:99:72:2b:15:
48:58:e3:ea:80:3a:30:ee:94:87:1c:89:80:cb:d3:
ef:77:e2:a5:70:1a:9b:7e:3f:5a:24:50:65:6c:47:
fb:b9:00:ff:04:aa:41:3f:de:d2:31:fd:40:98:fd:
33:52:d7:e1:28:1a:27:c4:39:d3:1b:8c:90:31:9e:
e7:70:0e:9a:00:50:31:35:a9:dd:96:3d:88:f9:10:
59:44:7a:f3:51:91:aa:b1:2a:f7:79:90:bd:b8:a3:
f5:a4:10:88:31:ee:c8:26:0b:62:d6:f7:96:30:48:
ad:47:7e:a5:2a:f4:6e:ab:fa:ec:3a:53:44:32:8c:
f5:76:92:2c:07:ad:29:7f:b7:32:36:e9:8c:77:b0:
18:33:dd:b9:a6:e3:98:e1:39:ab:46:fb:9b:cc:90:
22:ef:fc:92:4a:a8:c1:57:ef:81:8f:e7:af:43:2c:
0a:3d:61:aa:26:d0:ca:f1:4b:47:24:f5:79:c4:04:
9f:a9:f9:71:39:17:07:e2:3e:67:f4:4b:4a:9c:8f:
5d:ce:ea:3f:fe:c5:2c:a1:c3:66:02:4b:19:01:2b:
5c:6a:5e:7d:de:f2:6c:cc:b6:9c:20:96:05:96:9c:
5c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:68:99:2E:20:D0:85:1C:57:41:8D:87:07:03:FC:7A:EB:EA:0F:A2
X509v3 Authority Key Identifier:
keyid:B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/EWiZLiDQhRxXQY2HBwP8euvqD6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.232.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:c2:05:16:36:9b:39:87:4d:60:99:9e:76:84:14:b9:44:2a:
62:a2:ff:fb:46:67:57:83:df:f1:82:e4:2b:85:b4:38:c8:87:
c0:cf:b7:b4:c3:0c:0e:91:d1:93:e3:18:61:f3:c8:ff:db:fc:
1c:39:c4:99:db:6c:59:c1:74:b4:0a:d8:b5:98:77:94:12:14:
9d:d2:36:e5:23:2c:fb:1e:88:aa:6d:7f:17:b9:45:84:8a:3e:
1c:73:97:a9:76:a7:f5:dd:f0:27:13:d5:b8:5d:5f:1e:35:6b:
37:3a:e2:82:a8:7e:4d:5d:e3:08:73:7d:f3:1e:f4:62:ec:29:
f8:55:82:09:ee:9c:98:87:ac:cb:6c:c4:22:08:59:dd:ec:91:
28:58:ea:ea:6c:fa:79:2b:02:52:fe:84:89:86:6f:39:20:5f:
4f:81:c9:4b:35:8f:0d:6c:e5:b1:37:30:e2:d0:71:ea:fa:38:
73:fa:f3:b5:27:dc:b3:e3:b6:6d:2e:18:e3:fc:9d:c6:1a:cd:
02:86:74:90:e7:df:17:47:2b:19:f7:41:9c:72:eb:10:43:22:
66:a4:30:0d:60:75:2f:83:17:f3:4d:ae:39:b8:ed:05:9c:c6:
bf:6e:0b:4b:01:1e:0d:24:3b:41:32:63:83:a5:ca:eb:28:ee:
e9:76:4a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:16 2024 by rpki-client on console-fra.rpki-client.org