Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/EDDu6jYOF1tOy3hhjkIRkgtyYVc.roa
File: EDDu6jYOF1tOy3hhjkIRkgtyYVc.roa (raw, json)
Hash identifier: 989CmQ7K+a+fydDEtJFWoWIvsEKumIpxqRd3x1J+iGA=
Subject key identifier: 10:30:EE:EA:36:0E:17:5B:4E:CB:78:61:8E:42:11:92:0B:72:61:57
Certificate issuer: /CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Certificate serial: 01856F42D1EE20EA734A1C5085BFC7A08679
Authority key identifier: 92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/EDDu6jYOF1tOy3hhjkIRkgtyYVc.roa
Signing time: Sun 01 Jan 2023 21:35:28 +0000
ROA not before: Sun 01 Jan 2023 21:35:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42282
IP address blocks: 45.143.60.0/24 maxlen: 24
45.143.61.0/24 maxlen: 24
2a0e:e2c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 26 Apr 2023 07:59:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:d1:ee:20:ea:73:4a:1c:50:85:bf:c7:a0:86:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Validity
Not Before: Jan 1 21:35:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1030eeea360e175b4ecb78618e4211920b726157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:05:be:d0:d0:22:22:a1:db:4b:7a:56:07:a2:
a5:e7:a4:35:32:8f:04:b0:49:b8:60:36:ab:65:57:
ec:28:6b:22:47:42:86:da:d7:ed:8a:9a:ba:2a:f4:
8d:35:a8:87:84:5a:68:ca:82:32:91:47:75:9d:0e:
53:64:72:c6:00:7e:0c:a5:42:69:98:57:a5:c1:01:
03:22:61:7c:83:a8:72:1d:ee:19:93:e8:ba:58:84:
23:76:05:93:84:75:ad:38:e9:d0:99:9f:e6:23:1e:
a1:d6:6a:49:a1:43:4c:25:e8:a4:c6:0c:d6:31:c9:
b6:29:2b:85:7d:0a:36:6e:49:5b:34:58:ed:ad:72:
5d:85:a7:bb:de:77:63:c6:c6:98:77:54:d3:9b:7c:
05:ad:db:e3:0b:c1:1b:6d:aa:4f:97:32:b8:25:9a:
30:bf:6a:3a:21:d5:bc:a6:e4:e5:18:38:66:f9:cd:
db:7d:4c:6e:7f:5c:76:34:ad:1a:7a:17:b7:94:79:
28:ba:55:9e:11:75:37:75:40:cb:a4:83:7e:82:17:
82:a5:77:5d:6e:3e:9f:99:65:5f:68:80:54:2b:d1:
3c:3c:95:5b:65:18:7a:2b:ff:e4:34:55:c9:03:91:
ab:45:06:a7:95:1b:eb:0d:b7:b9:ed:c8:38:7c:3a:
6d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:30:EE:EA:36:0E:17:5B:4E:CB:78:61:8E:42:11:92:0B:72:61:57
X509v3 Authority Key Identifier:
keyid:92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/EDDu6jYOF1tOy3hhjkIRkgtyYVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.60.0/23
IPv6:
2a0e:e2c0::/29
Signature Algorithm: sha256WithRSAEncryption
12:d2:a6:f6:62:cd:56:98:38:20:32:0b:6f:ec:39:24:68:c4:
e8:9b:ef:db:7c:45:bb:63:f8:21:be:e7:c6:84:22:ff:ac:4e:
ef:0d:8b:48:cb:aa:c1:90:5b:b1:5f:ec:96:b2:c6:a9:04:1d:
c7:88:5e:e9:45:08:40:d2:5c:69:2c:52:fd:31:7b:59:e9:dd:
f3:2b:c0:af:73:94:e9:4b:b2:8c:81:70:c6:15:9c:2d:01:ee:
3f:75:37:4a:3b:e7:c4:58:18:fd:4a:62:fd:51:85:a0:94:65:
a3:b5:68:00:af:da:34:a2:89:82:02:1c:0b:d4:7f:4c:b2:28:
02:d0:b4:79:b1:45:14:0f:d6:3b:67:cf:25:6f:a6:41:ad:8e:
83:67:ee:05:b3:e6:6f:e2:15:98:c7:dd:5c:f9:ce:72:28:b2:
f8:49:88:06:03:85:1e:7b:1a:c4:6a:f2:08:53:24:52:e5:4e:
8e:91:e1:91:9e:59:8b:a0:23:eb:dd:09:19:41:cb:39:f4:b2:
8c:c1:79:ea:38:2d:62:07:1f:5e:c8:01:2c:44:15:a7:04:5f:
e5:d8:50:6e:ca:a0:1d:3e:31:d9:6b:8d:f9:b8:32:43:39:37:
5a:46:d8:e6:20:fc:a5:f5:e5:cd:60:41:65:bb:0b:64:97:54:
be:cd:09:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:17 2024 by rpki-client on console-fra.rpki-client.org