Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/EaMmYBRQX-ZLZX9M0njkKYa-gKI.roa
File: EaMmYBRQX-ZLZX9M0njkKYa-gKI.roa (raw, json)
Hash identifier: VZStVFR2MD/qJiHRjs+8bHaLCToXgqM52/3DZRTfHag=
Subject key identifier: 11:A3:26:60:14:50:5F:E6:4B:65:7F:4C:D2:78:E4:29:86:BE:80:A2
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 018DD45924FF2EB7EFE43DD6E04256FF3711
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/EaMmYBRQX-ZLZX9M0njkKYa-gKI.roa
Signing time: Fri 23 Feb 2024 05:03:48 +0000
ROA not before: Fri 23 Feb 2024 05:03:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136787
IP address blocks: 83.150.240.0/24 maxlen: 24
83.150.241.0/24 maxlen: 24
83.150.242.0/24 maxlen: 24
83.150.243.0/24 maxlen: 24
185.75.208.0/24 maxlen: 24
185.75.209.0/24 maxlen: 24
185.75.210.0/24 maxlen: 24
185.75.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 06:53:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d4:59:24:ff:2e:b7:ef:e4:3d:d6:e0:42:56:ff:37:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Feb 23 05:03:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11a3266014505fe64b657f4cd278e42986be80a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:65:ae:7f:cc:b9:ad:02:75:24:24:74:fa:e1:
24:19:9d:b4:84:12:41:92:f9:f2:fe:44:66:bb:10:
6d:00:e2:7f:1f:a6:ad:da:3e:06:cc:03:f9:a9:80:
27:0e:8e:ef:e9:11:2a:15:9b:fa:d9:a9:3f:9a:42:
b0:cf:a5:59:c7:b3:6a:56:7f:b2:6a:8a:c6:15:44:
d1:97:ed:14:29:f0:85:cb:26:e4:07:f7:00:70:43:
51:16:b0:f9:c5:cc:63:40:a4:7b:36:86:e6:f7:48:
e4:59:70:56:5f:0a:4e:aa:5e:1e:14:1a:91:6d:10:
c7:2a:6f:74:35:68:98:b1:e1:f6:10:cb:3f:24:6f:
ef:57:3f:39:06:41:2e:9e:30:17:e3:66:74:28:68:
7f:93:cb:b3:3e:08:de:1d:88:24:1a:0e:74:b0:1e:
a7:7c:ae:f7:5c:72:b0:6d:49:29:f4:63:9c:7f:5b:
dc:68:a8:18:b0:8d:cf:e4:01:64:5d:38:fa:7f:08:
2d:15:a4:85:19:0a:ce:af:a6:65:dc:5c:6d:4c:da:
95:df:84:f6:fa:90:e6:ff:ba:6f:d9:53:44:ba:28:
78:51:14:13:11:29:26:dd:e8:51:53:f3:64:8e:d8:
7f:15:72:3b:78:d2:c5:75:fc:8b:c6:36:03:03:c0:
9b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A3:26:60:14:50:5F:E6:4B:65:7F:4C:D2:78:E4:29:86:BE:80:A2
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/EaMmYBRQX-ZLZX9M0njkKYa-gKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.150.240.0/22
185.75.208.0/22
Signature Algorithm: sha256WithRSAEncryption
37:4e:cc:8a:3e:eb:6f:e1:e4:a3:84:10:cc:b8:db:88:47:e6:
75:d1:3b:a1:3c:39:cc:e3:74:ca:3c:32:5e:85:67:3b:bd:89:
b5:85:03:83:10:80:cd:cf:85:4a:3e:e1:a9:81:43:83:0f:31:
51:6e:87:2a:92:a8:75:bc:98:a3:fb:be:7f:75:9c:1f:2e:6d:
16:77:29:ec:51:95:e2:5a:b7:20:22:95:93:a5:dc:0d:09:07:
33:d9:17:c5:73:47:06:a4:40:09:12:74:ce:73:6b:b4:5d:b5:
19:2a:ee:50:d9:36:b2:ad:69:92:df:63:6f:a8:34:b4:ab:65:
8c:c1:3e:70:63:1f:b7:66:1b:24:5c:f6:de:4b:ba:a0:5c:57:
dc:95:cd:da:8e:0a:f4:ba:71:1b:e7:0a:06:9d:0b:ca:98:ce:
57:82:e8:72:c7:77:ff:4e:dc:2c:af:68:61:aa:6a:d8:21:7a:
85:82:5e:f4:e6:74:87:ae:82:5d:d4:6a:69:7e:52:8c:b5:0f:
bd:3c:2b:95:b1:10:c1:3e:c5:5d:f3:05:2a:93:93:3b:1b:f2:
8a:9f:ff:18:a4:7e:1f:ce:ae:50:d6:88:f7:c7:18:80:52:3c:
dd:bc:92:d0:cd:6c:1e:72:7c:f1:8c:84:81:f2:0f:64:fe:77:
b1:cf:d8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 10:45:49 2024 by rpki-client on console-fra.rpki-client.org