Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/EKHMwgehOtawUgP7KLApjcUf6J4.roa
File: EKHMwgehOtawUgP7KLApjcUf6J4.roa (raw, json)
Hash identifier: kfmX4ipx2/TKqKPwlk2yJ3icY1AgJjl5hLd26POB/0g=
Subject key identifier: 10:A1:CC:C2:07:A1:3A:D6:B0:52:03:FB:28:B0:29:8D:C5:1F:E8:9E
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 018958AF52156846CC81CD9B8C168E962024
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/EKHMwgehOtawUgP7KLApjcUf6J4.roa
Signing time: Sat 15 Jul 2023 08:33:51 +0000
ROA not before: Sat 15 Jul 2023 08:33:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 213.145.88.0/24 maxlen: 24
213.145.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jul 2023 19:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:58:af:52:15:68:46:cc:81:cd:9b:8c:16:8e:96:20:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jul 15 08:33:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10a1ccc207a13ad6b05203fb28b0298dc51fe89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:42:48:22:18:8e:8f:73:21:ac:c4:73:32:5d:
94:01:bf:bf:82:c3:ac:27:f9:0a:1b:63:fe:fe:c5:
f2:bf:f9:f7:7c:e7:e2:1b:9f:f1:26:58:2d:fc:59:
69:b7:0d:a5:87:fe:ee:61:06:55:2e:5e:bd:65:a7:
31:7b:1d:e0:24:20:85:95:6f:ef:99:b0:e5:d2:35:
80:70:ee:46:51:28:81:78:38:ff:c3:92:d6:79:04:
93:31:80:95:c5:f9:45:a6:64:81:c4:06:0c:70:96:
dd:63:ee:c8:88:69:bb:65:36:4b:96:db:24:21:bc:
7f:e6:0a:45:2f:b5:46:e6:e4:4a:60:65:4b:c7:e6:
d9:d2:ef:75:ff:eb:e8:12:59:ab:59:d6:51:99:39:
80:b7:ff:94:12:ee:5d:81:69:b3:fa:6f:e8:9c:ec:
d0:d1:f5:89:4a:06:00:a5:e4:ad:24:a9:25:e4:43:
ed:70:57:94:da:87:c3:77:6c:f0:b6:1b:c0:b1:4c:
a1:e8:53:d7:d3:1a:05:65:77:a1:dd:07:74:d9:ad:
1a:78:8a:7d:b3:ea:22:43:ee:91:40:5d:02:b9:d4:
c1:40:96:7e:30:8a:3d:83:f6:44:4a:6f:31:5e:cf:
82:a7:04:09:46:d6:3a:e8:24:01:82:f3:76:8c:2a:
f1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A1:CC:C2:07:A1:3A:D6:B0:52:03:FB:28:B0:29:8D:C5:1F:E8:9E
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/EKHMwgehOtawUgP7KLApjcUf6J4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.88.0/24
213.145.95.0/24
Signature Algorithm: sha256WithRSAEncryption
e0:c5:59:4b:7b:43:90:82:b7:2d:43:41:5c:8f:55:ea:83:67:
6b:69:e3:e9:c7:bf:e1:59:9d:df:73:34:c0:a1:20:39:46:ff:
b0:fc:7c:2b:23:5e:e2:d5:87:8e:4c:6a:77:12:71:96:50:09:
19:57:9b:2e:c8:da:af:14:0d:84:85:8b:3a:7a:e4:28:9c:65:
9f:f7:06:33:e7:07:ad:3f:e1:07:02:46:03:9e:53:c1:8d:c3:
c7:eb:da:3c:c9:f6:79:e1:15:da:6b:50:01:6c:71:f0:b5:0c:
f5:d0:5b:2d:26:11:e5:a8:92:df:c2:7d:da:46:f2:a9:93:69:
ed:2c:dc:a0:6d:f0:fb:90:f3:27:c6:97:11:e4:52:89:4e:c2:
28:29:59:f9:e2:59:a1:61:2c:1e:8f:4d:af:29:6b:aa:0c:57:
d4:dc:36:ec:9c:05:fd:4b:91:62:77:0b:6b:38:9d:39:6f:7e:
57:51:2e:fc:d2:d0:a4:07:82:54:6b:2f:0e:ff:77:e2:91:c0:
84:1f:56:c5:b8:bd:19:70:4e:59:09:8b:ff:68:83:c1:71:8d:
e0:9d:65:a5:2f:37:06:c9:11:a0:5f:8b:01:38:2f:0d:50:e6:
a9:a6:d4:be:7a:ed:09:9a:d0:2f:8b:ea:83:da:82:7c:94:72:
28:d7:f3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:12 2024 by rpki-client on console-ams.rpki-client.org