Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/EPdJjLBz1-9R-4XUKnTjc-T2KhU.roa
File: EPdJjLBz1-9R-4XUKnTjc-T2KhU.roa (raw, json)
Hash identifier: Ipekl/a7E86Sjd7SmSNNfSjIaB1aW2N6x6QI404BnU4=
Subject key identifier: 10:F7:49:8C:B0:73:D7:EF:51:FB:85:D4:2A:74:E3:73:E4:F6:2A:15
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 018B515C28F11B8FBA4C901B231C37DF80A7
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/EPdJjLBz1-9R-4XUKnTjc-T2KhU.roa
Signing time: Sat 21 Oct 2023 08:31:16 +0000
ROA not before: Sat 21 Oct 2023 08:31:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210542
IP address blocks: 213.145.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:51:5c:28:f1:1b:8f:ba:4c:90:1b:23:1c:37:df:80:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Oct 21 08:31:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10f7498cb073d7ef51fb85d42a74e373e4f62a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:48:6a:c6:77:de:ef:39:40:47:9a:34:eb:31:
2a:48:ed:62:19:4e:34:d0:3f:18:05:43:77:ba:6f:
46:bd:b4:89:ce:d2:23:74:a3:92:53:90:79:cd:c9:
fb:de:34:c0:f9:53:c4:99:8d:ff:de:c4:e5:7a:60:
42:53:44:ea:24:69:df:67:13:f5:52:01:56:a0:c3:
0a:16:8c:55:57:e8:c2:2b:ac:8a:d2:f7:24:67:cc:
27:da:5e:53:2a:48:7f:6a:15:c6:c9:b8:ed:d0:2d:
54:52:92:24:e1:ae:43:97:ba:b7:c8:ad:3a:55:79:
fe:79:de:64:34:e0:d5:62:2d:95:8e:bf:8b:d1:83:
95:cb:53:38:f2:f4:05:32:53:68:53:de:ec:20:80:
43:d0:ee:9a:fc:f2:9f:e7:66:95:21:71:89:b7:4d:
ff:e7:39:c1:38:99:18:6f:21:03:98:d7:32:57:0a:
51:ed:10:a6:c1:c4:e7:a9:93:a8:d4:8c:61:2c:13:
d2:6f:44:8c:8d:76:1e:92:93:5d:ff:f6:ca:fd:c4:
92:c2:52:9c:ca:98:55:a1:9b:d7:5e:d1:5d:13:c4:
49:40:c6:12:ad:f5:93:25:62:57:5a:df:4e:b6:81:
d1:75:8b:0c:53:16:8e:db:e6:91:45:be:35:46:69:
1b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F7:49:8C:B0:73:D7:EF:51:FB:85:D4:2A:74:E3:73:E4:F6:2A:15
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/EPdJjLBz1-9R-4XUKnTjc-T2KhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.94.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:7a:fe:84:53:75:df:4b:b6:37:d5:1b:d0:61:0e:de:9c:e4:
5d:cc:71:cd:2e:32:d5:b9:71:61:2f:e7:55:af:c3:14:be:7c:
dc:de:6d:e4:d7:2a:8b:1b:9d:ee:83:3b:d5:c1:2d:d6:be:0b:
64:c6:3b:3d:5c:08:22:01:eb:bb:9a:9b:20:90:45:b3:eb:35:
8c:16:a7:f5:fe:60:6c:2a:ed:33:c9:ad:dd:b9:71:90:11:78:
be:09:e7:fc:03:7e:06:a5:5b:7e:a4:97:31:8c:02:18:3a:a0:
ce:c8:7f:dd:31:eb:35:54:2a:8f:92:a0:ba:b1:f9:8b:d2:ae:
36:9c:92:57:93:b7:33:c0:2a:78:a7:ac:15:b0:26:61:73:31:
0a:0c:fa:1e:d6:d2:e5:ed:82:f7:19:24:9e:02:0c:da:f7:db:
1e:c3:e4:3e:54:c0:e3:c4:a6:36:b4:d7:b5:25:6c:b4:ba:01:
52:c9:a8:da:2f:98:ce:bf:a9:01:11:4c:d7:fc:12:10:83:3d:
80:32:e7:eb:35:6a:34:2d:6c:5b:b0:75:bb:fb:9e:8b:eb:c0:
24:85:41:48:da:0d:6a:39:36:48:f3:4d:06:b6:2f:ff:2a:ac:
c1:f6:c1:ac:13:34:80:43:e9:4f:b4:3e:b5:66:d4:64:cb:c4:
dd:bd:37:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:12 2024 by rpki-client on console-ams.rpki-client.org