Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/EA0hinlWcpg7d2CB_rufSlJHBT4.roa
File: EA0hinlWcpg7d2CB_rufSlJHBT4.roa (raw, json)
Hash identifier: lAckZSbOm7od3pHeNI2SkHtMNm5kVUys11tFj55rngE=
Subject key identifier: 10:0D:21:8A:79:56:72:98:3B:77:60:81:FE:BB:9F:4A:52:47:05:3E
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 018CCA99E2080250EFBD350B012F10EEF3C4
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/EA0hinlWcpg7d2CB_rufSlJHBT4.roa
Signing time: Tue 02 Jan 2024 14:35:31 +0000
ROA not before: Tue 02 Jan 2024 14:35:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 138.124.0.0/17 maxlen: 24
138.124.246.0/24 maxlen: 24
138.124.245.0/24 maxlen: 24
138.124.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Feb 2024 09:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:e2:08:02:50:ef:bd:35:0b:01:2f:10:ee:f3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Jan 2 14:35:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=100d218a795672983b776081febb9f4a5247053e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:61:21:6d:f8:4f:fd:28:7e:d7:18:a8:d0:db:
4e:86:04:8c:7e:c7:ec:64:cf:33:d6:3e:f7:db:5a:
97:e4:f4:d8:ed:54:11:17:32:72:55:0d:81:a3:cc:
31:de:39:42:de:67:f5:58:cc:24:2c:2f:c5:73:85:
cc:a0:7d:72:9c:68:36:59:d8:ae:32:48:fa:47:ca:
3a:5c:6d:15:d5:7d:d8:ec:2d:e3:4c:51:e3:57:c3:
32:10:3d:63:53:f5:0b:a0:ab:d5:18:58:d4:8d:02:
81:44:7b:23:20:ea:76:be:00:53:1c:0d:d1:91:41:
18:9f:f9:26:ee:b8:63:2b:30:8f:4b:86:d7:c6:ef:
ab:88:5a:d2:09:24:f6:f8:64:62:61:65:b0:b4:27:
1a:85:37:cc:7e:5b:81:c4:00:ba:90:a0:55:1c:03:
91:d8:20:4d:1a:40:24:95:4c:dd:c9:79:d3:09:9b:
21:14:3b:04:18:b5:8f:6b:5d:54:a1:c5:df:ad:fd:
2e:87:5f:30:ab:1d:b1:19:c5:5a:81:2d:a7:45:9c:
c8:df:97:b3:85:d0:87:e2:6b:a1:45:e7:39:85:7c:
05:9c:ca:32:e3:d4:fd:45:de:30:02:d6:f4:c5:1f:
ce:d2:f4:55:fd:05:78:df:70:76:05:67:1b:f9:a1:
a7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0D:21:8A:79:56:72:98:3B:77:60:81:FE:BB:9F:4A:52:47:05:3E
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/EA0hinlWcpg7d2CB_rufSlJHBT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.0.0/17
138.124.245.0-138.124.247.255
Signature Algorithm: sha256WithRSAEncryption
18:a6:07:4a:7e:78:e3:9b:1f:86:1b:11:77:6a:03:c7:51:97:
f2:34:42:d1:c1:e7:1c:d7:a4:ea:3b:51:02:25:ee:a9:40:16:
df:0f:50:7a:0a:70:e4:8b:bf:2b:4d:ba:25:ec:1c:46:5d:8a:
59:3f:e8:d8:7d:3e:5e:61:db:ce:67:db:46:31:5d:4e:04:ec:
af:47:d2:77:f4:a5:ce:69:57:f6:c1:9b:ad:2d:52:25:a7:42:
47:36:c8:0e:98:85:8e:cd:51:2d:6d:dc:ff:51:cb:f7:a6:92:
b0:30:9c:82:7e:9b:a5:ef:69:c1:0e:7c:43:61:46:42:0a:4d:
f7:b9:83:81:61:f1:17:2f:52:20:12:16:7c:91:7d:c4:5e:e8:
ae:90:48:97:89:aa:6c:e0:5e:9a:7c:e8:f6:fc:3d:d0:1f:98:
36:51:c0:98:c3:b7:01:a3:1b:a1:3d:14:f8:81:48:09:d1:aa:
b1:db:d7:56:66:fa:01:99:51:bc:2f:76:5c:c2:79:f2:79:0f:
3c:f5:8b:cb:0d:23:b2:cd:6c:f5:e0:e5:7b:24:47:dd:fb:84:
62:b5:22:c5:19:23:b3:7f:82:ae:43:40:ae:d3:60:3a:92:40:
04:6a:0d:07:58:c6:4f:79:6d:66:eb:1e:1e:fe:0d:34:a1:ee:
07:f6:89:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:24 2024 by rpki-client on console.sobornost.net