Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/EefWDve4bFef-kIsZJH1EEVrRPk.roa
File: EefWDve4bFef-kIsZJH1EEVrRPk.roa (raw, json)
Hash identifier: m3HY0f7iPHY99Z4svZfQbXrNrJnZsAATeqsApDe374s=
Subject key identifier: 11:E7:D6:0E:F7:B8:6C:57:9F:FA:42:2C:64:91:F5:10:45:6B:44:F9
Certificate issuer: /CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
Certificate serial: 018AACF239371EAFE1B4F1F227CC16A588F6
Authority key identifier: 1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/EefWDve4bFef-kIsZJH1EEVrRPk.roa
Signing time: Tue 19 Sep 2023 10:17:50 +0000
ROA not before: Tue 19 Sep 2023 10:17:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43571
IP address blocks: 178.19.48.0/20 maxlen: 24
149.126.80.0/21 maxlen: 24
185.152.116.0/22 maxlen: 24
2a01:8280::/32 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ac:f2:39:37:1e:af:e1:b4:f1:f2:27:cc:16:a5:88:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
Validity
Not Before: Sep 19 10:17:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11e7d60ef7b86c579ffa422c6491f510456b44f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5f:f2:60:14:ad:6c:4d:71:ce:da:ef:02:0b:
bc:02:34:52:96:e7:93:2b:30:2f:ff:4b:4c:4a:85:
94:21:97:b6:aa:a2:25:bd:1e:26:d2:f3:ad:92:72:
06:a9:91:2c:ea:5e:37:60:08:36:77:44:6d:af:0b:
d5:0e:1c:a8:ea:6b:84:9c:cb:ce:71:0b:f2:11:b7:
3f:5a:bc:72:dc:e0:68:66:e4:35:d7:0e:78:8b:e6:
36:64:9f:ab:60:20:11:4b:c1:ef:b3:2b:f8:5e:2e:
a8:43:ef:d2:c0:7e:1f:ac:e9:7c:fc:ba:9e:5a:c6:
5c:88:1a:8b:c9:88:a7:c4:0f:b4:e8:64:c3:d2:5e:
33:7d:3f:58:2a:cc:e6:d7:71:91:ed:de:8e:92:4b:
eb:3d:83:a6:a0:03:8e:f6:df:2f:b0:6a:6d:db:21:
09:a5:92:79:0c:dc:85:0e:b8:04:c1:98:c3:67:bb:
11:55:48:d3:b3:e5:43:02:4d:d5:c1:05:c2:c8:22:
d3:88:18:05:e9:a2:8e:33:b7:49:32:e3:a3:9c:28:
99:85:1e:3c:5b:09:bc:a9:f7:85:ca:ea:4f:cc:d3:
4b:49:0d:b6:8d:fb:21:4d:70:09:31:64:60:05:ef:
25:63:20:bf:a5:5d:aa:12:ef:82:b1:e8:2c:83:15:
a3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E7:D6:0E:F7:B8:6C:57:9F:FA:42:2C:64:91:F5:10:45:6B:44:F9
X509v3 Authority Key Identifier:
keyid:1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/EefWDve4bFef-kIsZJH1EEVrRPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.80.0/21
178.19.48.0/20
185.152.116.0/22
IPv6:
2a01:8280::/32
Signature Algorithm: sha256WithRSAEncryption
77:52:82:f2:95:7f:d6:f4:ec:6f:e8:0a:64:5c:e1:21:58:83:
4e:1d:a9:4b:e2:22:cd:ba:03:97:c1:ae:e3:e6:4f:16:1d:dc:
0b:5a:21:e6:c6:4d:85:6e:dd:17:a8:3d:bb:df:1d:12:ae:62:
74:24:24:99:83:ae:7f:12:9d:1e:b4:df:47:f3:25:35:bd:7a:
8e:00:7b:e9:89:4b:9e:00:01:d8:c6:eb:b4:3f:ee:3c:d9:7c:
25:e1:9d:44:f3:f8:53:eb:03:2a:44:d2:13:02:c9:75:db:df:
d0:a0:44:67:3f:be:a5:13:9f:83:f6:64:56:30:77:a0:77:29:
88:b3:40:cf:c9:55:4a:91:d8:6f:10:fc:28:6e:0f:a1:51:a1:
36:4e:7e:45:69:b2:99:0c:13:f5:07:4c:98:a7:e7:fc:5e:4b:
e3:ac:3b:fc:05:be:4a:f8:af:70:96:f6:b7:54:fa:f8:e1:40:
60:62:ea:ca:7a:7c:f8:5d:77:2f:cd:9e:03:a3:a4:b4:c9:23:
c0:3b:a9:72:dc:ab:64:1f:80:e3:58:05:e2:1c:c6:0e:74:fb:
19:0d:1d:92:61:99:32:97:84:11:50:26:1f:c3:50:9c:36:3d:
31:26:d2:db:36:04:ce:37:ef:fb:d6:cd:aa:45:fe:d8:e4:b3:
57:28:d1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:32 2023 by rpki-client on console.sobornost.net