Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/eb-Ul08oVsmm_LBibmOr6dOF8ns.roa
File: eb-Ul08oVsmm_LBibmOr6dOF8ns.roa (raw, json)
Hash identifier: lEC77FcOkm3K/vUSmaQLiUIIp4va5NLViP+8JsKKlHc=
Subject key identifier: 79:BF:94:97:4F:28:56:C9:A6:FC:B0:62:6E:63:AB:E9:D3:85:F2:7B
Certificate issuer: /CN=22acf66f0019c556331bef9ecd8df652782a63f8
Certificate serial: 018946F6DF44CB62D70BF90B2E7587EA2973
Authority key identifier: 22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/eb-Ul08oVsmm_LBibmOr6dOF8ns.roa
Signing time: Tue 11 Jul 2023 21:58:51 +0000
ROA not before: Tue 11 Jul 2023 21:58:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62321
IP address blocks: 45.89.9.0/24 maxlen: 24
45.89.10.0/24 maxlen: 24
45.89.11.0/24 maxlen: 24
45.89.8.0/24 maxlen: 24
2a0e:b40::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:46:f6:df:44:cb:62:d7:0b:f9:0b:2e:75:87:ea:29:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22acf66f0019c556331bef9ecd8df652782a63f8
Validity
Not Before: Jul 11 21:58:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79bf94974f2856c9a6fcb0626e63abe9d385f27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:96:28:7c:23:09:6f:8b:fb:7c:05:30:3e:fe:
f8:dd:78:be:08:31:60:b7:db:48:17:b6:4f:49:35:
51:73:15:50:37:36:af:0f:79:44:ea:79:96:9f:32:
86:28:a4:34:67:11:56:f6:ba:0d:e1:91:44:e6:ee:
8a:f3:5b:3e:93:42:44:40:0a:4f:ec:56:bd:e9:f2:
78:1c:b9:dc:22:5f:bf:2d:8d:de:c9:71:bd:4d:f0:
92:ce:74:c0:9c:4b:37:cf:b4:f3:c4:7a:5e:aa:53:
aa:a3:33:17:77:c8:f8:3e:bc:a2:37:91:cd:d1:b3:
71:b7:9b:7b:3f:e2:c8:c4:24:9f:64:e5:72:e2:da:
49:72:19:01:69:8b:18:38:99:21:ba:c5:6c:7a:ca:
d2:3d:45:7b:92:07:1a:5f:45:9e:1e:78:b7:47:b8:
55:f0:b9:e6:91:95:8a:1c:22:22:47:17:84:f2:e9:
45:5b:0d:e4:41:0d:f9:28:0d:dd:b5:d5:b2:0d:25:
cc:6d:fd:72:a7:0e:cb:ee:81:3d:aa:06:43:e4:21:
a0:0d:09:cb:8e:fd:f8:c1:3a:fe:63:08:c3:78:66:
c4:2c:01:89:42:78:8f:dc:ac:8d:f7:91:c6:9f:3a:
17:38:ae:aa:fe:41:94:0a:bb:57:ba:63:d7:3c:60:
48:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BF:94:97:4F:28:56:C9:A6:FC:B0:62:6E:63:AB:E9:D3:85:F2:7B
X509v3 Authority Key Identifier:
keyid:22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/eb-Ul08oVsmm_LBibmOr6dOF8ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.8.0/22
IPv6:
2a0e:b40::/48
Signature Algorithm: sha256WithRSAEncryption
86:76:11:21:02:b2:3e:b2:f9:42:13:d4:51:f3:95:35:f1:a1:
71:17:ce:6e:34:25:56:74:d5:8c:40:3c:a5:8b:2d:eb:00:e7:
d0:44:e2:cf:d9:d1:7d:1b:26:89:ec:8e:41:40:2b:9e:71:8a:
ef:d6:b1:b5:d9:7f:bc:1e:19:8e:d2:33:7e:7b:ff:d9:ea:b2:
5e:ef:e3:0c:27:b7:8e:df:a5:96:6c:0f:2a:e8:dc:0f:ed:e9:
2c:fc:40:29:79:5f:c9:be:7a:c6:ae:5e:a7:03:2d:de:8a:b1:
cd:f6:5f:e2:4b:07:59:78:22:c9:0c:53:92:3b:23:76:2e:84:
2a:ef:2c:d8:91:ea:77:a4:87:5f:c6:e3:b8:e6:b5:c8:03:d9:
c2:6b:5b:0e:47:f1:64:2c:fe:7e:df:1b:d6:6f:2a:d6:8b:b4:
85:74:0f:7b:2d:74:3c:38:62:31:32:1a:88:c2:9a:a7:4d:0e:
08:db:f6:5a:65:d2:04:df:4e:eb:84:04:b4:06:92:c4:f7:9d:
74:0f:8c:9f:fe:1f:98:5d:10:59:ac:29:c3:2d:06:56:73:5f:
4e:8a:3c:4f:2e:a9:8e:5d:b2:57:38:14:a4:36:d6:a0:c2:22:
42:a9:06:8c:5f:ad:ee:9b:b8:d2:a8:0b:41:75:ce:3c:6a:15:
6f:63:09:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:47 2023 by rpki-client on console.sobornost.net