Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/8uBK5ODXzs0wwtVxhNTbsRp4B2A.roa
File: 8uBK5ODXzs0wwtVxhNTbsRp4B2A.roa (raw, json)
Hash identifier: H+YaxBtKhyveO+t5kpBZvO5L2kpFBs+Y7XHl7ipU9rk=
Subject key identifier: F2:E0:4A:E4:E0:D7:CE:CD:30:C2:D5:71:84:D4:DB:B1:1A:78:07:60
Certificate issuer: /CN=a65fbcb4ea308a98b09397625e63866383c16dd0
Certificate serial: 018571BA053973F4FEFB10C46218FB4E3B7D
Authority key identifier: A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/8uBK5ODXzs0wwtVxhNTbsRp4B2A.roa
Signing time: Mon 02 Jan 2023 09:04:54 +0000
ROA not before: Mon 02 Jan 2023 09:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32708
IP address blocks: 185.211.78.0/24 maxlen: 24
85.92.101.0/24 maxlen: 24
85.92.102.0/24 maxlen: 24
85.92.100.0/24 maxlen: 24
85.92.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Nov 2023 15:11:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:ba:05:39:73:f4:fe:fb:10:c4:62:18:fb:4e:3b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65fbcb4ea308a98b09397625e63866383c16dd0
Validity
Not Before: Jan 2 09:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2e04ae4e0d7cecd30c2d57184d4dbb11a780760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:aa:22:24:15:48:8c:28:79:21:83:e6:7b:a7:
81:f1:c6:aa:47:85:76:a1:3f:ef:85:b1:b7:97:38:
94:60:a6:54:79:8d:62:a7:49:61:83:29:30:4a:bb:
c7:25:28:0a:da:06:ba:ea:8d:0a:85:0e:27:0f:c2:
9e:62:a6:3a:b0:b4:1d:0d:46:26:26:d9:65:5f:ab:
e1:c6:c5:67:11:5a:e6:d0:4d:23:8a:b7:82:83:01:
49:30:e6:9a:45:0e:79:68:8e:14:56:12:ce:ef:4d:
79:38:c5:78:a8:8d:71:74:14:25:d2:2b:64:9d:8f:
fb:de:49:f6:1c:74:d4:8b:af:a7:ce:7a:77:5f:d7:
f3:55:2f:1a:8f:0b:22:19:6b:b1:b7:6e:de:69:b4:
e4:17:13:85:c9:e4:1d:31:b2:cd:79:8f:be:f2:b6:
7b:14:74:b6:16:65:30:f2:71:2a:c6:84:a2:ce:6b:
7c:e4:dd:ea:3b:57:99:11:b6:96:ca:2a:35:71:f9:
20:cc:0c:bc:9b:99:db:12:27:42:08:c3:a6:aa:5d:
9b:ec:3e:fd:4a:da:1b:13:24:12:41:24:fb:d5:84:
ff:49:e8:dc:36:09:a5:df:d9:76:f3:45:af:6d:b6:
59:86:9e:ba:c7:74:4e:bf:63:24:17:0b:92:8f:36:
b6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E0:4A:E4:E0:D7:CE:CD:30:C2:D5:71:84:D4:DB:B1:1A:78:07:60
X509v3 Authority Key Identifier:
keyid:A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/8uBK5ODXzs0wwtVxhNTbsRp4B2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.100.0/22
185.211.78.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:b3:60:69:59:45:5d:6e:3c:79:e5:1b:b4:b0:8a:78:92:25:
72:de:10:25:9b:72:8f:94:d8:7a:fe:b2:5a:a8:00:cc:25:a5:
95:7e:4c:27:d8:6d:87:79:fa:81:26:cd:2d:11:fb:66:72:0e:
f5:fb:b6:c9:d7:72:22:9f:6a:26:54:21:1d:37:e7:bd:eb:64:
af:22:53:88:66:94:94:be:41:bd:04:5a:ab:e3:07:f8:a6:6d:
4e:80:c9:76:a5:14:8d:e7:29:0b:59:01:8e:37:ae:3e:14:0a:
62:57:0f:56:62:ce:1f:58:46:67:9a:23:82:7c:82:1f:e2:e9:
c8:f1:cc:57:6f:6e:d3:ee:9f:38:4a:d1:b9:ef:cb:cb:03:f0:
dd:bf:75:2f:55:ec:a7:7b:69:5d:32:7d:52:3d:d5:cf:62:d8:
2c:2b:40:09:98:70:cc:9e:fa:71:2e:ea:b4:5e:91:bd:90:ec:
73:47:0c:fc:f7:96:3c:8b:5c:87:3f:f5:34:d8:47:54:e1:b5:
a8:b8:37:f8:ca:8f:aa:52:7b:50:6c:a5:89:73:c4:9a:7b:29:
22:3e:98:e1:a3:04:fc:4e:ec:75:b8:97:77:29:1b:13:24:13:
15:d1:bb:78:a7:99:38:76:28:c6:43:64:b4:b7:e7:c1:f4:aa:
39:d6:2a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:51 2024 by rpki-client on console-ams.rpki-client.org