Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jv9h3xtvoRmfT2zbzIHmpx3FNU4.roa
File: jv9h3xtvoRmfT2zbzIHmpx3FNU4.roa (raw, json)
Hash identifier: ol6UPkA3PbQPjlyEwnQmiKvxLBmeZHBm7oTT88giJNA=
Subject key identifier: 8E:FF:61:DF:1B:6F:A1:19:9F:4F:6C:DB:CC:81:E6:A7:1D:C5:35:4E
Certificate issuer: /CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
Certificate serial: 018CC727195026EEDDDA522960924024DE9B
Authority key identifier: 8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jv9h3xtvoRmfT2zbzIHmpx3FNU4.roa
Signing time: Mon 01 Jan 2024 22:31:17 +0000
ROA not before: Mon 01 Jan 2024 22:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 10753
IP address blocks: 185.165.194.0/24 maxlen: 24
83.97.36.0/24 maxlen: 24
2a10:a180::/30 maxlen: 30
Validation: Failed, certificate revoked on Mon 19 Feb 2024 23:11:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:19:50:26:ee:dd:da:52:29:60:92:40:24:de:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
Validity
Not Before: Jan 1 22:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8eff61df1b6fa1199f4f6cdbcc81e6a71dc5354e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ca:c1:de:67:dd:c2:64:df:e0:27:09:65:45:
6f:10:1c:4e:51:2b:1d:b3:df:e7:dc:4e:c6:33:51:
ed:fe:51:01:4f:29:05:05:ea:ad:9d:fc:cf:99:fb:
1e:f0:04:63:33:27:d7:f1:1a:f4:f9:a0:4f:94:46:
9c:83:a5:08:8b:21:ba:25:55:81:d8:ea:be:3a:59:
f7:d1:e5:1a:a9:60:da:22:4e:ac:39:cb:5f:16:a4:
a0:6b:72:d7:e9:25:00:75:7d:51:17:22:72:98:d9:
a5:d2:9d:90:5c:ed:19:af:d2:8b:b8:c8:ef:eb:a3:
86:b8:c6:6b:27:45:b3:ac:8e:62:76:ee:97:45:1a:
68:b1:75:d2:c6:54:2f:d6:f2:36:ad:d4:b7:fc:71:
13:86:64:7b:25:63:b0:c7:5f:e8:83:2e:0a:ea:d9:
0b:7b:cc:7e:84:2f:31:66:88:5c:bb:22:4a:78:d9:
f2:4f:2d:79:e1:23:29:28:7d:6e:9a:a8:48:f8:08:
30:fd:7b:7c:ac:83:79:cc:59:ff:e9:b2:fc:35:92:
b8:e4:ef:fd:ca:82:fd:26:db:e4:e6:e2:6f:d4:4e:
16:10:6a:0b:f7:c1:96:6e:84:6a:8a:4a:37:19:99:
b7:52:c0:03:b1:22:0a:1a:90:94:7f:99:eb:25:57:
eb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FF:61:DF:1B:6F:A1:19:9F:4F:6C:DB:CC:81:E6:A7:1D:C5:35:4E
X509v3 Authority Key Identifier:
keyid:8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jv9h3xtvoRmfT2zbzIHmpx3FNU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.36.0/24
185.165.194.0/24
IPv6:
2a10:a180::/30
Signature Algorithm: sha256WithRSAEncryption
68:5f:e8:bb:34:30:46:4a:f9:e2:12:30:06:3b:e3:50:33:b1:
40:b5:45:64:40:64:1a:cc:ea:a7:48:48:8c:1d:9f:11:2b:2c:
83:09:76:c8:5f:3c:23:2f:e8:12:75:28:68:69:bd:1b:f2:35:
a6:13:eb:b3:cc:61:04:7e:13:9f:49:2a:37:fb:51:dd:94:ec:
cf:41:9b:90:6c:7e:e5:d2:41:9f:8e:20:64:91:6e:a6:15:80:
1a:20:2b:53:13:bc:88:5e:0f:45:e1:8c:af:17:6e:79:6e:ee:
94:7a:a5:dd:e8:7a:c4:f5:3d:e4:d1:24:01:8c:a9:f2:c7:21:
65:16:31:59:02:04:28:51:b9:b8:84:23:e5:16:54:1f:05:85:
39:96:b2:62:62:16:ef:ba:dc:0d:35:41:3a:df:d1:34:a5:10:
ba:06:c5:32:17:69:f6:b1:b7:54:30:31:7a:4a:b7:3c:1f:30:
b2:5f:5a:49:4e:b5:4c:9f:da:2c:58:1b:bc:c1:82:5b:c4:3e:
9f:a8:02:ac:30:a8:4e:a5:89:46:0b:41:e0:63:89:33:cd:c8:
a4:cc:8f:49:6f:8e:a2:8f:9c:27:82:a4:17:ac:b7:ca:04:b4:
fc:75:95:bd:f8:69:a9:8e:39:ea:53:f4:3c:18:1d:43:7c:d4:
0d:c8:e3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:24 2024 by rpki-client on console-fra.rpki-client.org