Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/84eECdavTOxhJhQ_PPSUqqbf3A8.roa
File: 84eECdavTOxhJhQ_PPSUqqbf3A8.roa (raw, json)
Hash identifier: PtwqWnNkoEH9wFQ193UOC8tQ9xQDt9E9NtGvNX1tT0o=
Subject key identifier: F3:87:84:09:D6:AF:4C:EC:61:26:14:3F:3C:F4:94:AA:A6:DF:DC:0F
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 018B3D531020B5F640E7D1CA89C8CE9FD89E
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/84eECdavTOxhJhQ_PPSUqqbf3A8.roa
Signing time: Tue 17 Oct 2023 11:08:55 +0000
ROA not before: Tue 17 Oct 2023 11:08:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47447
IP address blocks: 194.37.80.0/24 maxlen: 24
185.247.118.0/24 maxlen: 24
185.181.10.0/24 maxlen: 24
185.227.108.0/24 maxlen: 24
185.227.111.0/24 maxlen: 24
2a07:3b80:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3d:53:10:20:b5:f6:40:e7:d1:ca:89:c8:ce:9f:d8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Oct 17 11:08:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3878409d6af4cec6126143f3cf494aaa6dfdc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:48:fd:48:fc:54:3c:f0:e6:d4:d8:d0:22:ac:
15:a0:4f:a8:d2:89:b7:6d:c9:3d:ca:92:3a:14:d2:
93:18:26:80:d7:67:1a:fd:f8:b8:22:8f:7e:e2:10:
f3:09:9b:5b:c4:fa:6d:24:7a:bb:9d:46:ef:2f:ef:
b5:ac:db:08:4f:0d:19:cd:76:eb:55:bb:dd:c2:02:
c3:b1:97:e6:76:8f:e7:b6:ba:4b:65:d5:9d:7c:6b:
40:e4:ec:53:b0:37:68:8c:57:6d:d9:ff:e5:cc:5b:
34:9a:fe:d6:1f:9b:98:54:be:b5:0f:9b:6a:0e:8b:
c2:de:3b:de:7d:ed:82:62:ea:86:a3:79:64:88:18:
b0:1b:a8:d5:92:bd:99:ae:07:53:af:31:ac:aa:c4:
ed:37:c0:c1:4b:71:4b:63:df:2c:2e:bc:0f:71:bc:
6a:b8:c2:dd:46:c0:a3:49:71:0b:10:bd:2c:ab:0b:
e7:c7:2c:37:ab:15:2a:4d:b6:32:17:a1:db:cf:75:
28:f7:9e:45:18:89:cc:60:c9:94:60:c8:c1:73:31:
ad:60:88:95:d6:8c:f5:68:f6:d7:85:83:5f:49:c1:
6b:d0:84:aa:4a:bc:1e:75:6c:e0:00:b4:37:9e:c2:
81:14:80:2b:d5:8f:f3:b4:51:4c:38:82:75:19:a4:
1c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:87:84:09:D6:AF:4C:EC:61:26:14:3F:3C:F4:94:AA:A6:DF:DC:0F
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/84eECdavTOxhJhQ_PPSUqqbf3A8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.10.0/24
185.227.108.0/24
185.227.111.0/24
185.247.118.0/24
194.37.80.0/24
IPv6:
2a07:3b80:1::/48
Signature Algorithm: sha256WithRSAEncryption
94:7d:3b:c6:2a:88:ad:2b:67:a0:fe:76:d1:60:62:bd:72:09:
3b:35:e1:37:c7:d6:af:05:2f:fb:83:5a:4e:7f:25:8d:3c:d6:
2a:43:da:20:20:4c:d1:ae:ce:ee:36:ed:aa:8f:fa:9b:1e:31:
13:5b:9c:77:ce:66:74:01:ef:4d:5b:dd:e6:ec:19:60:06:4d:
e7:99:59:ce:35:82:c5:b5:6d:36:42:af:31:77:16:20:78:90:
83:75:05:6b:e0:22:c6:cd:0c:86:be:e2:b5:6d:89:48:08:fc:
9c:e9:a0:56:95:58:8c:18:ab:27:1b:81:26:0d:a9:39:6c:36:
2d:63:bd:91:a4:14:e8:f1:28:bd:38:13:90:c8:81:b1:4f:d7:
bd:47:9c:d7:d4:75:8b:ad:a3:31:1e:9e:90:2c:4c:f2:3b:e0:
71:d3:51:e1:08:53:eb:a2:f5:ab:ed:b4:78:52:ab:e9:3c:83:
9b:1f:80:61:29:23:cf:37:66:84:2e:df:1c:a6:0c:a3:ca:83:
d3:24:42:77:b1:95:f1:32:dd:f3:be:31:27:18:16:78:9a:3d:
f5:b3:b2:00:a2:5f:ff:36:5a:96:9e:df:f0:79:0e:6a:69:0f:
f0:cd:1f:42:20:9d:fa:7a:97:a0:32:a6:49:e8:5e:b8:b0:2e:
be:ab:48:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:32 2024 by rpki-client on console-fra.rpki-client.org