Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/8Cie5iObAFPUIB8M01MQh6XJwn0.roa
File: 8Cie5iObAFPUIB8M01MQh6XJwn0.roa (raw, json)
Hash identifier: tX5ni4399Sff6dgHIQdvFSgjAVpdCLhrUCTcVEBhp7o=
Subject key identifier: F0:28:9E:E6:23:9B:00:53:D4:20:1F:0C:D3:53:10:87:A5:C9:C2:7D
Certificate issuer: /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial: 018852DE0F60FAC3ADFFA094309816979DFC
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/8Cie5iObAFPUIB8M01MQh6XJwn0.roa
Signing time: Thu 25 May 2023 12:24:24 +0000
ROA not before: Thu 25 May 2023 12:24:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46475
IP address blocks: 185.152.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Jun 2023 19:11:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:52:de:0f:60:fa:c3:ad:ff:a0:94:30:98:16:97:9d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
Validity
Not Before: May 25 12:24:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0289ee6239b0053d4201f0cd3531087a5c9c27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4f:77:9f:f0:39:3e:8a:33:f9:cb:9a:0d:a2:
07:00:a3:31:7f:08:7d:d9:7d:ae:61:7c:23:57:dc:
95:07:fc:89:89:6c:55:d4:6d:5b:13:b1:d2:a7:b4:
4b:10:bb:af:36:d0:eb:fb:36:63:06:7e:a1:9d:2d:
fb:d6:7c:e7:3f:af:2c:1a:b1:6d:66:e0:2f:67:1e:
0e:84:80:24:ab:09:03:49:b9:2f:d3:fa:9c:bc:ca:
10:3d:08:98:9b:1e:3d:ca:5e:2f:e0:89:51:5e:c4:
da:54:0a:59:e8:67:6b:e9:8a:2b:99:0a:4d:1f:65:
22:82:95:57:79:f8:19:3d:04:10:c1:8a:f8:76:dd:
bc:5a:48:2f:c5:d3:c5:28:46:60:dc:3c:b2:3f:13:
be:77:36:36:c6:99:a3:d2:8e:a6:52:da:06:dc:bf:
23:fe:1d:f6:a1:32:60:7c:32:b5:97:15:43:c0:93:
02:9b:64:da:11:d9:22:b8:35:9e:f0:20:e7:e4:ae:
a1:5c:90:c9:8e:8d:aa:9b:1e:28:89:45:f7:4b:74:
c4:e7:a1:f2:22:9c:c5:e5:6c:01:df:5b:fe:e0:bd:
e8:ab:2b:dc:cc:8a:a2:52:c9:92:f7:03:b7:f6:fb:
ba:34:05:f0:57:8c:31:da:24:e8:5e:82:8b:ae:8e:
84:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:28:9E:E6:23:9B:00:53:D4:20:1F:0C:D3:53:10:87:A5:C9:C2:7D
X509v3 Authority Key Identifier:
keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/8Cie5iObAFPUIB8M01MQh6XJwn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.92.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:5c:a8:30:62:fc:7e:60:5b:79:84:30:6d:ed:1b:d3:83:3c:
1c:e2:2f:94:6e:45:0a:4f:04:58:4a:52:95:48:3e:0e:a7:55:
e2:dc:ad:c4:b6:ad:6e:15:9a:fd:39:e1:12:ad:10:26:2f:3f:
43:bb:4a:f9:74:45:50:2d:68:9e:3a:3a:a9:23:d5:fa:07:08:
10:6e:6c:6f:9b:73:00:93:34:11:0e:33:99:58:40:25:f5:08:
af:32:5c:8a:80:6f:e2:2c:cb:12:40:a7:fe:04:b1:1a:1c:5a:
f0:8c:df:45:64:6a:0a:7a:82:16:fa:d7:ba:d3:9f:a3:47:c7:
2c:ce:ec:d4:7a:31:28:b1:62:db:0c:d3:39:35:5a:c8:22:1f:
a7:ef:50:d1:5d:d7:c0:f2:5c:4e:c4:e6:de:f0:c4:de:ea:47:
e2:31:c0:cf:fb:f0:8f:2e:e1:9a:22:25:02:51:62:be:8b:44:
1c:3d:5e:da:da:36:88:9a:78:8b:b6:1e:99:65:75:3e:ed:2c:
0a:aa:9b:3c:ae:62:2c:93:4e:f8:ad:01:c1:ab:33:86:d0:47:
b2:7d:26:5f:67:6d:09:8e:4b:2e:9f:ca:72:9d:48:da:11:21:
0c:8f:13:d5:7f:fd:43:1c:7c:58:e1:86:dc:a8:06:00:19:df:
c9:37:18:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:31 2024 by rpki-client on console-fra.rpki-client.org