Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/Eu-LZ0CltE_OGV_63BQgz0oa7Pc.roa
File: Eu-LZ0CltE_OGV_63BQgz0oa7Pc.roa (raw, json)
Hash identifier: 0NTvR8yN30323gBB9ieYn0BqkeVpE2nEJMwMV6vwts0=
Subject key identifier: 12:EF:8B:67:40:A5:B4:4F:CE:19:5F:FA:DC:14:20:CF:4A:1A:EC:F7
Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c
Certificate serial: 018C249433D1270E87AE9DD04E733CEBE7CB
Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/Eu-LZ0CltE_OGV_63BQgz0oa7Pc.roa
Signing time: Fri 01 Dec 2023 08:52:21 +0000
ROA not before: Fri 01 Dec 2023 08:52:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20926
IP address blocks: 185.47.240.0/22 maxlen: 24
79.98.16.0/21 maxlen: 24
84.239.64.0/18 maxlen: 24
80.74.64.0/20 maxlen: 24
185.10.176.0/22 maxlen: 24
141.101.56.0/22 maxlen: 24
2a00:6901::/32 maxlen: 48
2a00:6900::/44 maxlen: 48
2a00:6900:f0::/48 maxlen: 48
2a03:5d40::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:24:94:33:d1:27:0e:87:ae:9d:d0:4e:73:3c:eb:e7:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c
Validity
Not Before: Dec 1 08:52:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12ef8b6740a5b44fce195ffadc1420cf4a1aecf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a7:a5:c5:3d:20:c4:ac:2f:e8:cd:8b:48:73:
99:a0:e1:5e:78:5e:97:60:86:65:61:a9:88:43:5c:
f4:99:fb:4d:02:61:86:5a:1b:cf:c6:5c:73:4b:ca:
67:33:15:3f:84:da:aa:d4:72:7e:ff:cf:d2:2c:3d:
ad:0d:fc:bf:9b:69:56:ca:e2:4d:91:16:19:83:f0:
d1:25:7f:18:4e:d1:40:0c:45:83:9e:cd:d4:6f:2c:
41:eb:f7:82:ec:ba:56:d1:a3:f5:9b:93:fa:5a:b5:
92:a0:a1:e6:f1:6d:f9:1e:de:3e:f0:cc:d2:ea:66:
92:a9:26:7d:3f:b1:b2:fc:cb:c9:c1:0a:fb:84:e1:
ca:e3:b9:17:4e:db:9c:14:8f:ca:f4:83:f5:b3:87:
89:dd:86:d0:b6:2f:ae:4f:32:94:55:f7:20:d7:36:
91:0c:ba:81:09:ca:1c:d8:d3:4d:bf:1a:3b:ee:a9:
83:a3:c7:95:8e:15:73:09:a5:33:81:08:49:bb:46:
fe:b6:4c:0b:df:f6:fa:0c:d3:dc:77:14:a8:c8:e8:
ca:ac:ce:ae:96:43:84:b0:e7:f0:c1:01:d6:22:07:
2a:9c:cf:e9:cc:1e:d8:2b:07:d7:a3:ea:cf:f6:6c:
1e:81:28:35:f8:6c:66:1c:37:b7:7f:61:c5:3f:15:
e3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EF:8B:67:40:A5:B4:4F:CE:19:5F:FA:DC:14:20:CF:4A:1A:EC:F7
X509v3 Authority Key Identifier:
keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/Eu-LZ0CltE_OGV_63BQgz0oa7Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.16.0/21
80.74.64.0/20
84.239.64.0/18
141.101.56.0/22
185.10.176.0/22
185.47.240.0/22
IPv6:
2a00:6900::/44
2a00:6900:f0::/48
2a00:6901::/32
2a03:5d40::/32
Signature Algorithm: sha256WithRSAEncryption
4d:f1:df:b6:e4:bb:85:2c:4e:07:f1:60:e2:4a:b9:9e:e7:ad:
38:4b:6f:b0:73:f2:88:04:72:47:8e:fb:99:d0:f9:31:16:37:
b3:e2:f9:b6:0d:3b:2b:3b:38:ff:c2:d9:a1:1b:3f:af:4d:68:
87:a2:0f:25:3f:b9:62:34:fe:c9:7f:db:9e:02:79:4d:ab:1c:
09:4b:91:fb:f7:ee:15:83:44:b5:d3:cf:83:b6:13:d9:79:62:
0a:b1:60:04:5a:f9:5c:de:92:1d:4d:69:f9:3d:11:a7:4c:3e:
4d:8a:8d:e5:de:51:87:06:3d:1b:ca:00:8a:31:5b:74:af:c7:
ca:94:0e:ac:89:cd:d1:31:39:3d:a4:bc:6e:79:f3:5c:9c:ca:
95:82:1d:23:d2:f3:b8:08:59:f2:00:8d:23:9b:4b:75:02:25:
28:47:bb:71:e7:d8:14:1d:1c:0e:e7:33:89:bf:a6:36:61:22:
80:ab:48:b6:9e:7b:36:76:d3:6f:33:96:b3:45:57:02:64:be:
bd:76:90:4f:75:2d:1e:c3:f0:0e:20:6e:4d:f6:e5:4c:52:c2:
ef:e4:01:74:ac:19:1f:d6:ba:3b:6b:56:e4:46:b0:a1:2f:1d:
33:cb:f6:50:5b:b0:f3:50:bd:90:1e:e2:a3:fa:d0:98:c1:62:
09:b4:99:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:49:27 2024 by rpki-client on console-fra.rpki-client.org