Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ez8ljKLb-PMMx0iLu60KkDZAUiw.roa
File: ez8ljKLb-PMMx0iLu60KkDZAUiw.roa (raw, json)
Hash identifier: /EB6Zzf4itRNDrfvJoZoe26jX1OaxMMiarqhYIwxo5U=
Subject key identifier: 7B:3F:25:8C:A2:DB:F8:F3:0C:C7:48:8B:BB:AD:0A:90:36:40:52:2C
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018CC801293E9B1162C55900687FA48A2B80
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ez8ljKLb-PMMx0iLu60KkDZAUiw.roa
Signing time: Tue 02 Jan 2024 02:29:28 +0000
ROA not before: Tue 02 Jan 2024 02:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35913
IP address blocks: 85.254.140.0/24 maxlen: 24
85.254.84.0/23 maxlen: 23
85.254.124.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:29:3e:9b:11:62:c5:59:00:68:7f:a4:8a:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 02:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b3f258ca2dbf8f30cc7488bbbad0a903640522c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:93:03:70:20:00:31:d2:a7:78:a0:62:37:4f:
71:0a:dc:ad:b9:d6:3e:4f:9f:ab:06:92:65:13:41:
55:ee:5a:12:33:79:a3:9f:9e:a5:dc:9c:88:03:54:
71:7a:58:fd:8d:4e:fb:55:67:d3:ec:14:f4:e7:a7:
1e:48:89:5e:74:29:06:01:78:c4:93:e7:be:7e:20:
1b:ac:7b:fd:84:0f:6e:c2:29:2c:03:1f:1b:55:e4:
bd:95:cc:1a:00:9e:40:77:70:d4:c2:f8:39:8b:3c:
8c:3b:66:51:48:fe:73:b4:b1:40:4a:ba:56:d6:f7:
90:65:8f:1d:db:2a:64:98:68:3f:be:d3:1d:6a:0b:
e2:cf:58:15:e0:c6:6b:d3:90:90:4a:51:2a:8d:be:
b6:4b:f0:71:68:59:07:30:0f:3c:f0:75:e3:b6:cc:
d1:5b:b1:c7:64:49:61:61:60:a6:7b:15:45:e8:b3:
c5:bb:9a:b1:d1:ca:5f:39:1e:b0:c1:06:b8:a4:20:
61:a3:1e:8a:e5:94:c6:18:51:28:96:5a:ec:b4:61:
78:b1:69:1c:56:52:3c:fc:41:0a:0b:b6:94:70:f4:
7c:e9:20:62:35:af:32:17:62:27:b8:ec:31:f8:b1:
55:98:b6:5d:c6:b7:44:5a:9d:eb:40:f7:d2:94:4d:
c1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:3F:25:8C:A2:DB:F8:F3:0C:C7:48:8B:BB:AD:0A:90:36:40:52:2C
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ez8ljKLb-PMMx0iLu60KkDZAUiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.84.0/23
85.254.124.0/23
85.254.140.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ce:46:b2:f3:c2:a8:cb:e6:be:28:5d:85:6b:d7:a1:9e:63:
16:d5:a1:58:43:a0:d4:c3:a1:a9:38:17:dd:1b:c1:3b:e7:b8:
38:d4:f6:74:f2:a0:db:e8:18:cd:b1:97:e8:dc:ec:f2:6d:cd:
cd:97:8b:11:be:63:eb:37:c7:90:b8:0d:20:8a:b2:5e:dc:d9:
bc:63:4d:b4:14:29:23:b6:f4:9c:c6:6f:43:34:bd:30:f5:77:
17:55:eb:e1:26:49:59:b7:8b:ce:19:94:1d:6c:91:53:70:74:
5e:eb:ab:85:8d:55:b2:a4:1a:f8:35:ed:62:1e:0a:32:46:06:
a3:c4:fb:67:7e:53:c8:02:6f:66:01:d5:85:af:ff:f8:42:c4:
31:88:b2:a1:23:69:29:8c:b0:79:8f:51:c5:96:cb:26:54:3c:
d7:49:e2:cd:f1:5d:2e:06:80:01:26:76:e8:b6:2a:14:a1:26:
a8:4f:71:45:44:be:c3:b0:a6:a0:08:4d:a7:cd:d5:5f:4a:d5:
2d:a8:06:e4:3d:0a:94:87:03:d9:01:b7:6f:5c:a4:66:11:60:
2d:6d:ec:77:b4:f3:78:fa:e1:5f:2f:4a:dc:ee:e9:76:ca:3b:
6d:0a:c6:9b:b3:da:31:38:61:12:0c:dc:ed:5a:32:8f:9d:eb:
50:2b:7e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:31 2025 by rpki-client