Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8IBdkiSuOqgI1MOjb3QcLhG0Xps.roa
File: 8IBdkiSuOqgI1MOjb3QcLhG0Xps.roa (raw, json)
Hash identifier: okOF+9citpZqW+kZ7x8Onv+8rBfVx6f+hoLQMUMBbNI=
Subject key identifier: F0:80:5D:92:24:AE:3A:A8:08:D4:C3:A3:6F:74:1C:2E:11:B4:5E:9B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01917CD692DB21E1DB3052FB02F356531A20
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8IBdkiSuOqgI1MOjb3QcLhG0Xps.roa
Signing time: Fri 23 Aug 2024 01:25:22 +0000
ROA not before: Fri 23 Aug 2024 01:25:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
94.249.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 01:18:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7c:d6:92:db:21:e1:db:30:52:fb:02:f3:56:53:1a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 23 01:25:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0805d9224ae3aa808d4c3a36f741c2e11b45e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2a:42:14:49:3c:59:93:ed:6d:24:3f:fb:31:
4b:a1:77:84:13:d1:6d:c8:7b:33:69:e0:b7:47:bd:
67:b1:cc:e2:23:9e:55:f2:21:78:19:8d:e5:33:58:
f7:27:7b:29:56:d3:f3:0a:f4:58:ed:2e:a6:7f:cd:
76:2c:27:53:02:47:30:18:a2:a1:12:ad:72:a6:78:
9e:8d:47:18:83:af:02:72:e2:14:04:51:0d:60:6e:
1f:18:77:37:9f:2c:4e:9c:3c:cb:86:86:3b:3b:4d:
ef:40:ac:0b:0a:4f:11:60:dd:6c:dc:dc:5b:3e:8e:
af:5c:b9:1d:fc:f4:92:00:77:cf:db:58:ce:36:c5:
18:9c:01:5b:a3:c0:b1:8f:13:ca:90:5b:ee:8c:0e:
e1:cc:6f:38:a5:d8:2c:2f:e0:98:5a:fd:d4:39:fc:
61:72:7c:b1:a1:ee:cd:5f:57:97:15:b3:84:45:08:
dd:a3:ae:2f:72:58:89:a3:ff:0e:49:10:44:33:a9:
17:aa:f6:f7:81:76:96:2a:a1:3e:19:64:0c:d8:de:
79:8a:0f:2a:87:50:d4:90:a4:ca:c8:d2:f4:f4:05:
f9:7d:97:b8:05:21:6d:46:91:c1:1e:d5:b7:c9:19:
5b:2f:35:a8:2a:42:d2:35:ee:92:0a:bb:22:40:70:
f4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:80:5D:92:24:AE:3A:A8:08:D4:C3:A3:6F:74:1C:2E:11:B4:5E:9B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8IBdkiSuOqgI1MOjb3QcLhG0Xps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
77.90.54.0/24
87.239.131.0/24
94.249.138.0/24
Signature Algorithm: sha256WithRSAEncryption
95:3c:52:76:52:ec:54:8a:05:2c:bd:a5:f2:18:bc:74:d1:37:
9c:a1:d6:b5:fb:21:35:85:20:f4:4c:92:a5:5f:3a:25:09:58:
7c:52:08:f0:4c:aa:c6:e1:74:4e:45:1d:53:3c:32:f2:fb:bd:
36:85:58:9a:35:e5:1f:65:a1:36:d5:1f:15:94:f6:06:6d:6e:
8e:c5:a0:de:7a:ec:40:45:d5:4b:27:95:cd:bd:1c:1f:39:68:
d6:ef:09:0a:94:1e:b7:dc:dc:2a:ca:80:37:b1:64:15:32:2f:
63:7e:eb:38:71:8e:e0:e0:78:f0:6c:c1:52:aa:13:a1:46:2c:
f4:44:2a:80:5f:55:d6:58:42:c1:5c:db:59:0e:05:94:6f:79:
a7:41:f8:ed:07:49:40:52:de:82:ef:a0:68:f4:5c:eb:66:cc:
ed:23:10:32:67:6e:3f:17:d3:91:91:16:d9:9e:fc:cb:7e:52:
06:e6:4f:c0:59:84:e1:16:33:e4:64:41:58:14:d3:4b:2d:5e:
9a:12:2b:19:6f:c1:70:6e:5a:10:c5:dc:3a:1a:36:5a:91:e4:
57:5e:65:9c:7e:1f:11:1f:3f:c3:74:9a:0c:72:66:bf:ca:89:
28:a1:5a:80:3a:46:02:97:2a:d0:04:f2:28:21:68:e3:b8:81:
ee:d9:68:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 03:20:55 2024 by rpki-client on console-fra.rpki-client.org