Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/0r8XuXx4Sf_RoI8a6SYTATVovx0.roa
File: 0r8XuXx4Sf_RoI8a6SYTATVovx0.roa (raw, json)
Hash identifier: RMm0H4Gu8KUbn8g9mhJnjT0TY4qvtzipHuajpH3qbo0=
Subject key identifier: D2:BF:17:B9:7C:78:49:FF:D1:A0:8F:1A:E9:26:13:01:35:68:BF:1D
Certificate issuer: /CN=b415beef9ea1dd4772c2ee952761d655d9865026
Certificate serial: 018570150BCA034145B5F679544D0FE02E25
Authority key identifier: B4:15:BE:EF:9E:A1:DD:47:72:C2:EE:95:27:61:D6:55:D9:86:50:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/0r8XuXx4Sf_RoI8a6SYTATVovx0.roa
Signing time: Mon 02 Jan 2023 01:25:05 +0000
ROA not before: Mon 02 Jan 2023 01:25:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57809
IP address blocks: 185.127.4.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:0b:ca:03:41:45:b5:f6:79:54:4d:0f:e0:2e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b415beef9ea1dd4772c2ee952761d655d9865026
Validity
Not Before: Jan 2 01:25:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2bf17b97c7849ffd1a08f1ae92613013568bf1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8d:bc:c8:40:10:e7:43:65:ee:80:d9:d6:be:
ae:43:c7:2d:27:de:6c:e0:11:63:fe:c3:90:51:32:
cd:5c:16:99:8c:2e:14:ad:11:a2:a9:65:39:97:45:
33:97:c2:22:fe:5d:da:83:f0:24:aa:90:97:bf:81:
71:17:61:ff:e2:2a:15:64:2d:cb:4b:64:09:32:ce:
39:fc:3b:19:96:12:be:43:b7:8c:3b:a8:84:39:09:
01:39:aa:f0:03:b1:0e:75:1e:b1:52:40:5e:52:91:
88:a9:df:77:31:b2:77:15:53:22:0f:39:3d:59:da:
d0:de:18:39:ad:23:2c:a6:d9:9e:95:94:9d:4f:bb:
8a:f6:43:e9:db:d1:96:ca:cf:6f:5f:41:31:75:68:
e4:08:0f:25:c8:e4:3e:dd:82:78:7f:30:45:31:9f:
5c:1a:d5:e6:7a:36:5c:ff:3e:b8:87:fd:2b:6c:c4:
41:1b:a6:59:18:51:ee:d5:23:01:b8:08:e2:ca:85:
07:46:ee:26:e2:02:de:a8:aa:0e:8a:59:bc:f9:68:
80:bc:e7:b7:ca:e4:e8:c1:18:4c:43:d5:69:0b:51:
87:b3:9c:15:85:2d:74:8a:90:d7:b9:9b:19:49:3b:
b3:c5:34:3a:7d:84:aa:32:f6:d6:12:1f:b9:af:65:
fc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BF:17:B9:7C:78:49:FF:D1:A0:8F:1A:E9:26:13:01:35:68:BF:1D
X509v3 Authority Key Identifier:
keyid:B4:15:BE:EF:9E:A1:DD:47:72:C2:EE:95:27:61:D6:55:D9:86:50:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/0r8XuXx4Sf_RoI8a6SYTATVovx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.4.0/22
Signature Algorithm: sha256WithRSAEncryption
80:cd:cd:2e:f8:f5:70:ae:1a:ae:04:ea:43:07:d1:93:95:1f:
45:a0:42:6c:a1:0a:91:21:f7:5e:b0:27:e8:fd:81:c9:6c:1f:
d2:13:79:f1:34:8d:9b:94:fd:f6:26:db:3a:c8:64:6d:e6:da:
02:a7:cc:6c:46:82:77:be:96:2b:8a:e6:ed:4f:e7:2f:1a:ce:
bb:d8:35:5a:bc:cc:c3:c5:0c:e1:af:16:ae:21:5d:64:94:d0:
67:d0:38:61:d6:d6:1a:42:43:56:d7:10:f7:77:56:81:c7:69:
02:ac:d0:e6:22:0f:11:79:02:e9:8f:bd:1b:76:4c:e3:1b:05:
6f:22:6f:3b:b3:22:6e:96:6e:95:65:13:67:96:e6:6a:f8:52:
3f:4e:c7:09:15:32:55:40:8e:5f:ce:7b:4f:6c:38:eb:63:dc:
a1:d7:69:04:79:17:c5:ea:47:5e:e5:b2:ec:64:3a:89:37:4d:
fd:c4:7a:5b:3c:85:aa:2f:9f:41:45:33:fa:11:f3:e8:72:e5:
17:e2:b5:19:8c:da:c1:09:3d:93:80:8f:c0:3d:34:d3:58:67:
0f:24:f4:ff:60:b4:23:3c:2d:91:76:19:84:2f:95:3b:79:c3:
be:ad:1a:72:8f:a3:9e:97:e7:d7:91:0c:2a:14:02:bc:3f:41:
99:56:eb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:44 2024 by rpki-client on console-fra.rpki-client.org