Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/hRk-eJ4SfLPRPLxQCGl9hvjLVAI.roa
File: hRk-eJ4SfLPRPLxQCGl9hvjLVAI.roa (raw, json)
Hash identifier: LEZiMBFaEIS1FmaZpmO9wir1JcEoaye+BpM8XPPwVNs=
Subject key identifier: 85:19:3E:78:9E:12:7C:B3:D1:3C:BC:50:08:69:7D:86:F8:CB:54:02
Certificate issuer: /CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Certificate serial: 018571F10C387C150CE69BFBA72C8DBE2F4C
Authority key identifier: 42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/hRk-eJ4SfLPRPLxQCGl9hvjLVAI.roa
Signing time: Mon 02 Jan 2023 10:05:00 +0000
ROA not before: Mon 02 Jan 2023 10:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8220
IP address blocks: 185.8.141.0/24 maxlen: 24
185.8.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f1:0c:38:7c:15:0c:e6:9b:fb:a7:2c:8d:be:2f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Validity
Not Before: Jan 2 10:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85193e789e127cb3d13cbc5008697d86f8cb5402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:00:13:f5:2e:5c:42:d6:62:53:3d:08:3d:
b3:e0:38:9d:c3:55:66:c2:36:3b:76:ef:42:ef:88:
1a:c5:9e:6b:4d:d7:4b:e8:79:62:ec:38:2a:b3:1f:
4f:d2:0e:80:a4:6c:2e:12:59:07:0d:3c:d9:49:73:
74:bd:3b:86:a7:8d:79:58:a3:93:1c:ce:84:5c:82:
c9:e1:13:d0:b1:87:e4:d1:80:b7:2a:54:e9:79:b6:
3d:1d:4e:5f:67:7a:79:67:41:7e:5e:38:fe:64:b2:
24:90:3b:c4:f0:5d:aa:f8:e9:58:fa:9a:ce:e9:0a:
77:60:48:f5:5c:a8:07:ae:7b:9b:72:76:21:a5:6d:
19:8d:7d:89:af:82:25:0b:f1:a1:3a:b1:d1:36:f4:
b9:d4:6f:0a:04:79:29:cc:00:43:44:de:c1:db:28:
22:b9:da:70:89:2a:d5:a3:34:82:c1:52:51:02:cb:
4a:bb:b2:72:7b:35:ed:22:88:a2:eb:12:87:dc:bc:
dc:83:45:7c:e5:6e:40:7b:a9:15:5f:2e:44:d7:3f:
8f:2f:78:43:95:0e:6a:60:89:42:7a:8f:dc:db:55:
9d:d3:46:fe:40:3f:80:75:53:a1:77:23:fe:dc:2c:
47:2d:a3:95:0c:24:06:cc:c2:c9:90:74:68:bd:ba:
38:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:19:3E:78:9E:12:7C:B3:D1:3C:BC:50:08:69:7D:86:F8:CB:54:02
X509v3 Authority Key Identifier:
keyid:42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/hRk-eJ4SfLPRPLxQCGl9hvjLVAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.8.141.0/24
185.8.143.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:8c:82:83:5b:34:fb:59:fe:55:be:5e:38:28:d5:ad:8e:34:
31:7f:de:d6:88:dc:7c:b9:91:99:b2:34:00:e0:f8:8e:3b:22:
0f:dc:29:8f:59:22:88:0a:b5:82:18:c6:80:28:04:a8:d7:96:
30:06:84:1f:6e:c3:e7:23:ba:58:91:7f:6e:13:7f:89:15:16:
56:6b:9e:6f:38:75:85:a4:d9:bf:0a:e9:ef:d1:7b:3a:7e:17:
24:f7:20:b0:09:11:0b:1c:d2:0e:cb:b3:19:51:b0:5f:0b:71:
b4:18:a5:98:d6:94:4b:35:11:b2:88:9b:37:cc:6f:79:13:86:
84:21:d5:a8:2e:5e:74:95:37:ae:15:4e:7c:d2:dc:e7:88:5d:
a1:ba:97:76:84:e8:29:55:97:c6:20:38:04:4d:28:b6:72:2f:
bb:fd:f2:e0:7e:37:fa:b4:17:6b:02:b1:1d:0a:9a:9c:68:45:
23:99:1a:2e:b3:b3:68:16:3c:bb:ae:dc:1a:7b:77:c6:5d:3b:
47:30:a3:47:f1:c9:d8:f0:9a:cb:9d:a1:23:fc:b8:ba:b3:2f:
64:4f:c4:01:4c:1c:26:29:0d:f5:b4:59:76:90:0f:31:bc:8a:
fb:47:b6:f4:94:e5:76:36:2b:fd:92:a9:d2:c2:8e:d0:99:ab:
92:38:d6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:09 2024 by rpki-client on console-fra.rpki-client.org