Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/8BEv614DheR1ulEk0An-k_ieWfg.roa
File: 8BEv614DheR1ulEk0An-k_ieWfg.roa (raw, json)
Hash identifier: 9v4BFfexfYiDYhXHEaN9PLFm7SsZcUvdEYQpXmtz2eo=
Subject key identifier: F0:11:2F:EB:5E:03:85:E4:75:BA:51:24:D0:09:FE:93:F8:9E:59:F8
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 01856BCA1AC70353332B078489797D72D24C
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/8BEv614DheR1ulEk0An-k_ieWfg.roa
Signing time: Sun 01 Jan 2023 05:24:45 +0000
ROA not before: Sun 01 Jan 2023 05:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 193.110.161.0/24 maxlen: 24
194.55.128.0/24 maxlen: 24
91.229.5.0/24 maxlen: 24
45.85.247.0/24 maxlen: 24
193.201.202.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ca:1a:c7:03:53:33:2b:07:84:89:79:7d:72:d2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Jan 1 05:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0112feb5e0385e475ba5124d009fe93f89e59f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3c:ab:c7:7e:24:9c:44:f1:e6:e9:d9:9a:b1:
b8:70:4b:2e:c5:33:de:a4:d1:a3:4d:fe:c6:69:90:
81:ef:c6:27:97:11:a9:4e:d9:d2:b6:1c:e6:6c:02:
91:d3:5e:a4:b1:a6:4c:df:e3:ea:6a:ad:f7:52:eb:
ef:f4:4d:55:56:1c:38:a3:46:ce:5c:68:fc:50:46:
41:b6:a8:e6:de:9b:8b:6a:2b:e8:53:c5:e3:37:6a:
de:a4:bd:6f:fb:09:01:64:f7:d1:45:cf:eb:4d:8b:
16:eb:98:20:41:0d:00:fa:ea:7c:5c:71:8e:a9:43:
46:86:98:95:95:93:09:5d:dd:ee:2b:ff:6c:ac:1e:
13:ee:74:48:35:64:e0:93:8e:e6:7a:35:1e:91:50:
cf:ab:9e:b1:06:68:9a:4a:0e:09:e0:2c:95:b0:80:
2d:c6:0d:a7:65:de:fb:75:f6:a7:be:36:c4:3b:80:
e6:78:ab:6d:2e:71:01:3c:56:a0:7f:35:d6:47:72:
dd:9e:45:3d:0f:9f:8a:da:cc:86:8c:5c:4c:ec:9a:
56:79:1e:e9:d3:9c:cd:7f:94:10:ba:2c:79:10:a7:
92:54:27:b9:5c:29:c3:3c:09:ec:e5:89:be:0a:d1:
8b:e4:42:f8:78:3e:82:d0:d7:14:63:8c:68:26:24:
b1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:11:2F:EB:5E:03:85:E4:75:BA:51:24:D0:09:FE:93:F8:9E:59:F8
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/8BEv614DheR1ulEk0An-k_ieWfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.247.0/24
91.229.5.0/24
193.110.161.0/24
193.201.202.0/24
194.55.128.0/24
Signature Algorithm: sha256WithRSAEncryption
63:7f:3a:f5:16:9d:c2:a4:5c:9a:06:bd:1f:fb:29:16:60:f8:
57:3e:fc:4d:04:73:65:63:05:90:8d:f2:37:fd:33:2b:b9:da:
c9:d1:61:a6:3d:d3:f7:ea:a3:ef:0c:cf:f3:8c:fd:73:a6:a7:
a7:c7:7c:25:59:4d:bf:ca:45:b2:6b:aa:ff:11:0f:ac:33:8c:
6e:ae:62:93:d5:96:69:0a:02:32:d6:da:79:96:87:a2:6f:60:
cd:07:76:8a:c6:0a:2e:9c:b9:77:4e:78:5c:1e:68:8b:bb:98:
16:5a:51:0b:64:82:65:bf:a6:4e:07:95:56:9d:e7:d7:d2:7f:
28:ca:16:76:1d:45:db:62:f2:f0:37:45:6b:a9:65:d9:fa:a0:
af:af:c9:5a:72:01:15:2a:2c:bb:66:64:23:2c:dc:5f:cc:e4:
0a:fa:83:c0:9d:e3:e4:b9:c0:88:f9:f0:57:d5:b8:1c:54:e9:
01:43:35:03:60:3b:51:3d:a2:3b:47:0c:ad:e7:37:47:53:da:
25:77:11:bb:2f:f6:7c:64:c1:1a:6f:87:b5:bb:a8:62:1c:df:
c3:60:d9:29:29:73:15:0f:93:6d:df:78:e4:b5:6a:bd:c9:62:
81:12:07:e4:6f:ab:d9:be:09:33:9d:a4:c6:0f:3e:e5:68:f4:
f9:eb:6b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 1 06:59:54 2023 by rpki-client on console-fra.rpki-client.org