Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/8cULwCdvsPrfLcxRsmFSxto91DI.roa
File: 8cULwCdvsPrfLcxRsmFSxto91DI.roa (raw, json)
Hash identifier: K+zx3tsXWdoVsq4S/tra6c4FVN9J4aro8vtDAZEA1ac=
Subject key identifier: F1:C5:0B:C0:27:6F:B0:FA:DF:2D:CC:51:B2:61:52:C6:DA:3D:D4:32
Certificate issuer: /CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Certificate serial: 018CFE0CCC209A72835D0A74823508D9B353
Authority key identifier: F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/8cULwCdvsPrfLcxRsmFSxto91DI.roa
Signing time: Fri 12 Jan 2024 14:21:40 +0000
ROA not before: Fri 12 Jan 2024 14:21:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57558
IP address blocks: 45.129.248.0/22 maxlen: 22
185.197.10.0/24 maxlen: 24
185.197.11.0/24 maxlen: 24
185.197.8.0/23 maxlen: 23
185.15.168.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 09 Apr 2024 11:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fe:0c:cc:20:9a:72:83:5d:0a:74:82:35:08:d9:b3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Validity
Not Before: Jan 12 14:21:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1c50bc0276fb0fadf2dcc51b26152c6da3dd432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ee:2c:b6:d7:87:74:60:d2:46:31:a7:5f:28:
83:cd:8d:1c:76:32:73:f7:f1:8b:d6:a2:e8:89:08:
7a:ce:da:3c:1e:f6:39:c9:89:f7:b2:e7:83:ae:99:
42:a0:12:90:aa:3e:95:e2:1a:fb:00:90:87:c7:3d:
45:a7:43:27:b7:3b:bb:7e:81:c5:35:07:38:fe:2d:
e4:44:4d:e3:62:66:dc:e3:44:f1:a2:cd:96:00:a2:
95:8b:04:55:0f:21:cb:e2:75:00:49:10:ff:65:6c:
2a:09:1c:bf:07:9d:f7:94:d8:fa:d3:5a:fd:8b:7c:
a1:36:7f:63:fe:d1:d0:9f:a4:13:98:70:c0:8e:ef:
70:85:00:b9:4f:45:6a:a5:c2:01:09:e8:02:cd:d1:
a3:7c:31:f9:0c:cd:a0:46:30:30:ae:e8:4b:14:73:
19:7b:e4:04:94:1c:1d:dc:9b:f8:75:f1:ee:3d:fe:
b1:fe:ab:1e:c3:c9:6d:cb:60:90:cc:b4:a3:35:fc:
6e:6d:ae:dc:5f:36:5a:25:cc:a0:b3:fd:f8:e1:cc:
f6:2c:f6:51:e3:e5:3b:54:6f:24:aa:36:58:a6:9e:
80:a2:69:ad:2a:7c:a0:ec:d2:f0:05:36:1d:a5:4a:
d5:3f:12:85:57:70:76:41:29:ed:61:d9:c2:c7:99:
4e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C5:0B:C0:27:6F:B0:FA:DF:2D:CC:51:B2:61:52:C6:DA:3D:D4:32
X509v3 Authority Key Identifier:
keyid:F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/8cULwCdvsPrfLcxRsmFSxto91DI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.248.0/22
185.15.168.0/22
185.197.8.0/22
Signature Algorithm: sha256WithRSAEncryption
15:6e:63:30:43:46:23:6a:40:39:46:06:ef:90:06:43:d0:26:
6a:98:18:3e:49:8a:08:4e:f8:32:50:94:7b:38:ed:c2:5e:d5:
aa:73:da:51:d7:24:9d:bc:4e:8d:99:ad:a1:11:00:bf:64:b9:
15:8b:3b:f1:da:09:fa:c8:81:93:9d:d7:3d:20:84:5e:37:4f:
72:d6:b9:0d:5c:9e:8f:ba:47:b3:22:62:01:05:ce:31:f1:59:
83:78:a8:4e:31:a7:5e:bf:7b:b3:d4:ec:95:62:97:33:c8:e2:
5d:76:e3:0b:dc:ed:18:c6:70:d7:fe:3b:59:22:53:06:0a:35:
d6:7e:93:62:d9:86:34:98:77:30:ef:48:c8:a8:e7:b2:8e:2c:
e9:af:b5:f3:1e:93:07:dd:7e:b8:5e:14:fc:dd:16:f5:bf:52:
f9:a2:b3:9b:ea:7d:94:6b:2b:a5:aa:b9:39:3d:4b:4b:07:93:
ae:08:9a:6b:9b:05:c1:30:21:5f:e9:1d:15:7a:db:4e:f7:5f:
ee:67:a6:88:d6:80:3d:db:ec:7d:34:04:db:c9:d2:6e:96:c6:
43:99:d6:fa:bd:71:5e:09:81:79:f4:d7:06:8a:17:2e:ec:8c:
74:bc:6a:7f:f7:4d:b7:49:3f:1d:67:02:ce:72:13:54:aa:a5:
0a:e1:9f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 9 15:26:11 2024 by rpki-client on console-ams.rpki-client.org