Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/N3srY5m1CYFDzyTwSfwM-vFZxlw.roa
File: N3srY5m1CYFDzyTwSfwM-vFZxlw.roa (raw, json)
Hash identifier: k94y9yassw2sdBpXIsi5YfF4i5tQG44WNZ89M01EyIc=
Subject key identifier: 37:7B:2B:63:99:B5:09:81:43:CF:24:F0:49:FC:0C:FA:F1:59:C6:5C
Certificate issuer: /CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Certificate serial: 018728B035732B95CA21C16C22F2EF288899
Authority key identifier: 95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/N3srY5m1CYFDzyTwSfwM-vFZxlw.roa
Signing time: Tue 28 Mar 2023 14:47:29 +0000
ROA not before: Tue 28 Mar 2023 14:47:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202105
IP address blocks: 185.82.116.0/24 maxlen: 24
185.82.117.0/24 maxlen: 24
185.82.118.0/24 maxlen: 24
185.82.119.0/24 maxlen: 24
87.237.224.0/24 maxlen: 24
185.51.206.0/24 maxlen: 24
185.51.205.0/24 maxlen: 24
185.51.204.0/24 maxlen: 24
185.51.207.0/24 maxlen: 24
83.136.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Mar 2023 05:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:28:b0:35:73:2b:95:ca:21:c1:6c:22:f2:ef:28:88:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Validity
Not Before: Mar 28 14:47:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=377b2b6399b5098143cf24f049fc0cfaf159c65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d1:bb:71:db:55:55:d1:c6:b9:a8:f3:cd:53:
e3:67:73:99:ee:6c:0f:fc:11:63:b7:23:9f:8a:99:
68:82:37:d9:6a:a0:14:f9:58:7c:4f:06:b1:5a:37:
d9:a1:65:ee:6f:54:2c:4d:b3:9a:0a:45:1a:7e:56:
f7:16:97:0f:d7:2b:69:cc:5d:8f:20:4f:e3:60:82:
b2:72:15:5e:0c:90:6f:3f:48:d3:3a:86:91:9f:fa:
72:3c:d3:46:0a:d0:cb:f4:b7:ba:b4:1a:bf:28:5a:
dc:3d:09:c0:7e:ed:03:c4:02:cc:ba:4f:95:4b:51:
2a:b0:94:f3:5c:4c:96:ea:a0:e5:89:d9:e3:3f:7a:
40:4c:78:5b:ee:fc:0d:a1:25:af:21:55:ab:c4:6f:
2e:3c:99:3b:e0:60:77:ba:52:20:6c:93:f9:ba:d8:
57:31:b8:7e:23:ed:65:2e:63:6e:b3:30:93:a0:11:
7a:07:d7:41:ff:e5:56:82:3f:80:2f:90:bf:68:4f:
49:64:f4:c0:10:a9:6e:c4:93:29:23:52:ce:c4:6d:
3f:d2:b5:03:a0:b8:4e:a0:ea:b5:9b:a0:37:23:0d:
c9:dc:92:73:14:f4:e1:10:d0:a2:cb:1a:76:ce:c6:
29:2a:fb:f6:15:91:8c:de:49:43:af:9c:85:71:18:
f0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7B:2B:63:99:B5:09:81:43:CF:24:F0:49:FC:0C:FA:F1:59:C6:5C
X509v3 Authority Key Identifier:
keyid:95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/N3srY5m1CYFDzyTwSfwM-vFZxlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.8.0/24
87.237.224.0/24
185.51.204.0/22
185.82.116.0/22
Signature Algorithm: sha256WithRSAEncryption
81:8e:63:11:08:f6:60:1c:18:6b:ba:5c:d1:e2:17:77:d8:b0:
04:50:62:30:02:64:50:eb:4a:36:a8:4c:dd:3e:6e:f1:b9:11:
84:30:f6:4a:c4:2c:6f:f6:22:e1:3f:d8:62:1c:32:aa:aa:ae:
6d:5e:30:cd:3d:f5:d8:cf:7e:19:a1:b0:b6:0c:49:a0:c8:e8:
87:71:e8:74:01:6b:fb:5c:f7:e8:4d:d3:26:4a:b7:39:44:cb:
17:03:8c:06:45:83:88:fb:6e:7c:67:35:9e:0f:95:3d:b8:1a:
ec:45:80:d2:2e:be:1c:3e:c4:c7:22:7f:38:01:ad:44:7e:fc:
c1:88:3c:f9:3c:15:43:96:fa:65:6c:26:07:2f:bb:89:f9:a0:
9b:7c:dd:1b:c7:8f:2c:15:e1:46:13:18:30:68:a5:b1:a7:f7:
54:cd:55:fd:4c:0f:10:a4:35:62:d3:99:a5:f7:5f:fe:36:f4:
e4:93:df:66:82:88:c6:f9:d2:54:40:87:be:29:a5:b9:7a:a0:
4a:da:2b:b6:63:3f:30:60:0e:29:82:3b:e7:e0:f8:6f:81:ef:
30:b1:3b:36:08:59:d7:89:83:dd:61:96:38:71:4e:c7:de:0a:
63:ae:35:46:bf:37:22:61:fc:30:28:15:d2:e9:a2:d9:2a:55:
62:b0:eb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:26 2024 by rpki-client on console-fra.rpki-client.org