Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/Fs6DRZvz0N6mRspBQPLuBJvMGqQ.roa
File: Fs6DRZvz0N6mRspBQPLuBJvMGqQ.roa (raw, json)
Hash identifier: s7tOgU5lWueV6bJ7EFTlTM7MMfZgmHxduHFXCOtWllk=
Subject key identifier: 16:CE:83:45:9B:F3:D0:DE:A6:46:CA:41:40:F2:EE:04:9B:CC:1A:A4
Certificate issuer: /CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
Certificate serial: 019301F4337A2426009A16C0E264D4AC4BB7
Authority key identifier: ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/Fs6DRZvz0N6mRspBQPLuBJvMGqQ.roa
Signing time: Wed 06 Nov 2024 14:50:01 +0000
ROA not before: Wed 06 Nov 2024 14:50:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51840
IP address blocks: 185.27.58.0/24 maxlen: 24
185.27.59.0/24 maxlen: 24
185.218.148.0/22 maxlen: 22
185.218.148.0/24 maxlen: 24
185.218.149.0/24 maxlen: 24
185.218.150.0/24 maxlen: 24
185.218.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:52:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:01:f4:33:7a:24:26:00:9a:16:c0:e2:64:d4:ac:4b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
Validity
Not Before: Nov 6 14:50:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16ce83459bf3d0dea646ca4140f2ee049bcc1aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ef:f3:d0:40:c3:55:f1:19:d8:44:11:9a:0b:
07:c3:03:d5:5d:bf:a2:87:ad:5f:8e:3a:59:df:6c:
c8:42:53:80:cf:97:fa:ea:a3:73:66:42:8e:dd:48:
30:dc:19:f5:ff:cf:f2:ef:88:11:f3:4e:b5:97:61:
79:a9:48:65:22:e3:ca:91:50:e2:07:5f:4e:18:04:
6a:3a:21:19:e8:d8:70:1d:96:74:14:fe:1f:a5:2b:
74:e2:d2:ac:d7:42:eb:48:95:d4:91:df:8c:5c:3c:
ea:46:3a:22:f9:f4:5f:03:30:c2:68:5e:50:74:ea:
0d:2d:cf:57:53:28:04:8b:c7:5d:cf:f8:83:b2:92:
bf:c8:95:92:7f:8b:e6:99:14:3a:66:45:d8:00:a0:
4a:23:2f:96:90:53:85:c9:12:eb:c2:42:dc:dc:71:
74:a2:1e:f4:13:d9:8f:77:d6:de:20:1e:39:94:07:
fe:f0:14:71:73:92:1d:ec:f5:e0:65:34:04:0f:60:
be:cd:63:d4:29:13:01:6c:f7:fd:9f:b0:83:1b:7c:
9f:c7:de:b6:78:83:71:cd:37:1e:a8:40:07:a7:ce:
a9:47:0a:6c:23:03:b1:fd:39:ec:2f:6d:c4:fe:d7:
35:80:44:71:5e:93:29:b2:4b:fc:dc:7f:3b:d9:18:
ab:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CE:83:45:9B:F3:D0:DE:A6:46:CA:41:40:F2:EE:04:9B:CC:1A:A4
X509v3 Authority Key Identifier:
keyid:ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/Fs6DRZvz0N6mRspBQPLuBJvMGqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.58.0/23
185.218.148.0/22
Signature Algorithm: sha256WithRSAEncryption
e5:8c:aa:9f:c4:11:92:41:49:e3:4c:fa:4d:f8:24:26:b4:89:
fb:bf:8a:b6:5b:d6:06:4c:d5:d1:80:b6:d2:7c:79:67:bf:ab:
29:5d:31:77:71:21:74:0f:2a:bb:dc:7d:cd:a5:30:1a:71:9f:
79:e1:4a:5e:1a:c5:0a:97:a6:33:8d:79:e7:56:e1:82:e3:17:
65:d8:c5:fb:7f:c6:4c:91:58:3e:5f:17:87:a3:06:e9:d5:84:
09:bc:b8:b8:d7:ac:3a:cc:15:d4:e6:4d:49:68:ff:4b:5d:cf:
10:31:c3:dd:70:21:81:69:b4:ef:74:ae:cc:b1:46:33:95:af:
d3:85:84:5d:9e:7b:60:41:73:da:ee:67:0b:39:8b:b4:50:e5:
d6:0a:80:44:03:ac:06:da:31:05:d1:08:c1:2a:9a:87:3a:c9:
9e:2a:a6:a6:f9:7c:c6:f3:aa:b4:8e:3b:44:63:2e:90:6b:c7:
e9:3b:c0:a1:bc:24:6e:40:fa:b1:cd:74:2e:a9:21:d6:84:45:
b1:3b:0a:ec:ab:4d:61:1e:6b:6b:96:ed:bf:16:43:40:75:d3:
23:41:bd:fd:13:b7:20:7f:e5:90:e5:0f:41:4f:38:d4:63:20:
55:e4:67:06:b9:b0:a3:9e:9c:6d:6d:31:59:30:5a:9e:c0:31:
76:9c:76:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:22 2025 by rpki-client