Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/7IuFK43dzNHhG-sX-1M852Avvg0.roa
File: 7IuFK43dzNHhG-sX-1M852Avvg0.roa (raw, json)
Hash identifier: TBcHbkabOpe4NlRMGruO13RhWl6zUZoN/b9WD2xI5m0=
Subject key identifier: EC:8B:85:2B:8D:DD:CC:D1:E1:1B:EB:17:FB:53:3C:E7:60:2F:BE:0D
Certificate issuer: /CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Certificate serial: 018CC64B0258AEDD54AEB75C2D35DE313EC0
Authority key identifier: 1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/7IuFK43dzNHhG-sX-1M852Avvg0.roa
Signing time: Mon 01 Jan 2024 18:30:53 +0000
ROA not before: Mon 01 Jan 2024 18:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33846
IP address blocks: 185.223.104.0/22 maxlen: 22
141.91.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:02:58:ae:dd:54:ae:b7:5c:2d:35:de:31:3e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Validity
Not Before: Jan 1 18:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec8b852b8dddccd1e11beb17fb533ce7602fbe0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:71:7c:8e:17:65:a6:ed:64:ae:7b:67:b5:0a:
b2:40:ec:14:af:d9:25:21:9a:fc:de:ff:8e:5a:63:
a4:21:6a:a8:32:89:cf:1e:28:1f:57:bd:10:61:1a:
e5:9e:16:3f:ce:cc:e5:6a:ce:92:2b:6d:9f:14:ea:
42:b1:0b:08:a1:ef:28:1f:22:0c:66:88:65:4a:ba:
e4:ea:82:73:b4:85:e3:c4:50:cf:3b:1c:6e:54:5e:
2b:fb:83:8a:2c:65:28:e2:ef:4c:e6:93:f6:1a:f5:
07:70:e4:8a:19:8c:bd:ac:97:41:e6:fc:9e:af:f5:
a7:de:9a:de:ce:93:cf:24:d1:0f:cb:21:f3:68:3e:
9c:09:15:21:b7:93:c8:5c:84:7d:cd:e6:d2:b2:76:
b1:ff:a5:ac:ba:ed:0e:bc:b9:72:3e:42:58:2d:08:
b2:8b:e3:18:2f:6e:d8:63:cf:13:8a:8a:14:97:1e:
e4:5d:f6:ed:54:4b:45:19:84:6a:8b:b9:00:54:da:
9a:e5:72:67:f1:7f:12:3c:74:f2:b8:31:3e:a5:32:
01:02:73:e4:51:69:a8:31:8e:f5:5a:6d:72:e7:23:
f5:f5:e5:13:b6:7f:43:5c:4b:08:18:ac:b2:19:eb:
00:53:72:40:e1:18:c1:07:03:13:b1:74:32:86:49:
32:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8B:85:2B:8D:DD:CC:D1:E1:1B:EB:17:FB:53:3C:E7:60:2F:BE:0D
X509v3 Authority Key Identifier:
keyid:1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/7IuFK43dzNHhG-sX-1M852Avvg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.91.0.0/16
185.223.104.0/22
Signature Algorithm: sha256WithRSAEncryption
17:3a:82:6a:ea:d0:bf:5d:ba:62:33:ff:39:ed:f2:1a:ba:7a:
fe:73:3a:77:ce:74:5b:ec:ef:78:46:87:9d:b0:86:93:42:75:
a7:cd:49:20:c2:d9:68:de:e7:e2:a5:6c:49:91:ba:aa:25:e9:
aa:45:10:84:f0:e9:a6:f4:36:60:79:bf:0c:a3:92:bd:fd:da:
1c:c4:f8:f0:3a:cb:9e:0c:f6:59:13:12:4a:a7:79:4d:fb:ed:
b2:71:dd:6d:b1:51:e1:ad:31:5f:3e:4f:1c:72:12:fa:e6:0d:
d6:41:96:59:fc:49:ec:9d:f8:93:b2:3d:df:65:7c:e4:9b:db:
8c:c0:57:2e:29:a9:8c:e7:9c:21:09:4f:8c:57:0d:10:76:1f:
86:c4:34:f9:28:9f:f0:b6:c4:1f:44:c5:cf:1e:ef:08:b2:7f:
ad:34:11:55:08:0a:23:02:0c:62:6e:fc:49:18:9e:c0:5e:f7:
12:e2:ee:88:30:e3:3a:c8:7d:04:e7:3f:91:7b:c8:cd:08:4f:
cc:fa:33:8c:f5:a6:9c:04:9d:ba:03:f4:9a:49:96:9f:5e:32:
91:58:db:81:29:ee:77:27:f2:7f:91:8d:c0:9b:ea:e2:78:2b:
9f:c1:b8:5b:11:63:36:91:62:98:f9:e5:6a:6a:7f:33:9b:6e:
60:55:1f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:33:56 2025 by rpki-client