Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/b_0Ey69CUJYiKb1vtRpXcEjfp2g.roa
File: b_0Ey69CUJYiKb1vtRpXcEjfp2g.roa (raw, json)
Hash identifier: 2i5GRyexDuNan2ls49FeHLJcv+f/L7tuXpfkoIPbWzk=
Subject key identifier: 6F:FD:04:CB:AF:42:50:96:22:29:BD:6F:B5:1A:57:70:48:DF:A7:68
Certificate issuer: /CN=2c11a53f6df6300b4912ce13f6fa9b100fce2488
Certificate serial: 01856D2F1DF54ABB1EE547260F529EA0F9BC
Authority key identifier: 2C:11:A5:3F:6D:F6:30:0B:49:12:CE:13:F6:FA:9B:10:0F:CE:24:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/b_0Ey69CUJYiKb1vtRpXcEjfp2g.roa
Signing time: Sun 01 Jan 2023 11:54:42 +0000
ROA not before: Sun 01 Jan 2023 11:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212562
IP address blocks: 185.108.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:1d:f5:4a:bb:1e:e5:47:26:0f:52:9e:a0:f9:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c11a53f6df6300b4912ce13f6fa9b100fce2488
Validity
Not Before: Jan 1 11:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ffd04cbaf4250962229bd6fb51a577048dfa768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c4:0f:d7:54:80:a0:1f:66:31:19:07:82:e4:
bf:c7:38:e5:5f:36:68:59:d5:2f:cb:91:43:9b:85:
88:6b:92:8f:4a:b4:ec:cc:47:94:ea:0d:dd:01:f2:
c4:2e:4a:d1:6f:fc:d7:2c:71:c7:7f:be:7a:95:e2:
09:16:7d:f2:f4:65:8a:c9:b0:6e:95:b2:65:09:62:
eb:bf:65:6c:4a:e8:03:50:11:4d:10:89:ba:39:a4:
e1:73:2a:01:e9:33:2d:ca:e0:ae:67:cc:a9:aa:7e:
41:33:ab:37:2f:d4:6c:f6:90:a5:ed:8c:fe:f7:53:
8b:52:3b:11:c4:4b:5b:b1:5b:aa:b6:eb:94:1a:b1:
4e:82:5b:1b:01:f2:64:a6:ad:66:1f:54:2c:58:0b:
35:b9:51:89:33:80:7d:a6:07:58:21:10:32:f1:e8:
1d:ce:1b:8c:a5:e7:b7:dc:cf:bd:de:1e:2e:f6:b8:
7a:50:97:e8:19:4e:67:ea:fe:94:ce:e4:f8:a8:7e:
95:31:8d:79:53:e4:e5:dc:f5:58:c1:da:d2:4a:db:
48:cd:d9:75:6e:07:7a:4b:ec:c5:d7:ce:db:50:46:
08:53:a2:18:55:6b:8b:1e:36:10:5f:55:04:bf:66:
dc:14:a1:2f:0b:fe:20:3d:79:b0:14:3e:9e:d8:18:
52:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FD:04:CB:AF:42:50:96:22:29:BD:6F:B5:1A:57:70:48:DF:A7:68
X509v3 Authority Key Identifier:
keyid:2C:11:A5:3F:6D:F6:30:0B:49:12:CE:13:F6:FA:9B:10:0F:CE:24:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/b_0Ey69CUJYiKb1vtRpXcEjfp2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.125.0/24
Signature Algorithm: sha256WithRSAEncryption
46:77:80:2a:cc:a6:cf:74:9a:e4:f3:78:4d:5b:35:0b:11:b1:
b3:e0:8f:d0:51:27:57:1b:85:c8:c1:88:ad:98:58:30:d9:27:
75:d5:9a:5f:81:71:d4:36:ea:aa:2b:b2:94:19:cc:48:52:20:
e7:b7:2c:13:9f:a5:fe:67:ab:2a:ef:7e:60:50:6d:ad:bb:44:
25:50:74:53:9e:ad:c6:31:3d:32:d2:e3:3c:db:61:5f:27:87:
5f:33:dc:f4:dc:53:d2:86:91:a7:d1:91:cd:d9:b9:98:44:7e:
3d:c6:49:43:aa:f0:1b:71:74:ab:9f:34:fd:18:81:39:1e:5b:
f2:8e:ef:14:23:6d:83:a3:db:e0:07:ff:3d:90:81:3c:46:0b:
7d:79:bc:c0:4b:ec:f8:c8:48:1e:2b:3d:3c:92:c1:0c:c0:34:
13:1d:c9:58:bd:03:fa:58:c2:ca:82:0c:40:27:b6:66:17:14:
50:f2:e9:14:79:81:58:5b:02:a5:2b:b0:99:d6:fc:a2:99:af:
b4:2b:ea:fe:0d:28:88:2b:cf:d5:c0:c0:ef:71:a9:dd:fa:e7:
4d:34:62:22:9d:0f:d7:1f:a8:b4:a6:5c:d9:90:4c:5b:8b:0f:
88:73:ad:f2:13:ed:8e:c4:d8:97:ca:3c:a4:6d:0e:f2:2b:3d:
56:78:ca:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:23 2024 by rpki-client on console-ams.rpki-client.org