Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/eVf6IS8Go99Drh0wvN4AfMXuAow.roa
File: eVf6IS8Go99Drh0wvN4AfMXuAow.roa (raw, json)
Hash identifier: rV5pfAsJnA2ZxlWvXbsisLAmx1l09SpI7apYuizslWA=
Subject key identifier: 79:57:FA:21:2F:06:A3:DF:43:AE:1D:30:BC:DE:00:7C:C5:EE:02:8C
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018B3EC51A5667BA2216C6191979AAEA882C
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/eVf6IS8Go99Drh0wvN4AfMXuAow.roa
Signing time: Tue 17 Oct 2023 17:53:06 +0000
ROA not before: Tue 17 Oct 2023 17:53:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52041
IP address blocks: 82.215.64.0/24 maxlen: 24
185.248.134.0/24 maxlen: 24
2a12:bec0:7004::/48 maxlen: 48
2a12:bec0:7002::/48 maxlen: 48
2a12:bec1:b00b::/48 maxlen: 48
2a12:bec0:d0::/44 maxlen: 48
2a12:bec0:7000::/48 maxlen: 48
2a12:bec0:b00b::/48 maxlen: 48
2a12:bec0:7003::/48 maxlen: 48
2a12:bec0:7006::/48 maxlen: 48
2a12:bec2::/32 maxlen: 32
2a12:bec0:7001::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 20 Oct 2023 08:19:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3e:c5:1a:56:67:ba:22:16:c6:19:19:79:aa:ea:88:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Oct 17 17:53:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7957fa212f06a3df43ae1d30bcde007cc5ee028c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:62:b1:0f:14:a7:3f:d4:c7:21:68:8a:8e:9c:
8e:ea:31:f3:a2:77:aa:67:4f:60:e9:61:ac:76:8c:
59:de:37:04:96:6a:10:42:10:6b:9b:d0:23:8c:64:
24:48:df:41:75:a8:c0:97:09:cf:c9:c7:bb:53:57:
3d:a4:51:85:07:5c:10:a0:db:09:21:e8:96:0f:8c:
b6:57:0a:52:89:43:13:5b:73:2f:4e:89:6a:3c:0c:
9f:11:34:ae:2b:2b:08:82:41:ce:a5:82:8f:18:35:
91:c6:08:af:01:85:87:0a:04:55:60:9d:0e:da:68:
bd:59:ce:2d:b0:74:cb:4d:a1:c9:da:80:f6:be:6f:
60:5d:0d:19:52:ee:30:f1:f2:7a:58:6e:47:c7:97:
7b:3a:85:26:df:5c:35:fa:a7:3b:2d:78:f9:8d:e6:
9c:f0:a3:fd:07:18:54:62:ee:bb:5e:79:c5:30:10:
31:fe:e3:69:be:d4:4f:00:ec:91:4b:08:ea:3d:55:
47:1f:2a:cb:cc:51:69:ec:85:c1:ee:73:c2:12:dc:
cc:15:73:ca:1a:f6:ff:4c:09:1a:60:ea:d1:cb:17:
81:39:67:87:b9:82:ab:6e:43:1a:f5:b2:91:96:fd:
ec:e6:3b:d5:29:da:eb:c4:ff:a8:41:b5:96:70:a4:
82:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:57:FA:21:2F:06:A3:DF:43:AE:1D:30:BC:DE:00:7C:C5:EE:02:8C
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/eVf6IS8Go99Drh0wvN4AfMXuAow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.215.64.0/24
185.248.134.0/24
IPv6:
2a12:bec0:d0::/44
2a12:bec0:7000::-2a12:bec0:7004:ffff:ffff:ffff:ffff:ffff
2a12:bec0:7006::/48
2a12:bec0:b00b::/48
2a12:bec1:b00b::/48
2a12:bec2::/32
Signature Algorithm: sha256WithRSAEncryption
86:39:bb:b5:a4:b1:03:b3:c6:68:ef:0d:d2:fb:6f:4e:fd:4c:
8c:7b:7c:35:35:92:3f:fe:a9:7e:54:91:64:91:ff:8e:d6:d6:
73:df:02:64:cf:e9:9c:b8:35:83:16:16:a8:a3:86:c9:6d:c0:
0f:2a:7d:0c:df:9e:54:c7:19:51:8f:42:50:44:57:03:48:86:
f4:e2:d4:92:45:b4:3b:99:95:64:01:07:46:2e:f9:66:60:71:
b2:d0:96:e9:3e:ae:69:75:b8:55:bb:4e:95:ea:b4:b6:a4:0e:
db:0a:65:57:41:ad:23:8f:d6:bd:9a:5b:a0:16:96:7c:e4:52:
71:89:41:05:fe:4a:6f:37:ea:e4:ae:fe:3b:ba:a7:52:0c:40:
4a:2b:83:52:b0:2d:ef:a1:20:cd:d2:ff:a3:7f:de:01:09:77:
15:5f:96:14:0a:db:b2:c4:c3:cc:f5:ae:f4:93:6e:52:cf:a7:
00:dd:0b:61:05:6f:ba:c1:60:dc:1d:f4:13:bf:a6:83:ff:af:
64:6e:65:ae:98:f2:fb:87:6a:58:2a:a7:6e:53:18:63:e6:ef:
92:96:e2:e6:b5:54:4c:c7:c5:58:15:16:78:35:ca:d3:7d:d4:
f3:b2:2c:cb:b0:46:21:17:c0:6d:5e:02:c5:34:77:75:ce:d7:
1f:c5:d2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org