Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/63tNssHG1HmIPtKLYOY0DGk09z8.roa
File: 63tNssHG1HmIPtKLYOY0DGk09z8.roa (raw, json)
Hash identifier: 1K0ygVbkIAYDOqTf52XhTKt/yTmHw2y3a7ph6pXKtoQ=
Subject key identifier: EB:7B:4D:B2:C1:C6:D4:79:88:3E:D2:8B:60:E6:34:0C:69:34:F7:3F
Certificate issuer: /CN=58d2d2715f43f747bea762dce166bca4b8e965eb
Certificate serial: 018CC500348A4AEF904F4E5371F9E318B998
Authority key identifier: 58:D2:D2:71:5F:43:F7:47:BE:A7:62:DC:E1:66:BC:A4:B8:E9:65:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/63tNssHG1HmIPtKLYOY0DGk09z8.roa
Signing time: Mon 01 Jan 2024 12:29:34 +0000
ROA not before: Mon 01 Jan 2024 12:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6786
IP address blocks: 85.215.0.0/19 maxlen: 24
85.214.9.0/24 maxlen: 24
85.214.11.0/24 maxlen: 24
2a01:238:e000::/35 maxlen: 48
2a01:238:3000::/36 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 Feb 2024 14:51:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:34:8a:4a:ef:90:4f:4e:53:71:f9:e3:18:b9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d2d2715f43f747bea762dce166bca4b8e965eb
Validity
Not Before: Jan 1 12:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb7b4db2c1c6d479883ed28b60e6340c6934f73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9b:b0:ff:2d:19:62:ab:60:2d:0a:fd:c9:06:
36:50:bf:6e:66:95:9c:d5:11:26:cb:30:11:26:48:
cb:9f:4f:2f:78:45:bb:ab:bf:12:0d:cf:97:30:25:
ea:8c:95:23:42:34:85:6f:c6:aa:07:39:ae:3c:c6:
4b:45:35:13:78:ce:58:70:95:7e:5a:1d:3a:fe:fc:
cb:64:df:9f:86:95:fc:65:d1:18:45:e8:87:59:cb:
04:3f:6a:9d:01:bf:73:88:eb:57:5f:9b:5b:1c:f7:
51:3e:16:58:4e:1c:60:03:ef:3e:0a:07:72:11:af:
7f:67:da:a7:38:67:c5:32:44:bd:c1:37:5b:99:18:
45:76:9a:17:ed:52:07:7e:68:7f:d1:d0:54:c7:ca:
30:4f:e2:57:dc:ca:9a:c6:02:fd:75:c3:8b:b4:f5:
fe:84:19:2a:fd:f0:f2:1a:db:fa:36:2a:3e:36:77:
46:c3:3b:c9:a6:33:45:91:14:a3:f8:59:6a:50:2b:
bc:5f:05:56:c8:0f:a7:02:72:eb:16:23:8d:a1:32:
32:04:d8:43:f5:04:40:ff:6a:21:d1:75:de:ff:07:
75:18:85:d4:e7:37:47:08:ba:c2:3f:f1:bc:40:34:
12:b9:64:66:3a:0a:f8:54:fa:7a:4f:e5:37:d5:b5:
97:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7B:4D:B2:C1:C6:D4:79:88:3E:D2:8B:60:E6:34:0C:69:34:F7:3F
X509v3 Authority Key Identifier:
keyid:58:D2:D2:71:5F:43:F7:47:BE:A7:62:DC:E1:66:BC:A4:B8:E9:65:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/63tNssHG1HmIPtKLYOY0DGk09z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.214.9.0/24
85.214.11.0/24
85.215.0.0/19
IPv6:
2a01:238:3000::/36
2a01:238:e000::/35
Signature Algorithm: sha256WithRSAEncryption
79:49:3f:2d:59:d2:2b:fb:36:b6:39:42:68:2c:c8:4e:57:98:
52:ad:7f:8e:38:23:2e:22:06:87:5a:8e:47:66:e1:98:b1:bb:
a2:9e:ad:a3:ee:30:e7:e2:97:ad:85:52:f4:99:40:23:3d:fa:
c2:9c:de:b6:5e:7c:be:7e:1a:a1:d7:f1:3d:99:24:44:0b:25:
37:13:dc:95:33:b2:2f:0e:10:a4:de:73:dd:fc:31:0a:11:de:
48:96:5e:42:68:16:b6:c0:d5:81:40:a3:53:88:9d:56:7f:a8:
e5:50:44:0b:96:7a:c1:70:35:0b:ac:d7:85:01:e4:e2:c3:92:
f8:c9:c6:c7:7e:4b:9b:2d:95:2b:97:9f:a3:93:68:4c:f8:3d:
8e:b8:3c:35:d0:7f:2c:38:72:41:07:b9:28:a4:06:6c:98:94:
f2:48:7a:46:61:4f:4a:50:21:44:e6:3f:34:9a:ed:c2:a9:ad:
cc:a5:c4:31:9c:4a:b7:a7:e6:8f:93:60:f7:08:e3:97:4b:3e:
a6:e6:99:e5:6a:01:c3:ab:1d:5c:3a:5f:8e:4e:9d:84:7f:d7:
a2:f0:47:5c:dc:82:04:48:fd:7c:5f:a9:e1:24:b3:47:d4:1e:
2d:97:59:91:9d:71:07:e2:f4:50:5e:20:98:12:c8:36:e6:07:
44:09:1c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:20:37 2025 by rpki-client