Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/eAeQbrbligVRninVTEPxdrqaFwo.roa
File: eAeQbrbligVRninVTEPxdrqaFwo.roa (raw, json)
Hash identifier: G9usa6NOAlvWiCMVWV3PCmj5UFUKCpIA8PYjMoJCjJg=
Subject key identifier: 78:07:90:6E:B6:E5:8A:05:51:9E:29:D5:4C:43:F1:76:BA:9A:17:0A
Certificate issuer: /CN=58d2d2715f43f747bea762dce166bca4b8e965eb
Certificate serial: 018CC5003539DFAB85FE5F71D257D91CB95B
Authority key identifier: 58:D2:D2:71:5F:43:F7:47:BE:A7:62:DC:E1:66:BC:A4:B8:E9:65:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/eAeQbrbligVRninVTEPxdrqaFwo.roa
Signing time: Mon 01 Jan 2024 12:29:34 +0000
ROA not before: Mon 01 Jan 2024 12:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51862
IP address blocks: 85.215.32.0/19 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 08:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:35:39:df:ab:85:fe:5f:71:d2:57:d9:1c:b9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d2d2715f43f747bea762dce166bca4b8e965eb
Validity
Not Before: Jan 1 12:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7807906eb6e58a05519e29d54c43f176ba9a170a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bf:76:77:8b:f1:f4:18:ed:a0:70:1a:f4:cb:
55:3a:7d:a9:f9:ae:15:89:1c:40:ff:2e:4e:3b:f8:
da:f0:98:d3:8a:1b:b0:db:e7:a0:71:83:01:8f:b0:
58:19:32:a3:87:e3:18:36:99:76:e9:ce:3f:f2:2a:
20:13:d0:d3:d3:59:f0:33:49:f9:72:85:48:4c:78:
4e:af:25:7b:47:25:d2:f4:34:78:32:85:1b:dd:fa:
55:d4:6d:af:2c:5e:d4:ed:6c:c2:b5:ee:32:29:0a:
ae:13:72:55:76:00:7d:cb:35:51:57:87:d2:96:7f:
5a:6c:88:4e:90:6e:e5:92:47:7e:1f:22:1d:f6:2b:
03:b5:ba:82:f8:60:ad:b6:d0:8d:47:87:83:e3:1c:
77:56:5d:57:e2:80:6b:bb:30:5e:83:fc:71:ad:b4:
aa:ae:83:6d:56:c1:ae:ea:7a:a5:44:ad:e2:8e:24:
ec:b5:b1:2a:7d:a1:34:ef:61:91:a2:04:10:97:c0:
12:88:79:19:0a:e6:1f:c8:63:19:bd:ef:7e:33:9f:
c8:0e:2f:88:f6:be:89:58:56:21:12:b9:38:85:cb:
26:a7:a4:41:e5:9e:cd:d7:de:37:03:e6:c0:e2:72:
2a:fb:8b:f5:7f:48:ae:28:06:a7:8e:26:07:25:c8:
67:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:07:90:6E:B6:E5:8A:05:51:9E:29:D5:4C:43:F1:76:BA:9A:17:0A
X509v3 Authority Key Identifier:
keyid:58:D2:D2:71:5F:43:F7:47:BE:A7:62:DC:E1:66:BC:A4:B8:E9:65:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/eAeQbrbligVRninVTEPxdrqaFwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.215.32.0/19
Signature Algorithm: sha256WithRSAEncryption
56:6c:ed:eb:97:10:84:49:ce:40:c9:b3:42:83:0c:02:56:9c:
a5:f8:0a:f7:6d:60:f1:f6:3c:19:bb:8c:39:95:8c:45:d8:67:
d6:55:ab:db:c0:cf:70:06:88:70:9b:62:f4:90:55:03:e4:99:
31:eb:13:5a:92:0b:b3:67:c6:5a:88:c9:90:1c:ab:45:05:ae:
fc:ec:5f:26:be:a3:de:72:53:06:6b:09:bc:cc:dd:18:26:92:
48:fb:b8:38:29:12:42:68:48:7e:a9:c2:b2:c1:dc:04:12:8d:
17:57:74:f2:8c:7c:0d:35:ff:b2:66:37:2a:1f:e1:cf:2d:d6:
9d:9b:be:ff:7e:3c:8a:9d:ca:64:54:fb:64:ec:9b:09:aa:dc:
da:80:01:54:0e:f6:fc:04:b9:17:9f:57:f6:c7:f2:e5:f7:06:
02:3e:77:04:c3:17:94:12:31:c7:47:f7:49:c0:ed:e8:63:85:
10:d1:43:ad:7c:8f:35:ba:e0:56:c5:cc:77:cd:9a:f0:2a:7e:
02:b3:dd:15:1c:1b:9d:bc:66:67:c1:fe:cd:fb:98:83:49:50:
ee:4e:48:3b:75:20:2f:59:a9:a4:3a:0e:79:6c:f1:10:e5:65:
4f:62:7c:4e:44:02:5d:16:90:4f:7a:8a:5a:93:02:68:1e:c9:
cb:50:3c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:21:00 2025 by rpki-client