Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/iE1GdBOSzkSQFbjVeVlNSFfIr3w.roa
File: iE1GdBOSzkSQFbjVeVlNSFfIr3w.roa (raw, json)
Hash identifier: 88MAGCOhKptyrZ0iZqrWMGKRMa9xcueJBJQqk8MBnzo=
Subject key identifier: 88:4D:46:74:13:92:CE:44:90:15:B8:D5:79:59:4D:48:57:C8:AF:7C
Certificate issuer: /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial: 018A17C472FC910CD52F025771B0F7674CE4
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/iE1GdBOSzkSQFbjVeVlNSFfIr3w.roa
Signing time: Mon 21 Aug 2023 11:04:24 +0000
ROA not before: Mon 21 Aug 2023 11:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57829
IP address blocks: 195.78.37.0/24 maxlen: 24
185.114.104.0/22 maxlen: 24
185.56.212.0/22 maxlen: 24
81.201.208.0/20 maxlen: 24
45.137.208.0/22 maxlen: 24
2a00:e900::/29 maxlen: 48
2a01:4400::/32 maxlen: 48
2a0b:fd82::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 21 Aug 2023 11:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:17:c4:72:fc:91:0c:d5:2f:02:57:71:b0:f7:67:4c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
Validity
Not Before: Aug 21 11:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=884d46741392ce449015b8d579594d4857c8af7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ba:0d:57:3f:9d:ab:6f:70:38:3f:d2:85:d0:
f3:13:3d:f7:88:64:22:6a:2e:85:50:06:01:c1:e4:
4c:a5:2e:7d:04:cc:a1:39:09:2d:1f:5f:c5:c0:09:
6e:14:74:0e:76:f5:3e:4d:5c:44:1e:f5:60:2a:74:
1f:36:03:0b:10:a8:96:72:b2:e4:69:5e:95:f5:db:
f1:6c:56:a3:39:e1:08:b5:9f:0c:7d:15:50:7e:01:
dd:70:1b:79:ab:c2:e5:cb:17:7d:4c:a2:7f:79:18:
7d:dc:0b:dc:5c:c6:9e:8e:c5:4d:f7:03:1e:48:af:
04:31:c5:9b:5d:3c:28:e2:78:65:6a:35:8e:0b:d7:
b3:2c:77:8d:e3:bd:b8:03:11:61:73:69:52:2f:d6:
56:43:ee:9d:83:58:a2:a2:9d:ba:41:75:c6:ba:56:
f4:4d:aa:f1:c2:a8:0b:2e:82:dd:12:cb:cc:28:30:
c0:2e:29:c5:d7:85:ce:54:0d:28:10:c6:bd:4c:ec:
64:0f:d3:39:f5:d2:d2:e6:a7:a2:cd:92:14:07:d7:
76:8c:3d:8d:34:d3:5a:ae:45:78:51:9e:69:9f:b8:
7d:4e:ba:86:b1:0c:ed:da:1f:49:c2:ec:19:6c:e0:
5c:51:58:28:c5:81:44:f1:8b:be:9a:92:74:aa:62:
64:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4D:46:74:13:92:CE:44:90:15:B8:D5:79:59:4D:48:57:C8:AF:7C
X509v3 Authority Key Identifier:
keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/iE1GdBOSzkSQFbjVeVlNSFfIr3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.208.0/22
81.201.208.0/20
185.56.212.0/22
185.114.104.0/22
195.78.37.0/24
IPv6:
2a00:e900::/29
2a01:4400::/32
2a0b:fd82::/32
Signature Algorithm: sha256WithRSAEncryption
7c:a0:9b:6c:02:e2:33:51:09:4b:36:53:ff:b2:c2:27:9e:d9:
00:f9:d8:8a:c7:a8:cd:22:c3:cf:85:b1:4f:39:99:c7:51:25:
c3:09:b2:4c:82:95:61:38:b3:46:86:7c:67:fd:60:1a:48:26:
fe:1c:d0:09:ba:8a:7a:76:48:f9:6c:f1:e9:7e:a6:35:79:d3:
f5:92:bb:5c:12:fb:07:2e:22:d8:65:f6:a1:de:c2:42:59:38:
df:59:3b:ae:42:ca:bf:7e:ef:67:78:62:6a:1c:d9:d1:e2:1b:
42:43:d7:81:a2:1a:d0:8b:49:d9:48:7c:1f:0a:89:81:91:b0:
8e:5a:9a:a0:ac:cc:9a:bf:46:c9:6d:3f:b0:bc:f7:cd:3f:8b:
60:05:dc:c9:43:44:de:54:74:fa:98:b9:fe:ae:7c:a4:4b:b0:
87:69:ee:f9:32:83:ec:1a:28:8f:81:5c:0f:6f:c0:9c:44:9c:
22:3c:7c:2c:35:46:bf:5a:08:5e:23:c8:06:1c:4d:60:c7:26:
b4:5f:bf:24:57:76:83:a3:62:8b:47:2f:23:d2:ef:2e:5b:15:
d0:bb:3e:84:0d:9a:c3:2a:bb:e8:b5:72:33:99:b5:f4:e4:f6:
f2:de:f4:63:7c:cb:ce:ff:4f:f9:69:ce:d1:c0:d3:42:ff:21:
6c:06:1e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:54 2024 by rpki-client on console-ams.rpki-client.org