Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/Ep8ldZjvesf9uv_iGS01xKCduWM.roa
File: Ep8ldZjvesf9uv_iGS01xKCduWM.roa (raw, json)
Hash identifier: UWpdL7MCKJinv5znYbe7KlzKLXRlDXvOWOwiVkESQxg=
Subject key identifier: 12:9F:25:75:98:EF:7A:C7:FD:BA:FF:E2:19:2D:35:C4:A0:9D:B9:63
Certificate issuer: /CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
Certificate serial: 018C58519834A2464A4321BA97A5B2D5E582
Authority key identifier: BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/Ep8ldZjvesf9uv_iGS01xKCduWM.roa
Signing time: Mon 11 Dec 2023 09:59:51 +0000
ROA not before: Mon 11 Dec 2023 09:59:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208864
IP address blocks: 185.192.145.0/24 maxlen: 24
185.192.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:58:51:98:34:a2:46:4a:43:21:ba:97:a5:b2:d5:e5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
Validity
Not Before: Dec 11 09:59:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=129f257598ef7ac7fdbaffe2192d35c4a09db963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c5:95:21:54:3b:8c:01:77:d5:0a:d9:46:59:
dc:6e:2f:4f:cc:e4:a8:c7:5a:ca:c6:2f:11:de:c1:
c2:19:bc:e7:37:b4:59:11:f3:5c:8f:f1:bd:63:e8:
6e:a3:39:96:95:91:87:75:65:03:8a:f8:17:b7:51:
61:d7:fe:80:bc:63:69:f9:df:c8:95:c7:ff:fa:ed:
e0:da:c0:d3:08:81:6d:3d:e3:a1:f3:c9:54:72:ae:
9a:5d:dc:b6:5f:51:01:11:a2:57:7d:0f:46:07:68:
51:45:38:e7:4b:73:dd:f4:30:d8:d7:46:5b:31:12:
0a:91:2d:0b:cd:53:0f:49:8c:41:46:c9:e8:2e:be:
08:70:c8:75:93:dd:9f:02:05:cc:71:2f:ee:f9:7b:
d1:f2:e5:73:ad:21:22:81:3b:dc:ad:b0:1c:69:97:
4a:ee:77:64:2b:0e:9e:0e:14:ac:59:3c:1b:db:c8:
4a:c8:8d:be:b6:a6:0f:58:43:f6:00:4e:a3:f6:ba:
61:31:3a:be:b9:27:32:aa:ab:ed:c2:49:8d:2d:8f:
72:2d:47:19:d3:94:cf:2f:10:d0:a5:99:6c:a0:a3:
32:64:ae:c2:ad:0a:6b:6c:7f:57:f1:5c:e5:d9:27:
b7:e9:9f:64:91:9e:de:57:d7:5f:0d:d6:7d:dc:cd:
ae:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9F:25:75:98:EF:7A:C7:FD:BA:FF:E2:19:2D:35:C4:A0:9D:B9:63
X509v3 Authority Key Identifier:
keyid:BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/Ep8ldZjvesf9uv_iGS01xKCduWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.144.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:97:1c:d9:ff:43:03:2e:e7:7a:17:68:33:74:4f:bc:e5:9d:
a9:de:13:f5:65:8b:39:a9:70:7d:f2:64:db:35:46:51:2e:50:
24:ef:5a:35:86:0c:3c:c4:8d:b8:0a:bf:b9:53:bb:15:f5:9a:
d8:af:38:47:be:69:e0:5f:a5:50:25:4e:93:58:9d:ea:47:23:
e4:f0:17:e0:f5:d1:23:57:dd:a9:be:1a:63:d6:46:b1:27:de:
52:77:4a:d4:6f:7b:c4:ec:0b:61:8d:a0:30:11:c7:71:f0:26:
85:c6:f9:7c:d3:1c:f7:64:e3:c1:71:39:04:3b:0b:24:6f:8f:
ca:d5:51:99:2a:8e:9e:a2:1d:18:44:c5:aa:3f:b2:0f:73:8c:
73:97:5a:7b:08:d9:50:ee:86:ce:57:20:30:e4:29:49:8a:a2:
a6:2d:f1:f7:d3:fc:b5:af:40:d1:ad:62:7f:80:0a:7f:21:26:
cc:eb:f8:8a:ad:f4:eb:8b:ce:de:e3:f3:21:b0:c6:34:03:0c:
f7:a0:93:1a:31:fc:af:41:32:18:dc:43:b1:68:00:99:4d:24:
d0:6a:07:b3:14:3e:b9:dd:7c:e3:b3:71:0b:de:ba:1a:90:46:
41:f9:26:3d:3f:20:2d:ad:dd:d3:e1:f8:07:51:48:e7:af:15:
3f:70:e5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:05 2024 by rpki-client on console-ams.rpki-client.org