Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/L8csQ-lCUZiBgdJf6j4u2sFv5EU.roa
File: L8csQ-lCUZiBgdJf6j4u2sFv5EU.roa (raw, json)
Hash identifier: jVNITNkvHVGp/GCaoGOwq3zLDOaNiCIsOWaaxtwNGZY=
Subject key identifier: 2F:C7:2C:43:E9:42:51:98:81:81:D2:5F:EA:3E:2E:DA:C1:6F:E4:45
Certificate issuer: /CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd
Certificate serial: 018D0CC3474EC1CAD8B9601D3E253DE5A59C
Authority key identifier: 90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/L8csQ-lCUZiBgdJf6j4u2sFv5EU.roa
Signing time: Mon 15 Jan 2024 10:55:40 +0000
ROA not before: Mon 15 Jan 2024 10:55:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215771
IP address blocks: 185.214.239.0/24 maxlen: 24
185.214.236.0/24 maxlen: 24
2a0b:af40:2000::/36 maxlen: 36
2a0b:af40:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:48:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0c:c3:47:4e:c1:ca:d8:b9:60:1d:3e:25:3d:e5:a5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd
Validity
Not Before: Jan 15 10:55:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fc72c43e94251988181d25fea3e2edac16fe445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:50:19:f2:16:d0:8e:ca:2c:26:fb:ca:ce:03:
9a:f3:67:6e:f7:ea:f2:d1:b9:13:af:35:c6:30:2f:
96:83:2f:bd:03:ad:3f:7b:3c:8c:5e:79:2c:e7:cf:
5a:99:57:3d:44:ca:43:55:7a:33:96:51:af:9a:cd:
41:3e:39:f8:d0:94:23:70:5d:81:08:e9:75:c5:50:
8a:80:0a:a6:9b:62:5c:4f:22:dd:c8:be:1c:56:87:
d8:ff:43:c8:0f:5c:e1:33:36:f8:9f:4e:0d:29:c0:
4f:bb:9f:d4:cc:50:e4:22:a2:f0:44:7b:6e:ae:80:
f5:33:94:ef:67:62:1c:27:19:2d:ef:b8:16:3e:e9:
45:d7:14:c4:a8:56:52:11:48:0d:7e:9c:49:e5:87:
68:18:17:87:65:39:c4:68:cf:48:31:fd:b4:1e:45:
39:31:12:69:97:0c:02:ce:74:8d:d0:13:27:76:8d:
06:27:68:d7:9a:24:4a:22:74:9e:70:06:59:a8:73:
d7:02:e0:ac:c1:d6:61:d3:b9:9c:09:84:5a:3b:12:
5f:d6:91:31:d6:e0:1c:de:c3:e9:52:fd:12:80:fa:
65:72:86:6c:15:d3:f7:fc:be:6d:2e:84:a5:17:24:
a5:bd:fe:71:54:b7:b9:4f:ed:b0:d7:47:7c:53:a5:
c3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C7:2C:43:E9:42:51:98:81:81:D2:5F:EA:3E:2E:DA:C1:6F:E4:45
X509v3 Authority Key Identifier:
keyid:90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/L8csQ-lCUZiBgdJf6j4u2sFv5EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.236.0/24
185.214.239.0/24
IPv6:
2a0b:af40:1::/48
2a0b:af40:2000::/36
Signature Algorithm: sha256WithRSAEncryption
22:5e:81:a7:46:ed:a6:b5:4a:72:2f:04:2d:50:63:7b:3e:53:
ff:07:0f:78:4c:a0:4d:7d:f5:8c:3c:87:f5:87:b5:4b:94:d5:
70:3f:67:57:35:22:d4:c9:db:f9:ba:84:6e:18:69:dc:e5:c9:
12:8e:da:66:20:ff:bd:51:8d:29:1a:7b:9b:54:bf:84:01:e1:
55:42:35:02:0e:32:ae:6a:27:d8:f2:16:b1:3f:5b:f1:81:06:
74:40:aa:03:f9:91:cc:eb:85:ae:09:6c:fe:04:e3:79:39:55:
be:54:8f:82:6b:55:3a:68:ce:8b:b2:5b:73:c8:0c:95:88:b0:
21:fa:82:e4:ba:67:94:4f:3e:a8:8e:57:18:86:b6:30:b5:95:
33:05:1b:8d:bc:17:d3:30:0b:0f:7d:c8:80:6c:32:26:c1:2e:
82:54:c9:8f:84:00:e0:d6:49:1a:e5:e6:17:7a:3f:32:67:e7:
ff:72:16:38:ea:2a:ed:67:c5:02:3b:de:8d:ed:ec:15:c4:dc:
09:28:12:92:b4:e9:19:42:bf:d7:f3:19:e7:47:15:74:38:02:
07:bf:22:fa:7d:de:b1:66:da:55:d5:d4:f5:37:3c:06:a4:f6:
40:81:21:e7:0e:f3:b7:c3:cc:5d:f3:55:62:09:2d:4e:0b:fb:
0b:2d:94:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:08 2025 by rpki-client