Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/eWIjwsrScBl7RpHfdfL_RP9eE_g.roa
File: eWIjwsrScBl7RpHfdfL_RP9eE_g.roa (raw, json)
Hash identifier: 3qyNHyfq9Wr0Tlx9b4SWvo5rg3te4vPxMPg+Fw+Mado=
Subject key identifier: 79:62:23:C2:CA:D2:70:19:7B:46:91:DF:75:F2:FF:44:FF:5E:13:F8
Certificate issuer: /CN=987b6812cf7a074580f5942be762f477f67c9500
Certificate serial: 018CC8DF2C3841A427392AC6805ED3DA84AA
Authority key identifier: 98:7B:68:12:CF:7A:07:45:80:F5:94:2B:E7:62:F4:77:F6:7C:95:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/eWIjwsrScBl7RpHfdfL_RP9eE_g.roa
Signing time: Tue 02 Jan 2024 06:31:58 +0000
ROA not before: Tue 02 Jan 2024 06:31:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8365
IP address blocks: 82.195.64.0/19 maxlen: 24
91.243.70.0/24 maxlen: 24
185.55.124.0/22 maxlen: 24
2001:41b8::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 10 Jun 2024 08:44:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:2c:38:41:a4:27:39:2a:c6:80:5e:d3:da:84:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987b6812cf7a074580f5942be762f477f67c9500
Validity
Not Before: Jan 2 06:31:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=796223c2cad270197b4691df75f2ff44ff5e13f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:88:94:d4:23:f2:b1:84:51:fa:93:51:b4:67:
c7:d8:0c:ce:af:1b:7d:22:71:e4:7f:19:a6:19:fb:
bb:42:b1:ce:67:e6:6d:9b:25:5f:16:d6:28:2c:41:
c1:e6:33:02:e1:1f:a8:e6:32:48:f7:2a:6f:47:95:
bd:16:c2:8f:da:cd:79:d1:ce:56:79:05:15:5a:11:
07:09:92:98:8c:08:16:fc:53:f8:b7:15:66:3e:81:
39:b9:ca:ed:16:c3:60:56:31:7d:3b:4e:8d:0c:77:
ec:e6:b6:3c:64:47:b7:75:70:64:c5:af:82:a6:26:
91:01:b9:a4:4f:43:fe:69:c9:f5:30:cd:23:1c:03:
58:ab:60:92:8a:48:f3:44:76:86:a3:2f:ce:e5:a6:
a3:72:c4:f9:9f:1c:a4:8b:74:ba:dd:11:a0:ff:cd:
d0:9f:82:9b:8b:dd:8f:de:ae:74:3a:15:dd:6d:f0:
8f:3e:df:d5:cf:db:7f:7e:9c:82:32:a4:dc:cb:d5:
db:ae:bc:aa:67:ed:5a:f3:5d:ce:6a:ea:cc:7a:fc:
30:1f:5c:a4:fd:bc:3e:f5:7f:ea:e2:59:95:13:3b:
b8:ad:48:2f:a1:d9:4a:ec:60:d2:c0:47:dd:83:57:
ad:68:69:37:a6:53:69:a2:0b:98:52:9a:9f:ed:40:
f5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:62:23:C2:CA:D2:70:19:7B:46:91:DF:75:F2:FF:44:FF:5E:13:F8
X509v3 Authority Key Identifier:
keyid:98:7B:68:12:CF:7A:07:45:80:F5:94:2B:E7:62:F4:77:F6:7C:95:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/eWIjwsrScBl7RpHfdfL_RP9eE_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.195.64.0/19
91.243.70.0/24
185.55.124.0/22
IPv6:
2001:41b8::/32
Signature Algorithm: sha256WithRSAEncryption
97:80:ed:b7:ec:3a:cd:3c:78:60:aa:56:3e:2f:0e:2a:b9:f7:
c3:5d:15:81:67:c0:bd:6c:bb:b7:72:12:d4:5a:8d:b0:89:06:
3e:6d:17:3b:cd:af:75:93:37:10:64:13:48:dd:c5:e8:58:41:
66:94:17:22:2a:83:99:a1:99:73:f1:74:d3:31:19:a2:5a:cc:
22:10:ed:a4:75:53:9c:71:6a:c4:e7:0d:1d:1f:35:7c:44:ff:
9c:4d:f8:e1:f6:2c:41:b3:cd:b2:f9:0a:87:ed:8a:75:cc:ab:
e6:79:72:bc:48:c7:b1:0b:da:26:5a:4e:3e:5f:34:dd:17:83:
8b:75:be:b7:18:e8:01:3b:48:1a:c7:e5:88:02:4d:c2:84:9a:
87:ee:74:11:54:c7:b1:ba:5c:3d:cb:5b:22:78:63:8c:50:08:
ea:46:94:97:01:06:0a:ee:b9:20:fb:81:cd:f9:75:f4:23:61:
1d:30:1b:f2:f3:9c:82:ea:67:83:80:6b:d4:3d:09:69:21:f9:
84:45:cd:4a:3c:85:56:8e:ec:b4:4e:50:b7:a3:de:a8:10:69:
dd:32:78:ea:7f:8d:07:00:2a:ea:e1:13:4e:76:04:8a:5c:84:
72:82:71:1b:bc:c1:f7:6a:3c:bf:00:9a:f4:ed:84:31:c7:47:
19:ce:f5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:10:12 2025 by rpki-client