Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/bC7EEHgjWZ8lSqYVRRC-_JmJ8ck.roa
File: bC7EEHgjWZ8lSqYVRRC-_JmJ8ck.roa (raw, json)
Hash identifier: AmcKzmSG+zomr+NlliIgNptR7Q4RF7lPnkrvLA8V4c0=
Subject key identifier: 6C:2E:C4:10:78:23:59:9F:25:4A:A6:15:45:10:BE:FC:99:89:F1:C9
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 0193077B9C4249D3BF5DBBCE8037B043936F
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/bC7EEHgjWZ8lSqYVRRC-_JmJ8ck.roa
Signing time: Thu 07 Nov 2024 16:36:01 +0000
ROA not before: Thu 07 Nov 2024 16:36:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50340
IP address blocks: 85.142.144.0/22 maxlen: 24
85.142.243.0/24 maxlen: 24
85.143.52.0/23 maxlen: 24
85.143.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 12:47:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:07:7b:9c:42:49:d3:bf:5d:bb:ce:80:37:b0:43:93:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Nov 7 16:36:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c2ec4107823599f254aa6154510befc9989f1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:95:e0:7f:cf:a1:00:03:2e:7d:76:d2:ab:76:
00:64:27:71:22:f4:0c:34:d0:95:9f:68:12:93:75:
d1:29:4e:82:ba:fd:af:4b:19:59:57:a4:7b:67:03:
c5:16:99:56:84:b9:b6:ef:62:af:06:2d:a7:78:5b:
b7:d8:87:72:cd:25:71:c3:5d:bf:c1:15:9a:56:e6:
f8:fb:45:47:e7:95:c8:ce:9d:a6:d9:15:32:f2:84:
e7:57:43:42:47:70:f2:a8:33:eb:2d:ab:1c:ae:73:
01:4c:06:9a:cd:a7:21:38:fe:10:99:17:f8:fc:6e:
4f:d1:f7:0c:3f:7f:d4:d5:e2:c7:d6:27:58:c2:44:
5e:1d:e0:ae:a1:54:ad:fb:85:fc:24:41:b2:96:32:
b1:1d:d4:ad:c5:c1:05:87:60:ee:53:ff:18:6a:e6:
72:74:82:93:b6:fb:2d:cb:89:75:6c:ad:84:10:a5:
3d:03:26:6f:66:f7:c3:ee:6d:1c:d6:3a:2e:c2:40:
18:ff:52:6f:2f:6f:5a:47:4d:4a:1c:f4:d8:6b:0f:
e4:7d:fb:5c:2a:dd:23:42:8e:03:79:69:8c:05:01:
a6:c0:09:4f:05:07:17:2a:6d:71:07:76:6e:70:2f:
c7:46:ad:f8:66:f4:8b:62:de:8c:e3:99:a3:6e:b6:
0e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2E:C4:10:78:23:59:9F:25:4A:A6:15:45:10:BE:FC:99:89:F1:C9
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/bC7EEHgjWZ8lSqYVRRC-_JmJ8ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.144.0/22
85.142.243.0/24
85.143.52.0-85.143.54.255
Signature Algorithm: sha256WithRSAEncryption
49:b3:74:2c:86:24:a9:3a:fa:40:7e:f4:b1:81:91:7f:36:20:
85:40:ae:23:af:0f:24:a2:56:27:d4:93:74:83:97:2f:ca:a9:
d6:7b:1f:58:1d:a1:1b:d7:29:5d:4b:a2:f4:e3:15:28:76:6e:
85:59:24:f5:2e:5c:51:a3:fd:a1:42:2c:f3:13:69:2b:43:62:
8a:a4:b3:49:75:37:81:f1:e6:38:33:21:84:b1:bf:5c:56:4b:
b6:81:99:34:34:de:57:2f:67:78:71:10:43:66:f2:d4:38:69:
6d:e7:cc:b7:41:bc:f6:12:33:fa:12:1b:ea:b2:4b:8c:8d:f7:
a1:7a:6a:72:a5:e4:97:81:99:86:f7:b6:c0:52:84:f9:3a:6e:
ab:b8:fc:53:1e:5c:a6:98:b9:db:4e:d7:0b:e1:c7:41:f3:15:
58:92:2d:f6:3b:f6:3c:6a:c3:c7:47:a0:6d:23:82:9d:98:94:
f8:e6:b8:b6:7d:d8:99:8d:2b:37:ef:f7:94:2b:19:57:0f:ba:
76:b5:d3:27:81:ea:81:d0:72:b4:1d:5a:1b:4e:5a:10:9b:5b:
ac:c0:fe:8c:e6:c2:9c:1f:ca:99:59:be:fb:ef:ba:36:6f:77:
5e:46:87:98:24:ec:ad:d6:32:31:92:23:3b:7c:9d:24:4e:79:
ae:b9:5a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 16:57:55 2024 by rpki-client on console-ams.rpki-client.org