Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/8lcX_I8GShbsQc6YjADknsRpTi4.roa
File: 8lcX_I8GShbsQc6YjADknsRpTi4.roa (raw, json)
Hash identifier: wWNiz5bYwEbvy99+XXT56SA0AcmZKZJ8hWPjXc1dIXo=
Subject key identifier: F2:57:17:FC:8F:06:4A:16:EC:41:CE:98:8C:00:E4:9E:C4:69:4E:2E
Certificate issuer: /CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Certificate serial: 018CC4939CDA0064059518711951CD2398E0
Authority key identifier: EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/8lcX_I8GShbsQc6YjADknsRpTi4.roa
Signing time: Mon 01 Jan 2024 10:30:57 +0000
ROA not before: Mon 01 Jan 2024 10:30:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47176
IP address blocks: 185.70.48.0/22 maxlen: 22
185.70.48.0/24 maxlen: 24
93.190.75.0/24 maxlen: 24
93.190.72.0/21 maxlen: 21
2a05:2740::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:9c:da:00:64:05:95:18:71:19:51:cd:23:98:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Validity
Not Before: Jan 1 10:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f25717fc8f064a16ec41ce988c00e49ec4694e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:62:2d:e4:ad:1e:3b:76:c4:b2:6f:b0:03:0b:
22:93:65:20:8e:9c:1e:a1:cb:97:47:30:f4:48:42:
8f:44:58:92:21:8e:43:d6:5d:2a:d1:e2:4b:5b:70:
0c:e0:56:6b:05:08:1e:b9:d4:72:17:67:23:a6:6f:
cc:cd:42:34:10:2f:70:73:50:cc:fc:74:3d:6b:1e:
a1:c6:25:13:1a:9a:13:89:73:b5:13:8a:8a:08:7e:
ea:97:e6:f3:b3:ec:35:b7:58:00:6a:fa:d2:0f:22:
3c:a7:2c:f4:5b:0c:74:12:d2:e2:96:ee:5f:15:65:
3c:93:6f:f6:f1:21:57:ca:fb:07:80:9a:59:ff:ad:
d1:ae:f7:f8:8a:2e:71:92:b2:e4:80:e5:12:09:6c:
5d:e5:2e:52:a4:8c:79:f3:ff:37:33:e4:61:e1:3d:
dd:5f:d9:33:61:b1:20:a2:46:ea:49:5e:76:f8:dd:
5d:ad:0a:f3:d1:5b:61:21:8c:44:f4:b0:cb:6a:d6:
c5:bc:c9:30:1b:4d:8f:63:a0:66:9c:7c:8f:da:ea:
00:fb:2b:62:d3:d0:8b:30:7d:7b:d1:80:93:df:2b:
4e:99:44:e5:82:44:0c:c7:17:f5:95:a9:64:10:c6:
3e:c4:94:d1:87:02:9e:5f:ba:4b:6d:ff:3c:ba:59:
cc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:57:17:FC:8F:06:4A:16:EC:41:CE:98:8C:00:E4:9E:C4:69:4E:2E
X509v3 Authority Key Identifier:
keyid:EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/8lcX_I8GShbsQc6YjADknsRpTi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.72.0/21
185.70.48.0/22
IPv6:
2a05:2740::/29
Signature Algorithm: sha256WithRSAEncryption
4f:3b:dc:4d:1c:c1:70:f8:40:45:fd:9a:0d:d2:97:0f:8b:6d:
7f:79:06:7d:39:c6:5b:49:f3:54:bb:6f:3e:bf:c6:77:c0:fa:
93:59:6f:ab:66:00:49:73:e9:4e:61:7d:d5:77:e3:fe:02:ff:
d9:5f:f1:28:11:50:1f:c6:81:7b:ea:6b:4f:bf:bb:92:84:2b:
1b:60:bb:67:40:98:76:6c:e5:36:a2:61:ea:10:2f:21:af:d9:
0d:04:af:d5:ce:82:c7:f8:9b:c1:d2:3a:b1:be:f9:09:93:ae:
e3:74:06:4d:88:b5:df:a7:37:d8:17:02:92:67:2b:a3:80:b4:
ef:bc:77:2f:9f:32:5c:2d:c9:d6:d9:6b:5b:52:78:02:99:e2:
e7:4e:d2:61:d7:b2:96:1c:4d:5a:48:d6:70:24:0e:89:15:38:
26:72:42:e9:6c:93:55:d6:a8:ae:9a:c4:ca:9f:1f:1c:39:2b:
83:ca:e6:9e:8d:e3:a1:82:0f:86:b7:eb:d5:33:0f:e1:dc:1d:
55:28:0a:f2:99:07:06:e5:44:2a:11:bb:4d:d1:f4:46:ec:07:
c1:55:41:fe:f8:92:ef:ca:4c:bf:9b:21:6e:df:4f:4d:15:f6:
41:e7:0b:e6:b7:d6:e8:15:33:b1:0c:8d:06:76:45:9e:75:db:
97:83:57:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:54 2025 by rpki-client