Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/8TEzAEY_CdJXEU7DOkumh4rdicE.roa
File: 8TEzAEY_CdJXEU7DOkumh4rdicE.roa (raw, json)
Hash identifier: /0Jvd0p3CfU5k0YROEpOv6M68eO2cR4bwIEqMQDMbR4=
Subject key identifier: F1:31:33:00:46:3F:09:D2:57:11:4E:C3:3A:4B:A6:87:8A:DD:89:C1
Certificate issuer: /CN=6debd19da98c27fabab7b2f294bcf9ec6af44905
Certificate serial: 018BB46766FC04A934516F8EFBFB7795B0AE
Authority key identifier: 6D:EB:D1:9D:A9:8C:27:FA:BA:B7:B2:F2:94:BC:F9:EC:6A:F4:49:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/8TEzAEY_CdJXEU7DOkumh4rdicE.roa
Signing time: Thu 09 Nov 2023 14:05:57 +0000
ROA not before: Thu 09 Nov 2023 14:05:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36924
IP address blocks: 146.0.64.0/21 maxlen: 24
185.183.228.0/22 maxlen: 24
185.56.48.0/22 maxlen: 24
2a0b:2080::/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b4:67:66:fc:04:a9:34:51:6f:8e:fb:fb:77:95:b0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6debd19da98c27fabab7b2f294bcf9ec6af44905
Validity
Not Before: Nov 9 14:05:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1313300463f09d257114ec33a4ba6878add89c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b5:5d:29:3e:83:16:3c:fd:63:4c:5f:14:ce:
c1:c6:05:34:c6:6b:64:87:ba:9b:f3:93:4f:93:07:
11:0b:a7:e1:9c:43:c3:06:07:a5:fc:78:ce:ba:df:
ee:d0:1f:9c:9f:4c:e3:14:8a:68:9d:ef:92:7d:24:
43:a4:35:3f:81:62:df:44:fe:45:86:49:d4:aa:ea:
4a:8d:b6:4b:f1:23:16:10:a3:c2:88:28:34:47:ed:
5c:dc:71:bc:37:b8:69:0d:ee:00:ba:3a:5b:df:6f:
4a:a8:da:eb:b8:1b:94:c5:6e:a2:8f:1c:9c:56:4a:
28:f0:e8:35:4f:fc:a4:d2:b9:0f:fe:d3:7b:f2:89:
48:6c:d9:19:76:b4:f0:21:2a:67:1c:b7:fc:90:8a:
49:02:96:65:4c:5a:82:ee:10:11:5c:5b:32:18:13:
59:0d:ee:81:46:c6:50:ee:95:2f:8c:4c:e5:8c:ca:
98:f4:d4:63:56:86:04:55:d7:1d:ba:ae:20:52:70:
d5:5b:99:f2:6a:f8:fa:d9:0f:f4:bc:ec:79:fd:0f:
b8:13:e4:da:86:b1:1a:4b:ba:6f:ed:3f:05:f1:7c:
a9:8a:8e:9c:ea:79:d4:f5:3d:45:e7:ca:6e:2f:50:
23:96:56:a9:d1:9f:99:04:47:24:da:94:ca:d8:5d:
1d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:31:33:00:46:3F:09:D2:57:11:4E:C3:3A:4B:A6:87:8A:DD:89:C1
X509v3 Authority Key Identifier:
keyid:6D:EB:D1:9D:A9:8C:27:FA:BA:B7:B2:F2:94:BC:F9:EC:6A:F4:49:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bevRnamMJ_q6t7LylLz57Gr0SQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/8TEzAEY_CdJXEU7DOkumh4rdicE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1ad349-edfe-4150-9d37-264ab9337fa0/1/bevRnamMJ_q6t7LylLz57Gr0SQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.0.64.0/21
185.56.48.0/22
185.183.228.0/22
IPv6:
2a0b:2080::/29
Signature Algorithm: sha256WithRSAEncryption
7c:42:26:fc:40:5c:19:b9:f6:2e:bd:3c:d7:57:0a:5e:06:6d:
97:12:f4:f5:fc:3f:3b:5d:76:42:d7:ae:cf:a2:b9:bb:7c:74:
32:08:fe:bc:f1:a5:24:23:46:2d:16:6f:db:de:95:16:8d:83:
00:01:25:f1:f5:2c:b9:71:05:a9:ba:9a:3b:c2:69:a5:61:d6:
f8:d0:48:f4:d1:b5:83:c3:b3:73:ca:1e:fc:04:a7:89:fd:e3:
93:bb:fd:84:44:c0:1c:6e:16:06:04:42:8d:cf:c0:8a:98:b3:
20:46:02:44:60:4b:cc:68:9b:0f:d8:a9:50:5d:af:75:cc:d6:
49:e1:7f:9f:29:5d:37:2f:6c:1f:6b:6d:bb:65:fc:2c:3a:78:
6c:23:9a:a0:e7:6d:72:19:e0:a0:e9:1b:ae:e6:ee:20:6d:c6:
8b:15:5f:47:2a:1a:82:a9:46:e7:9e:73:a5:c1:8b:b9:a8:7e:
fe:4d:69:ad:80:ed:96:a8:56:0d:9f:0b:be:5b:91:ce:d0:d4:
c8:07:38:c4:0c:f7:44:cf:8a:e4:64:75:44:1f:3c:59:16:25:
85:ab:0c:1a:98:03:c9:c1:67:e3:18:f0:c2:d9:40:56:31:b5:
64:a1:04:b5:53:ae:4f:c3:69:5c:ea:b6:6d:50:5b:10:68:1f:
60:a7:94:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:08 2024 by rpki-client on console-fra.rpki-client.org