Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/E-Pfh45UoSuFamr3UZ5ha6CCJZ8.roa
File: E-Pfh45UoSuFamr3UZ5ha6CCJZ8.roa (raw, json)
Hash identifier: kM/cEeHxxUYPnJZrG0wOG+lXqmmsFemy1yDm/ehC7nI=
Subject key identifier: 13:E3:DF:87:8E:54:A1:2B:85:6A:6A:F7:51:9E:61:6B:A0:82:25:9F
Certificate issuer: /CN=01cf2a71b2c7bf541c6cc04151cd02078d369926
Certificate serial: 019275505614B00B4FBB86B1AF96A6D83169
Authority key identifier: 01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/E-Pfh45UoSuFamr3UZ5ha6CCJZ8.roa
Signing time: Thu 10 Oct 2024 07:24:12 +0000
ROA not before: Thu 10 Oct 2024 07:24:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42812
IP address blocks: 185.82.140.0/22 maxlen: 22
2a05:90c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 10 Oct 2024 11:14:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:75:50:56:14:b0:0b:4f:bb:86:b1:af:96:a6:d8:31:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01cf2a71b2c7bf541c6cc04151cd02078d369926
Validity
Not Before: Oct 10 07:24:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13e3df878e54a12b856a6af7519e616ba082259f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c6:a1:7f:b4:b9:03:9f:f0:6e:64:c9:79:76:
cd:47:68:33:fa:33:3f:13:5c:ab:5f:72:b0:4c:50:
4e:86:bd:9a:c5:c3:af:ec:31:30:32:84:d3:8e:fc:
66:3f:43:77:7a:95:9f:7a:63:6a:a1:d8:76:b1:9e:
d9:ad:e7:91:55:b0:dd:36:f3:65:1b:36:30:d5:45:
1f:15:3d:28:ed:4f:05:08:05:8c:fb:09:a1:71:f2:
73:d9:f4:03:9b:30:d6:65:db:09:a9:e5:d2:88:c8:
30:d8:c7:b9:a7:2e:6e:e4:2c:03:36:8c:b1:d5:59:
86:6f:9c:03:09:ee:55:61:84:f0:4c:84:f6:91:ae:
81:34:b3:d2:a1:4f:52:3f:75:0d:66:74:ba:af:f8:
aa:43:0d:2e:31:50:b7:5a:e4:e1:3c:8e:41:3a:0a:
b7:f3:24:33:29:eb:80:ba:09:05:27:00:94:24:ce:
71:41:32:7b:51:32:f3:8a:06:37:28:4c:74:5a:fe:
08:7e:b6:64:1f:b2:09:60:3c:f1:95:83:e5:4e:f1:
ba:f9:e5:0a:8f:cb:c2:69:b8:32:cb:26:01:ed:1e:
48:d3:af:e0:1d:47:a4:f6:4f:5a:1a:92:7f:c3:d4:
e0:9a:3b:ea:bd:6b:9e:03:b6:e5:f2:35:fe:38:cb:
b7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E3:DF:87:8E:54:A1:2B:85:6A:6A:F7:51:9E:61:6B:A0:82:25:9F
X509v3 Authority Key Identifier:
keyid:01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/E-Pfh45UoSuFamr3UZ5ha6CCJZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.140.0/22
IPv6:
2a05:90c0::/29
Signature Algorithm: sha256WithRSAEncryption
13:f0:9a:2a:a1:52:ba:06:f0:81:f1:87:77:ca:47:b2:e5:e8:
d1:b6:b1:8f:a5:e4:83:e9:b6:a5:9c:c8:83:13:1d:27:2e:e6:
33:c8:db:6c:3a:bc:69:99:10:c8:1e:87:b3:e9:4d:5e:8d:6a:
f6:4a:fe:3c:ef:cd:72:c8:fa:31:67:52:45:4b:e9:81:4a:dd:
e4:28:ae:6a:9d:af:92:ee:33:a3:e6:63:48:c5:6f:8d:62:1a:
da:a6:32:f1:21:a3:fe:af:4b:7b:c2:a5:13:65:5f:7c:e6:82:
1a:f2:fe:91:07:8a:fd:ba:dd:c6:86:3f:4f:e9:70:51:79:e2:
19:96:ca:17:a3:57:4d:dc:e4:55:a6:c2:92:2c:c4:df:5e:49:
4c:4a:de:e4:e8:78:4b:4b:71:6e:4b:11:f8:fb:f7:57:f6:13:
6a:82:ce:fa:31:41:0a:d8:e5:0f:f2:73:e0:9b:26:66:19:3c:
a8:25:41:71:15:46:da:da:e0:d7:f1:71:87:79:e5:29:60:b6:
b6:3c:a1:27:54:cc:9d:c7:bd:8b:e2:1d:27:3c:ed:6d:18:a6:
0b:81:d1:ce:1e:36:6c:fe:c2:73:2d:57:80:c3:8e:b5:77:0f:
21:b2:6f:5b:80:b0:a5:b1:90:5b:28:b4:93:04:fb:5c:c4:a7:
9b:22:49:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 14:31:20 2024 by rpki-client on console-ams.rpki-client.org