Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/8ymoVeD5d9pA6IvA-C4wIUBKBO4.roa
File: 8ymoVeD5d9pA6IvA-C4wIUBKBO4.roa (raw, json)
Hash identifier: 9R0PewP3Y8CilWfJkBMahQuyKx2QSNpE2zhzeD7H7m0=
Subject key identifier: F3:29:A8:55:E0:F9:77:DA:40:E8:8B:C0:F8:2E:30:21:40:4A:04:EE
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018573F1971D169BC08529DCE5BC5286BEC9
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/8ymoVeD5d9pA6IvA-C4wIUBKBO4.roa
Signing time: Mon 02 Jan 2023 19:24:50 +0000
ROA not before: Mon 02 Jan 2023 19:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48113
IP address blocks: 87.110.240.0/21 maxlen: 21
195.13.219.0/24 maxlen: 24
87.110.228.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 28 Dec 2023 14:26:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:f1:97:1d:16:9b:c0:85:29:dc:e5:bc:52:86:be:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 2 19:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f329a855e0f977da40e88bc0f82e3021404a04ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2f:a1:28:fc:6b:33:a4:1c:65:df:57:b8:77:
7f:38:02:a4:d4:12:88:2c:8a:48:cd:eb:5e:b8:57:
50:b3:0e:e1:20:9c:db:84:d3:95:f0:4d:97:9f:c5:
5c:d3:a6:20:6b:58:86:f1:7c:a4:84:01:4d:6d:95:
bb:58:d0:44:4d:7a:f3:2e:7c:a1:fa:60:8e:71:d4:
fc:ec:36:2c:71:81:74:85:c4:30:a7:f3:5e:10:26:
86:3b:d3:3a:b9:2f:69:c7:15:51:bf:ab:eb:a5:85:
8a:68:6c:54:a6:57:53:6e:9c:56:24:4c:ea:63:f6:
82:ab:fb:cd:2c:b4:da:7a:e1:0f:5b:e1:b3:6f:00:
fe:56:34:14:73:be:b3:4f:cd:13:b9:a9:c2:9d:d3:
12:e6:84:40:1c:d3:60:bc:2b:7a:9e:61:9c:f9:b6:
9a:d1:34:58:2f:e8:1d:d8:a9:39:9f:90:e5:2b:9f:
30:e1:1d:d1:e7:52:f7:2c:7d:61:a2:65:e1:ef:e5:
de:c6:b5:97:43:f9:31:4a:e5:c6:2b:01:03:43:ac:
2c:79:fc:de:25:84:77:10:f6:c6:7c:4d:10:ba:b6:
17:f7:cc:b8:a1:ef:07:5c:1b:2e:d5:70:02:a7:6e:
09:dc:c9:9c:86:a3:ee:6a:36:f8:80:73:69:72:5f:
f4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:29:A8:55:E0:F9:77:DA:40:E8:8B:C0:F8:2E:30:21:40:4A:04:EE
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/8ymoVeD5d9pA6IvA-C4wIUBKBO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.110.228.0/22
87.110.240.0/21
195.13.219.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:6f:e8:4f:96:61:17:89:fa:be:53:a7:9b:d9:32:af:78:e3:
e8:94:5a:66:d4:db:19:47:6a:07:ed:b9:c3:01:8e:c4:46:c5:
0e:d8:38:03:60:9e:01:02:51:5d:2c:e6:20:4a:59:b8:49:f7:
4f:ae:b1:56:a2:4e:8d:91:c1:3f:1e:74:3b:0d:dc:77:4f:a4:
aa:79:2c:2d:f6:20:b2:38:df:b9:16:16:a7:9f:7c:70:ce:75:
d6:db:40:e1:55:3a:8b:ff:4d:82:21:55:0f:8b:a9:0d:46:7f:
b0:60:d9:7d:38:e1:b2:23:51:c2:3e:f8:66:f8:9f:99:a6:3c:
17:fc:f6:a0:2b:31:43:ad:6d:3f:39:08:ac:bc:fb:97:27:3c:
e3:93:10:cc:29:c9:46:0d:9b:a0:b5:47:5a:8b:f5:d6:aa:bf:
aa:cd:60:bf:ec:cf:73:fa:ca:5a:95:55:c4:64:08:99:48:96:
74:2d:9f:b5:2d:8b:90:8f:b3:71:e7:ac:66:38:2e:2a:ab:39:
69:86:f4:05:14:c1:b2:ef:eb:0d:cc:6f:91:05:b0:d5:a6:36:
f3:7d:2a:24:f7:11:d1:a2:fb:0d:6c:45:71:9b:8a:93:2a:b2:
12:05:89:d7:e2:82:ec:1b:ed:e7:90:62:a4:db:2c:54:88:a9:
a6:00:22:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:29 2024 by rpki-client on console-fra.rpki-client.org