Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/8P_EOqM7RP9ggKfrRYxgWeTcj_o.roa
File: 8P_EOqM7RP9ggKfrRYxgWeTcj_o.roa (raw, json)
Hash identifier: xBvrEk0fxIN8ML4HyYRZK+zaSLkuykxysW63MlL39WI=
Subject key identifier: F0:FF:C4:3A:A3:3B:44:FF:60:80:A7:EB:45:8C:60:59:E4:DC:8F:FA
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018E3893AA5343FF2DCFA27CC98663017EE9
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/8P_EOqM7RP9ggKfrRYxgWeTcj_o.roa
Signing time: Wed 13 Mar 2024 16:09:45 +0000
ROA not before: Wed 13 Mar 2024 16:09:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 45.15.75.0/24 maxlen: 24
93.157.105.0/24 maxlen: 24
185.192.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Mar 2024 11:20:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:38:93:aa:53:43:ff:2d:cf:a2:7c:c9:86:63:01:7e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Mar 13 16:09:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0ffc43aa33b44ff6080a7eb458c6059e4dc8ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:47:21:ae:3d:df:34:0d:70:db:2a:91:46:a5:
8a:05:d9:70:e1:dc:68:6e:fc:b1:a3:d0:07:31:a4:
57:ce:5b:ce:43:96:77:a2:63:13:7c:c9:b1:f8:f4:
b4:a4:98:b6:0d:f4:8c:3f:c2:6f:63:23:31:c3:7f:
55:36:f5:4e:87:62:c9:d2:6f:d4:ef:d0:13:85:48:
5b:af:24:85:df:6f:fd:bd:1d:ef:da:b5:41:6e:dd:
50:8b:92:64:e3:c9:06:84:2e:fa:75:96:b0:09:50:
15:ed:ad:3f:36:66:10:01:45:88:b8:89:32:92:29:
35:91:15:aa:94:3b:d8:0f:29:4f:02:06:3d:06:c7:
65:fa:6d:5b:02:e9:35:e6:b3:00:b5:03:a0:c8:5f:
21:6f:b1:66:8c:0f:64:69:e6:f7:8b:ac:29:78:ab:
31:1a:11:8e:d6:7a:33:d4:c3:2d:b6:9a:41:f6:17:
98:ef:59:a9:50:da:d9:ad:20:39:2f:80:17:71:97:
8a:06:b7:93:00:1f:a0:31:88:86:f3:03:60:87:43:
51:9f:3e:ef:af:ba:8d:10:27:27:64:0d:c0:99:d4:
8a:60:dc:e2:1b:ea:17:60:7f:ce:94:98:12:12:3b:
c5:4e:ef:d7:df:be:d8:76:7b:80:3f:b4:06:9b:c0:
f6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FF:C4:3A:A3:3B:44:FF:60:80:A7:EB:45:8C:60:59:E4:DC:8F:FA
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/8P_EOqM7RP9ggKfrRYxgWeTcj_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.75.0/24
93.157.105.0/24
185.192.246.0/24
Signature Algorithm: sha256WithRSAEncryption
81:4c:5e:99:7b:79:47:9d:2c:d5:3a:72:aa:f7:df:30:b7:93:
0d:6e:0f:d3:a3:3c:6b:0c:fb:5e:f7:4f:c7:c9:4d:df:67:07:
b3:7f:6e:39:27:50:a9:ef:2f:dd:88:21:ba:35:e8:99:13:5d:
64:c4:f7:a2:d2:3a:73:bd:b2:da:4d:d7:70:35:2d:de:ac:82:
9e:1c:e0:9e:12:7e:a6:56:fa:4a:13:83:7b:b1:82:28:0c:ec:
87:f3:03:66:43:37:7e:86:de:1a:8b:ee:7c:f9:9e:17:ad:35:
48:96:b1:f7:31:77:f7:8f:bc:4f:ee:66:20:e8:44:70:3d:d1:
8a:76:c5:90:81:67:bc:8f:53:7e:36:65:ce:51:92:76:e2:54:
62:9f:29:6a:1e:c4:32:b8:6d:59:64:d2:5a:b1:83:49:3d:cc:
09:52:39:56:21:4d:84:16:19:1a:d7:17:88:22:de:9b:71:70:
6e:63:3e:0f:f2:9b:fb:40:00:96:69:58:de:d9:e9:ad:1c:19:
ed:8b:4f:75:3a:a9:ce:e7:8f:b1:a4:c0:47:e5:51:fe:25:08:
5d:fc:d0:f7:5d:0a:04:90:f7:e1:f3:28:2a:16:25:84:2e:c5:
36:da:44:52:6f:f0:5e:ee:0d:34:24:64:b8:90:8d:85:f5:f8:
e7:2e:7e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 18 14:24:02 2024 by rpki-client on console-ams.rpki-client.org