Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/8eZyJlq6vd_1Vsl2WJDrFp5Acfk.roa
File: 8eZyJlq6vd_1Vsl2WJDrFp5Acfk.roa (raw, json)
Hash identifier: MdJ5O1V2zfu1qAxGo3v9u1hDMPBm8X7VXTh2Oq0pDhM=
Subject key identifier: F1:E6:72:26:5A:BA:BD:DF:F5:56:C9:76:58:90:EB:16:9E:40:71:F9
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CC8DFA7186B1D14F5763B3BF23A3BB05F
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/8eZyJlq6vd_1Vsl2WJDrFp5Acfk.roa
Signing time: Tue 02 Jan 2024 06:32:29 +0000
ROA not before: Tue 02 Jan 2024 06:32:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202973
IP address blocks: 185.106.92.0/24 maxlen: 24
194.36.177.0/24 maxlen: 24
82.115.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 20:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:a7:18:6b:1d:14:f5:76:3b:3b:f2:3a:3b:b0:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 06:32:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1e672265ababddff556c9765890eb169e4071f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:78:c0:f2:20:d9:90:a8:8f:59:b0:99:9a:ea:
a9:f1:0d:d7:c3:e6:87:59:55:84:e5:a4:7f:07:9a:
68:ae:7f:07:f0:d2:cb:15:79:11:eb:c9:63:0a:77:
f7:71:39:58:b3:07:ee:ec:61:58:2f:d1:c9:11:18:
ac:74:09:b0:0e:46:37:6d:5b:29:e5:fa:3b:50:7a:
13:81:ea:70:0e:f4:f1:be:12:5d:bd:0b:ac:cc:03:
8c:03:2a:b0:76:a6:2d:25:6c:45:b0:2f:5c:74:75:
e6:6e:4a:62:2f:40:f2:1b:08:8b:ff:75:98:03:1f:
00:c4:bb:3a:6e:8b:43:03:50:db:0e:7c:52:f5:5f:
2d:8a:23:8f:22:b7:b1:44:a3:6e:54:d3:3a:7c:9f:
c5:ec:c4:86:44:05:c1:25:d6:de:2e:af:1c:e7:04:
43:d3:cc:31:4e:b7:15:a0:7b:be:b5:3d:3d:e7:15:
6b:8c:38:6e:2e:94:30:3f:44:e3:dc:b7:d7:ec:c2:
f6:83:d8:07:7c:8c:7a:27:f9:30:11:a3:26:35:f3:
00:3f:82:4a:2d:39:ff:e1:4a:eb:ca:c6:5d:5b:50:
ae:f5:dc:60:fa:c4:f1:b0:2d:1b:d1:c7:dd:4f:5f:
d4:db:36:fb:79:88:8b:6c:fc:d1:dd:7e:6c:8c:2c:
c5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E6:72:26:5A:BA:BD:DF:F5:56:C9:76:58:90:EB:16:9E:40:71:F9
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/8eZyJlq6vd_1Vsl2WJDrFp5Acfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.223.0/24
185.106.92.0/24
194.36.177.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:0e:77:83:f8:61:7e:be:3d:f7:ea:57:f4:e7:34:d2:ed:5d:
9f:60:04:56:d0:5c:5f:20:7b:f9:7a:22:a1:d8:a4:8e:b3:85:
98:27:e6:d6:85:a5:75:25:e3:88:63:78:27:02:e3:19:eb:7b:
1f:32:60:1e:fa:15:46:cd:72:6f:ba:71:c8:74:1a:bf:af:31:
3b:f5:b0:81:66:b4:10:23:80:64:3f:1e:8e:29:69:a4:b7:18:
df:8c:27:73:52:58:1c:c1:96:8b:cd:10:3c:79:47:76:ed:a6:
42:45:74:4e:20:78:cb:96:db:95:b9:95:44:9f:c2:2b:bd:46:
11:2f:fa:83:d3:73:c4:8e:4f:3e:9e:95:3e:5b:b2:11:bd:77:
dc:23:1a:4b:90:bf:92:2f:08:ae:a0:44:22:2c:b6:3b:17:ee:
e5:61:bd:8f:ac:1d:df:6e:71:ac:2f:b7:93:f3:db:a3:1b:9f:
24:48:a0:13:60:4b:d3:b4:2c:b3:68:21:4c:7b:51:a8:1b:08:
b9:ae:e8:9d:e8:31:94:08:a5:ab:ff:c9:ba:93:27:c5:fe:bc:
9c:5a:7a:f5:7c:dd:c6:1c:4b:91:63:4e:cd:2d:a1:39:cb:a1:
f1:8a:e2:25:2b:ae:43:3a:4f:fa:ab:da:22:bc:2b:9a:db:31:
35:63:02:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:08 2024 by rpki-client on console-ams.rpki-client.org