Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/EO8eHouGJHPqAn8_gDxaHDnbD6M.roa
File: EO8eHouGJHPqAn8_gDxaHDnbD6M.roa (raw, json)
Hash identifier: j5HflxWMgnrseNQKmlh74UaXT5r85DkQmS/txOMp/bY=
Subject key identifier: 10:EF:1E:1E:8B:86:24:73:EA:02:7F:3F:80:3C:5A:1C:39:DB:0F:A3
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C3A9C53217E301DE8DEF1BD8F2C19
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/EO8eHouGJHPqAn8_gDxaHDnbD6M.roa
Signing time: Mon 02 Jan 2023 05:55:04 +0000
ROA not before: Mon 02 Jan 2023 05:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208392
IP address blocks: 185.112.80.0/24 maxlen: 24
185.112.100.0/24 maxlen: 24
82.115.222.0/24 maxlen: 24
185.17.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:3a:9c:53:21:7e:30:1d:e8:de:f1:bd:8f:2c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10ef1e1e8b862473ea027f3f803c5a1c39db0fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a3:4a:5d:6c:3e:c4:ed:b8:d5:77:ab:96:0f:
63:41:dd:7c:28:fd:55:3f:07:0a:0a:5f:64:fe:3d:
62:d1:e2:9a:e2:30:26:81:dc:b2:19:7b:49:7f:fd:
85:a1:46:23:73:56:5e:e5:d9:73:19:27:8b:ee:d4:
c4:3a:de:3a:00:31:6b:16:5c:e1:d4:2b:40:6a:d1:
b2:b7:4c:2a:08:be:b0:77:6c:e5:2e:0b:41:5a:3d:
ce:b0:59:b2:48:6d:5f:d5:4f:2e:37:1e:37:32:ad:
d8:85:85:bb:7b:0e:19:94:8a:63:6c:68:d4:62:fc:
4b:6f:f2:26:c7:3d:62:e1:5c:a1:2d:6b:0f:5b:d2:
b9:63:bc:52:0f:ce:0c:30:9b:a6:e7:80:dd:3e:a3:
92:83:ea:0e:a4:85:34:a2:a5:08:b9:40:93:45:dd:
4a:3d:e6:24:76:20:87:19:f0:d5:1b:2e:f5:91:4e:
00:ad:d4:fe:1d:3c:b9:d5:93:93:4e:35:18:c0:59:
2c:7d:1a:5e:a6:e8:b3:ba:a3:cc:77:cd:26:ea:a6:
25:6a:e3:e0:d2:1d:e5:ac:e9:d8:43:c4:ad:6f:9e:
b5:b5:cb:e4:8b:a6:4c:57:57:c4:91:d8:ad:77:8b:
f9:ce:bd:50:73:df:df:ba:83:6f:37:55:b1:cc:64:
ff:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EF:1E:1E:8B:86:24:73:EA:02:7F:3F:80:3C:5A:1C:39:DB:0F:A3
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/EO8eHouGJHPqAn8_gDxaHDnbD6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.222.0/24
185.17.1.0/24
185.112.80.0/24
185.112.100.0/24
Signature Algorithm: sha256WithRSAEncryption
48:e2:fe:52:a7:87:80:f0:7b:8f:9d:04:96:a6:17:73:e6:27:
9d:f4:38:c0:90:82:4b:23:52:cf:99:fc:2e:e5:cd:f9:fc:e5:
4f:20:b7:c8:58:ec:f7:dd:1d:e9:2d:48:18:df:4d:d9:40:2c:
18:57:59:ba:8a:82:6c:a2:65:32:40:41:95:07:ab:66:2b:2a:
b7:c3:8a:9d:9a:9b:f6:0b:35:20:3e:28:40:29:d9:55:22:57:
f0:cd:7f:47:34:7b:85:db:10:41:85:b9:db:d7:88:9c:bf:16:
e4:26:63:6f:a2:a1:bf:69:03:b5:f9:47:19:92:51:16:bf:08:
c2:03:2c:87:df:65:4d:b4:fb:ab:88:22:54:9d:2e:e7:f1:38:
72:b2:94:a0:2d:ad:b8:65:32:e2:78:2f:90:61:cd:9e:dd:90:
95:f0:6a:69:f0:31:f8:31:3c:65:62:4a:57:bb:c9:8d:f6:b6:
2e:d5:31:6a:26:e1:13:d9:5f:0c:e4:9b:bd:2d:f1:d8:17:de:
85:aa:a2:fd:6a:9a:0f:2d:7f:43:26:86:64:56:14:b9:e7:bd:
3d:98:9f:ae:df:d0:f6:d5:51:db:d2:de:1d:7a:70:40:8c:b5:
d5:b6:17:1a:d3:8c:30:32:ee:fa:ae:c6:41:dc:f3:9a:48:90:
60:1f:05:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 14 09:06:36 2023 by rpki-client on console-ams.rpki-client.org