Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Eg7GYU5s9l-TgTHQw0i0ryMNdNk.roa
File: Eg7GYU5s9l-TgTHQw0i0ryMNdNk.roa (raw, json)
Hash identifier: OTGmRLEmmQgrL1TCzvKN7eKrrWylfigxCPQI0UYucxQ=
Subject key identifier: 12:0E:C6:61:4E:6C:F6:5F:93:81:31:D0:C3:48:B4:AF:23:0D:74:D9
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0189254F23F7773BEC2580DFD8159FDFC02E
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Eg7GYU5s9l-TgTHQw0i0ryMNdNk.roa
Signing time: Wed 05 Jul 2023 09:08:10 +0000
ROA not before: Wed 05 Jul 2023 09:08:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210281
IP address blocks: 185.106.92.0/24 maxlen: 24
194.36.177.0/24 maxlen: 24
82.115.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:25:4f:23:f7:77:3b:ec:25:80:df:d8:15:9f:df:c0:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jul 5 09:08:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=120ec6614e6cf65f938131d0c348b4af230d74d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:64:b7:81:2a:04:62:3a:ac:61:83:93:73:77:
73:00:91:5e:b1:58:a0:8c:45:9b:cf:96:fb:4a:22:
1b:fa:df:c8:6c:71:82:b6:0c:87:90:e7:17:4a:b7:
08:a3:ad:cf:28:21:47:46:8d:23:81:2b:b2:62:0a:
ff:77:bb:cf:25:02:70:ba:6e:10:09:66:8b:8e:03:
12:78:66:3c:5c:6c:ab:9c:59:9d:b9:b6:74:84:c1:
63:87:98:23:f1:cf:1e:94:86:95:fa:fb:7b:1f:cc:
57:9e:b6:04:28:0c:d2:80:ee:c9:ce:a3:12:47:df:
8e:b9:6d:ec:c0:f5:57:e8:63:e3:a5:40:68:73:d0:
6a:3b:d6:b8:fb:9b:59:89:1b:27:d8:cb:17:24:6e:
f5:59:89:79:5c:67:94:cc:1f:7b:de:6d:94:81:c2:
4d:54:b5:8b:b8:56:40:63:68:90:59:97:74:fd:6a:
d2:cb:3c:96:ef:cb:d1:05:18:7d:a0:7e:19:94:74:
8e:ae:1d:1c:2d:b1:db:b6:04:aa:41:d9:31:ec:f2:
cb:51:9f:58:6e:6c:07:84:95:32:59:16:f5:28:d3:
af:46:07:b2:28:0d:b8:5d:f5:fc:a8:e2:3a:d0:06:
7a:01:9d:82:f6:aa:25:ef:24:09:b0:ab:ec:8c:05:
3f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0E:C6:61:4E:6C:F6:5F:93:81:31:D0:C3:48:B4:AF:23:0D:74:D9
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Eg7GYU5s9l-TgTHQw0i0ryMNdNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.223.0/24
185.106.92.0/24
194.36.177.0/24
Signature Algorithm: sha256WithRSAEncryption
00:b5:c5:98:e2:5a:ea:72:46:e5:bd:97:cd:1b:e8:d1:4c:ac:
61:37:ae:a1:a3:ed:eb:69:0c:b6:25:ed:5c:5c:4d:fd:45:68:
01:64:76:83:87:20:ad:1e:6a:02:63:8e:0d:75:24:7e:b9:62:
38:76:0e:fe:72:95:f2:f8:84:3a:ef:21:c6:8f:63:b4:85:97:
7a:78:57:af:3c:17:9a:30:59:34:bb:90:87:4a:c8:6f:03:05:
84:21:ba:52:65:b6:30:ec:23:ed:95:50:96:63:fa:d6:25:3b:
49:c3:a3:7b:0c:7c:32:1c:9d:fa:8c:1b:aa:a5:44:e1:17:74:
05:7a:e1:80:b7:1a:3f:53:9b:9e:22:41:f7:04:e6:0c:b8:33:
a7:1c:7e:be:74:3d:13:c6:5c:fe:46:8e:cb:25:7a:cf:d3:21:
ad:d5:b7:4c:10:23:90:aa:86:6f:86:df:12:b1:e7:cd:ce:be:
ff:e7:8f:6d:fe:ef:81:c8:dd:9a:33:da:6b:7e:d7:91:5c:cf:
ac:53:2a:6a:44:d3:5f:c5:87:eb:fe:3a:86:fc:e3:b1:5a:61:
af:e8:b2:00:e1:dc:28:98:24:1a:74:c9:1d:57:b0:56:dd:17:
41:f1:3f:2f:a5:93:90:69:9c:c7:15:cd:20:25:7a:ee:77:9c:
70:65:0b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:28 2024 by rpki-client on console-fra.rpki-client.org