Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/cAiKB15j2w_7K2tumO-e8zhUEf0.roa
File: cAiKB15j2w_7K2tumO-e8zhUEf0.roa (raw, json)
Hash identifier: r45Gb/cLqKTqRWtZ0PPYkSU+J+JHwbg5XRkLOhIgV0E=
Subject key identifier: 70:08:8A:07:5E:63:DB:0F:FB:2B:6B:6E:98:EF:9E:F3:38:54:11:FD
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019121987513956EF1C46E43718963ACA520
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/cAiKB15j2w_7K2tumO-e8zhUEf0.roa
Signing time: Mon 05 Aug 2024 08:12:05 +0000
ROA not before: Mon 05 Aug 2024 08:12:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214927
IP address blocks: 82.115.223.0/24 maxlen: 24
193.124.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Sep 2024 10:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:21:98:75:13:95:6e:f1:c4:6e:43:71:89:63:ac:a5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Aug 5 08:12:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70088a075e63db0ffb2b6b6e98ef9ef3385411fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:60:7d:f1:72:a0:93:fa:26:58:f9:f2:4c:
6b:b8:a9:b8:51:0f:b3:f2:0e:d9:78:51:07:e6:35:
ea:bc:66:1c:21:c0:6d:38:67:54:03:97:02:ed:e3:
20:aa:7b:57:69:f9:44:56:9d:81:14:a2:29:37:61:
7c:89:83:99:7d:a9:1b:1a:62:8a:ee:9e:b9:e0:6c:
4c:69:03:4e:7b:66:6a:a2:ff:30:45:51:22:42:86:
a3:11:e8:84:83:08:16:6d:c6:11:25:86:f4:83:ff:
0b:bc:a6:8e:b4:20:f6:be:d7:3a:8c:45:92:2b:d8:
28:0d:10:6a:d2:f9:d5:f3:f3:14:da:58:37:d1:ad:
93:62:2c:ea:3e:ad:09:16:be:53:e5:79:1d:45:ba:
e1:5b:c9:6c:65:58:9c:89:55:ca:2d:8f:72:b7:01:
68:a4:14:99:09:e1:a2:9a:2b:c6:da:ad:b2:8a:96:
d6:d1:aa:49:d0:98:e9:71:b7:15:7d:18:15:3a:58:
da:8a:a9:43:ee:36:3a:09:8c:8e:a8:bc:d9:5b:80:
b1:d8:04:fd:77:50:6e:99:f1:20:58:f9:ce:7f:46:
eb:c8:5e:23:bc:d5:41:70:6c:11:4f:8f:90:1a:e0:
f9:0e:b7:ab:1c:9c:3e:f3:3a:2e:91:20:16:f4:f3:
c1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:08:8A:07:5E:63:DB:0F:FB:2B:6B:6E:98:EF:9E:F3:38:54:11:FD
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/cAiKB15j2w_7K2tumO-e8zhUEf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.223.0/24
193.124.185.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:7b:0b:5b:ca:8c:56:aa:66:bb:08:d3:ed:49:08:f3:13:fe:
40:1e:de:ab:a0:eb:ed:4c:49:58:0b:15:c8:ac:aa:d8:e7:ad:
14:77:ba:bc:5d:79:5d:1d:c4:14:df:9c:16:f9:94:91:1f:06:
71:87:46:5b:8e:af:be:27:82:e0:b7:53:fc:6f:7d:d2:6d:68:
b7:47:33:ca:57:3b:81:20:3a:08:22:4d:c0:d0:c8:9c:79:5a:
e8:f5:f8:cc:5f:28:a5:04:cc:44:6d:54:70:c5:1e:bd:db:2b:
06:bd:8f:76:8b:22:4d:ed:05:ab:d1:59:41:70:8b:df:fb:9b:
0f:12:22:d5:e5:09:d5:17:4d:5c:83:ab:d3:b1:80:98:e6:d9:
36:6d:3e:b6:df:f6:a2:45:4f:cc:03:13:7a:9e:10:1b:58:27:
89:80:42:57:7d:43:ec:9f:e9:15:a0:ea:de:ee:23:fd:32:cd:
1d:15:7d:de:b6:e7:20:29:93:74:15:b1:ea:64:9c:ce:64:e5:
45:fd:0b:5f:0f:c3:6e:6b:fe:24:3f:d9:d6:49:88:00:b8:06:
20:b2:57:51:4e:06:52:73:38:13:2b:15:f4:99:01:59:37:14:
f4:9d:05:ce:0a:51:18:d2:a8:3f:44:2e:1f:07:37:30:a2:3e:
b2:b4:81:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 12:55:53 2024 by rpki-client on console-fra.rpki-client.org