Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/f7Hu3wYkvrcNhK4Gp4OqSuu7rKE.roa
File: f7Hu3wYkvrcNhK4Gp4OqSuu7rKE.roa (raw, json)
Hash identifier: tf6ofg02tIJhUrb4TNwEclvieP6zckCNXyAYClUi5IA=
Subject key identifier: 7F:B1:EE:DF:06:24:BE:B7:0D:84:AE:06:A7:83:AA:4A:EB:BB:AC:A1
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CC8DF9D086BC07CDD95EDE964A054C613
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/f7Hu3wYkvrcNhK4Gp4OqSuu7rKE.roa
Signing time: Tue 02 Jan 2024 06:32:27 +0000
ROA not before: Tue 02 Jan 2024 06:32:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51765
IP address blocks: 185.204.1.0/24 maxlen: 24
185.103.110.0/24 maxlen: 24
185.112.82.0/24 maxlen: 24
185.212.149.0/24 maxlen: 24
185.117.118.0/24 maxlen: 24
185.217.196.0/23 maxlen: 23
82.115.220.0/24 maxlen: 24
185.221.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 11:55:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:9d:08:6b:c0:7c:dd:95:ed:e9:64:a0:54:c6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 06:32:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7fb1eedf0624beb70d84ae06a783aa4aebbbaca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:05:97:90:c8:7c:38:f8:21:44:83:40:ae:5d:
93:3a:27:8c:c3:30:21:f8:74:b9:8f:aa:52:2a:ce:
7c:b6:6a:3f:be:7c:cc:f9:03:bb:04:f2:8c:30:fa:
95:fc:07:ac:94:77:a2:e1:a0:e6:b1:8c:84:19:10:
cf:c5:54:8d:3d:5e:5d:4c:33:20:09:12:77:4f:ea:
2d:3e:ca:a6:e3:9b:e3:6e:6d:fa:5e:79:09:eb:de:
74:35:fb:c7:c8:70:a8:45:d7:cd:aa:27:1d:6b:86:
75:d9:58:fa:c3:49:28:22:e9:89:dd:e9:0d:67:3c:
e2:ae:e0:90:e2:8b:5e:8d:e4:fe:15:ab:91:c1:fc:
72:ba:c9:c3:8b:3a:4c:41:d5:af:90:20:e5:09:14:
70:4b:7b:b9:69:cc:66:27:c4:66:a3:06:c0:83:7a:
2c:ce:16:51:c7:ba:97:2f:cc:5a:cb:17:0a:35:df:
a5:ff:55:18:bc:38:bf:28:d9:c9:25:2d:67:dd:ea:
59:24:bf:da:8b:ee:4d:e0:b2:14:32:81:b5:65:eb:
c4:9b:57:d2:15:2b:10:f3:5e:ed:2a:24:e6:83:90:
a4:49:50:47:95:88:0f:27:e1:ea:4f:84:02:f5:96:
60:b9:18:6e:67:c3:d7:91:0f:45:91:00:88:15:79:
ce:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B1:EE:DF:06:24:BE:B7:0D:84:AE:06:A7:83:AA:4A:EB:BB:AC:A1
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/f7Hu3wYkvrcNhK4Gp4OqSuu7rKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.220.0/24
185.103.110.0/24
185.112.82.0/24
185.117.118.0/24
185.204.1.0/24
185.212.149.0/24
185.217.196.0/23
185.221.163.0/24
Signature Algorithm: sha256WithRSAEncryption
02:8d:f2:50:95:58:3e:35:81:d5:7c:b3:5d:59:43:63:d9:0b:
1b:dc:ae:3a:1b:6b:d8:7e:96:90:49:d4:5b:9e:4f:ca:26:af:
ce:5d:2f:65:9e:fa:99:14:b8:b9:13:cf:1c:90:bb:cc:ed:93:
00:d4:43:2a:64:45:61:e5:a9:c2:68:af:f0:38:0e:d5:b2:d8:
8e:92:8a:35:9f:1c:32:99:76:a4:2d:84:c0:74:ac:81:c3:fb:
06:b2:7d:ff:c2:f8:7e:95:ff:2c:85:31:b9:92:9d:2e:0d:5f:
0e:8d:c5:68:3f:a6:2f:6d:a3:d5:95:f8:86:7e:4e:63:82:18:
c9:34:d5:10:c0:7e:fa:ae:40:eb:80:b9:74:d4:69:a6:d3:de:
3c:ef:54:dd:c5:c0:05:01:ab:91:80:80:36:e0:41:c4:65:45:
73:30:28:10:00:e9:4d:3d:8e:3a:a3:b7:fd:5d:2d:5e:49:fa:
ab:4d:8e:72:b8:e5:59:e9:5d:fc:dd:8d:9f:28:1b:f2:54:00:
32:6a:10:00:4f:4e:92:4e:08:49:05:b3:f8:45:62:93:c8:88:
ec:9a:0f:25:19:03:ee:92:5d:80:a8:4d:a8:e0:8f:63:4c:0c:
de:b1:12:dc:d5:42:78:0d:2c:aa:1c:93:a1:d8:99:6a:e6:99:
24:31:3e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org