Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tOrT79wCeF3NV42LZERgQje-nIE.roa
File: tOrT79wCeF3NV42LZERgQje-nIE.roa (raw, json)
Hash identifier: BoIyoQZBi1h9zJDMRw+Ru/0uCDjHCkGSFwv3hRhOzPo=
Subject key identifier: B4:EA:D3:EF:DC:02:78:5D:CD:57:8D:8B:64:44:60:42:37:BE:9C:81
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0190DF57EAFB5F8F9840ADB4BE9D34654773
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tOrT79wCeF3NV42LZERgQje-nIE.roa
Signing time: Tue 23 Jul 2024 11:26:39 +0000
ROA not before: Tue 23 Jul 2024 11:26:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215730
IP address blocks: 185.125.50.0/24 maxlen: 24
185.172.128.0/24 maxlen: 24
2a0e:d604:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 08 Aug 2024 09:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:df:57:ea:fb:5f:8f:98:40:ad:b4:be:9d:34:65:47:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jul 23 11:26:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4ead3efdc02785dcd578d8b6444604237be9c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:de:03:c7:d7:cd:ae:04:c4:3c:e2:93:99:8f:
3c:4f:c9:57:c3:28:e5:83:79:39:0b:9a:a3:a8:81:
7a:2b:94:a6:28:dd:78:83:22:70:79:14:ea:3f:6e:
b5:23:af:f4:3c:5c:92:87:f7:3a:e0:8d:6e:30:e9:
d2:75:47:e3:48:fc:d5:c2:07:45:04:37:a0:a9:e8:
82:d3:2f:13:f1:2f:8e:6e:b1:69:de:49:d8:87:06:
de:a9:72:3f:80:03:05:1b:2a:8d:68:28:e3:3e:d7:
b7:1d:29:1e:97:63:b0:aa:35:f5:1b:6d:ef:19:0e:
8f:fd:be:b9:b8:06:3b:f1:89:7c:ae:49:8c:e8:c9:
32:84:05:10:19:a2:26:2a:25:e3:36:25:35:36:29:
d4:57:b3:d1:59:2d:c7:a0:a8:a9:96:ba:89:33:ef:
ce:3d:38:36:a5:96:98:b4:4e:ab:ce:9f:d4:2b:cc:
34:9f:1d:be:77:d0:07:ff:71:73:06:b1:82:c4:d1:
85:77:ed:a6:ec:94:95:57:aa:ea:4d:56:bc:fa:c0:
fa:bf:ea:a3:1a:54:79:f1:0d:f2:dd:d1:91:0f:ad:
ae:b6:86:6e:0f:9a:b4:2c:1f:a5:5f:78:5f:7d:c1:
c6:2c:e7:33:51:60:92:79:45:4a:40:44:ce:5b:11:
62:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EA:D3:EF:DC:02:78:5D:CD:57:8D:8B:64:44:60:42:37:BE:9C:81
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tOrT79wCeF3NV42LZERgQje-nIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.50.0/24
185.172.128.0/24
IPv6:
2a0e:d604:1::/48
Signature Algorithm: sha256WithRSAEncryption
43:c3:f0:48:97:d0:4f:41:14:0d:f6:65:fe:c8:4a:fc:d9:06:
51:49:ab:33:e6:f4:e1:f2:82:43:fa:ab:47:25:06:2b:c7:f2:
ce:63:11:78:5d:f3:dc:df:17:6f:c6:ea:44:08:9d:28:1f:89:
bd:77:27:5e:be:20:e4:14:96:74:3d:68:e4:16:ae:8f:5f:46:
2b:bf:d0:c1:83:f2:e8:75:8f:ee:c3:ee:46:ba:49:e6:35:48:
59:9f:a0:08:f7:05:de:80:1e:a8:65:a2:83:81:b8:6d:5b:ca:
92:32:ce:db:33:ea:94:01:01:e9:fb:74:21:66:6b:a4:3f:52:
cc:5b:4c:18:3a:d7:b3:d0:06:00:a8:92:23:97:ef:1e:fe:ab:
33:96:76:1e:7f:01:18:53:46:89:b5:fd:43:68:33:82:da:84:
fd:b1:1a:19:61:06:88:8a:a2:f1:5a:c4:02:76:a0:66:aa:78:
46:51:dc:cf:ee:17:5d:de:48:34:33:fb:50:16:08:24:b4:f0:
51:dd:8e:cc:93:2d:a1:9a:63:e0:4b:7f:0f:de:e4:46:d8:6a:
4b:80:79:75:9a:f2:db:50:bf:55:52:a4:bc:50:9b:12:a0:24:
cc:a1:41:90:b3:a7:e3:7d:ec:fd:17:20:d4:08:23:0e:84:20:
bb:d7:d9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 13:04:24 2024 by rpki-client on console-fra.rpki-client.org