Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/8V7IOmJhkLur-lZXN4sAIp_eWFk.roa
File: 8V7IOmJhkLur-lZXN4sAIp_eWFk.roa (raw, json)
Hash identifier: zuvrCgwQEQEx6+l+55lsf46tdt6Y/bYe0NMRwrslBXM=
Subject key identifier: F1:5E:C8:3A:62:61:90:BB:AB:FA:56:57:37:8B:00:22:9F:DE:58:59
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0185737AC1EC6F4F28BFBB6FB934B898108A
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/8V7IOmJhkLur-lZXN4sAIp_eWFk.roa
Signing time: Mon 02 Jan 2023 17:15:02 +0000
ROA not before: Mon 02 Jan 2023 17:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48146
IP address blocks: 92.118.248.0/22 maxlen: 24
151.237.131.0/24 maxlen: 24
185.240.22.0/24 maxlen: 24
185.240.20.0/23 maxlen: 24
185.240.23.0/24 maxlen: 24
151.237.58.0/24 maxlen: 24
194.36.104.0/22 maxlen: 24
185.209.8.0/22 maxlen: 24
151.237.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jan 2023 10:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:c1:ec:6f:4f:28:bf:bb:6f:b9:34:b8:98:10:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 2 17:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f15ec83a626190bbabfa5657378b00229fde5859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e2:f4:b3:2a:a0:72:f2:c4:7d:07:85:0a:65:
9a:b1:e9:b4:9e:4c:26:0d:6c:82:f8:bb:cd:35:7f:
1d:b1:5a:fe:5f:1c:37:8f:ec:a0:50:d5:1f:6d:fa:
41:3e:18:34:bf:08:63:31:4f:b8:72:99:47:ba:25:
10:bd:89:a3:17:0e:34:fe:a4:9e:75:08:47:f2:fc:
e4:c8:98:99:97:a2:8b:29:37:9d:66:8d:cf:65:6c:
a2:ea:ed:99:72:3f:71:2a:90:00:c7:d3:d5:29:8c:
94:fc:f7:97:54:78:fb:e4:8f:cc:ba:11:a4:c7:3c:
19:a6:c7:4a:12:ea:49:71:d4:fe:9d:21:7c:85:01:
1e:a3:cd:42:bd:b3:0b:6d:2a:d9:cd:29:a2:b5:50:
67:ee:aa:b2:5c:a3:a8:6c:7f:cf:86:dd:1a:c6:a4:
94:1d:09:6d:6a:8a:96:65:12:30:7b:d1:af:79:69:
00:81:52:db:48:e7:d3:fd:c0:7e:4c:68:a2:9d:1d:
90:b7:1f:08:55:e4:0f:33:fc:c2:b7:6e:c9:b1:fc:
aa:ec:24:d9:41:48:e3:70:fa:a3:71:c5:9b:0d:da:
ef:68:fd:6c:0a:84:8d:85:95:bb:00:5e:ba:20:d0:
4d:b9:9a:6b:1f:fe:e7:54:78:93:67:66:4c:f5:64:
0a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5E:C8:3A:62:61:90:BB:AB:FA:56:57:37:8B:00:22:9F:DE:58:59
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/8V7IOmJhkLur-lZXN4sAIp_eWFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.248.0/22
151.237.58.0/23
151.237.131.0/24
185.209.8.0/22
185.240.20.0/22
194.36.104.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:87:6d:60:90:0b:e7:99:60:c4:95:2a:f4:5e:b5:d9:c2:b1:
f1:3e:37:45:aa:b6:99:c3:c8:63:35:58:d9:5e:c3:1a:37:91:
bd:d7:31:a4:48:19:54:10:07:16:9a:17:e0:43:9f:9b:de:4a:
5e:84:b4:5e:6a:55:92:0d:ff:58:f5:5a:dd:d3:a3:45:db:b4:
4e:e8:d0:a3:08:b8:cf:3d:77:a3:4c:79:d1:08:4e:75:44:9e:
29:f5:3a:0c:87:6c:c2:2f:d7:35:24:3b:86:30:9e:27:92:a6:
d9:05:af:39:83:50:2a:5f:49:b0:e3:7a:77:47:07:2e:42:1a:
a5:87:ef:4e:f9:dc:27:ac:ad:43:48:2c:87:87:be:9b:4e:71:
f4:e1:cb:2c:78:30:81:2d:0f:8d:37:96:db:80:a5:1e:62:11:
bf:96:cd:21:d5:b8:8d:42:09:27:09:ee:92:b6:0b:28:59:f1:
86:b2:e1:86:81:0d:51:06:7c:74:d6:9b:07:45:c5:66:3a:b6:
81:33:b0:84:93:d7:fe:37:2d:8a:35:b7:b4:33:cc:97:cb:ab:
1b:86:06:1d:6e:f1:05:a0:44:28:09:4a:34:d9:a2:3b:e5:a1:
18:45:42:02:2a:48:fe:53:f9:11:61:9d:f3:43:94:fb:c6:d0:
ae:7e:53:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:50 2024 by rpki-client on console-ams.rpki-client.org