Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/K_7thGul3gzz3QWKsi-XQXGSUec.roa
File: K_7thGul3gzz3QWKsi-XQXGSUec.roa (raw, json)
Hash identifier: Sv5A3lRcC+Ulm8svZphzUavp7+OVZRG6M8NFDsmYGaQ=
Subject key identifier: 2B:FE:ED:84:6B:A5:DE:0C:F3:DD:05:8A:B2:2F:97:41:71:92:51:E7
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 018CCA2B4A47E30E44FBD729089817177FAF
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/K_7thGul3gzz3QWKsi-XQXGSUec.roa
Signing time: Tue 02 Jan 2024 12:34:43 +0000
ROA not before: Tue 02 Jan 2024 12:34:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8860
IP address blocks: 185.133.72.0/24 maxlen: 32
45.67.19.0/24 maxlen: 32
185.166.238.0/24 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:4a:47:e3:0e:44:fb:d7:29:08:98:17:17:7f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 2 12:34:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bfeed846ba5de0cf3dd058ab22f9741719251e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:26:45:ab:ac:c6:ef:4b:bd:c3:55:5a:84:dc:
b5:2f:d2:c3:5c:c4:c5:85:3b:54:5a:a8:1a:58:2e:
d6:67:24:07:1d:ff:e0:87:62:0d:7d:34:d1:05:d9:
de:dd:a8:2a:4f:10:f7:01:d1:19:86:a8:74:98:0c:
50:81:25:20:4e:c7:3b:f5:26:9f:84:bb:0f:da:0d:
15:ca:3a:6a:0f:e4:90:5b:fb:aa:06:39:50:67:c5:
e2:41:1c:a4:56:37:13:fa:29:c3:c4:42:d5:a7:2e:
90:2d:1b:9b:88:13:45:a8:d3:45:2d:c7:03:07:5e:
bc:08:f2:19:25:45:ae:93:69:d0:56:4e:83:f2:f8:
47:98:4b:d2:9b:e2:2a:20:de:6b:00:65:aa:40:fe:
49:e0:6e:fb:28:b7:83:a5:66:0d:a0:f3:ff:3b:88:
a9:d9:df:ab:a0:21:b4:72:44:23:96:64:81:25:3a:
f6:62:2b:9c:7d:bc:30:c1:c5:0d:c0:a0:45:2d:0d:
7c:49:95:2c:49:b3:e4:58:8d:2d:39:44:ac:91:7c:
24:b0:57:57:28:53:f4:33:a7:d4:6e:f6:2b:b8:b4:
7d:39:ab:1a:14:72:64:63:c1:d8:0a:03:9a:55:c6:
62:cf:a4:99:61:7c:ea:cf:9a:76:2f:66:b0:0f:8f:
08:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FE:ED:84:6B:A5:DE:0C:F3:DD:05:8A:B2:2F:97:41:71:92:51:E7
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/K_7thGul3gzz3QWKsi-XQXGSUec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.19.0/24
185.133.72.0/24
185.166.238.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:29:57:2b:51:7d:c0:23:5c:26:8f:99:14:b6:88:ed:0f:f2:
81:48:64:36:6f:f3:32:06:27:46:ce:60:54:5c:fe:f3:4d:f0:
91:e1:fb:f6:2f:5c:e6:a0:3d:fc:89:05:cc:17:7b:7e:b6:20:
9f:56:76:d5:60:ca:45:51:9b:87:08:0f:4c:b4:6e:e3:10:4d:
d4:04:dc:fc:ac:07:a1:bc:3a:b3:86:6e:ca:1c:74:33:c2:02:
86:03:1a:88:39:0a:2e:d4:7e:60:67:8d:23:dd:f1:1c:67:a9:
76:a1:fd:78:54:39:48:ae:fe:13:c0:73:8a:c9:7c:26:5d:c5:
ba:cd:40:a8:40:0e:08:e9:31:80:ff:c7:a8:11:db:1b:cb:72:
2a:3b:1f:c2:41:f3:18:70:31:1d:f5:2f:a4:75:e1:8e:88:1d:
39:92:8e:1a:d2:94:7a:d4:17:5b:5d:64:1b:66:73:f9:3c:87:
c3:93:02:6e:4b:af:1e:4b:85:3a:ff:90:58:86:a7:02:84:70:
33:e7:da:75:f0:13:37:a1:13:22:20:c6:dd:83:7a:3d:d7:96:
45:aa:28:9d:74:a7:4f:f2:b0:55:0f:a7:0c:95:a7:2c:d8:b9:
20:c4:16:91:d3:b6:d2:f0:fe:98:f4:fa:5f:ac:76:2e:99:f6:
e7:11:ec:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:47:29 2025 by rpki-client