Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/EpUetjfanGvaSncoQ-Kddo25rhs.roa
File: EpUetjfanGvaSncoQ-Kddo25rhs.roa (raw, json)
Hash identifier: 9AbYCMjQbKNjIzYBfMaVWQqLNQWC82ztI8KGcmMskFE=
Subject key identifier: 12:95:1E:B6:37:DA:9C:6B:DA:4A:77:28:43:E2:9D:76:8D:B9:AE:1B
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 018FCD7A7D538F1E217272A5D6D97AE1226D
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/EpUetjfanGvaSncoQ-Kddo25rhs.roa
Signing time: Fri 31 May 2024 07:08:27 +0000
ROA not before: Fri 31 May 2024 07:08:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200523
IP address blocks: 83.222.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 14:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:cd:7a:7d:53:8f:1e:21:72:72:a5:d6:d9:7a:e1:22:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: May 31 07:08:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12951eb637da9c6bda4a772843e29d768db9ae1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:99:f7:da:b9:a1:d8:bc:20:e1:bf:60:94:a9:
d1:40:ea:e1:1b:0d:1e:30:7d:49:25:08:62:61:e7:
6e:3f:cf:35:90:0c:8b:3d:a1:2d:0c:15:bb:6a:63:
e8:fd:dd:54:b6:e4:9d:d5:8a:6a:c4:f7:3a:6d:84:
de:ea:b1:4a:39:43:c7:81:5f:0c:5e:b3:50:5e:4c:
fb:08:1c:9b:99:c7:25:2c:76:c1:dd:53:d2:96:26:
15:13:9f:0b:92:a8:a5:3a:22:fc:28:0b:40:b4:6d:
02:7f:89:0a:6c:b9:c0:d9:33:a1:86:20:0f:51:d9:
dd:e5:d1:5b:a6:cf:f8:49:72:8c:96:1a:c8:e1:64:
4b:6d:9f:62:82:69:9d:d1:6e:62:6e:e4:78:4e:86:
88:60:dc:9f:a0:83:57:7d:c4:b9:49:84:4a:43:85:
e8:20:e9:4c:f8:71:ac:c5:8c:53:2d:ed:42:43:43:
23:26:53:aa:ce:96:fd:d3:16:4f:6d:e6:4e:12:ec:
bb:1d:10:73:91:9f:2f:5a:e2:87:3c:e1:f9:17:e8:
70:a2:da:f9:af:cb:bf:55:2f:6e:83:36:7d:4d:b1:
d0:39:fe:76:cf:00:10:b9:fa:fb:9f:8e:82:03:ae:
7f:83:ad:3b:9c:70:3d:03:26:5d:96:2a:25:b6:be:
fc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:95:1E:B6:37:DA:9C:6B:DA:4A:77:28:43:E2:9D:76:8D:B9:AE:1B
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/EpUetjfanGvaSncoQ-Kddo25rhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.222.184.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:47:60:0f:50:cf:56:6c:9b:a1:e5:11:5e:08:60:91:3e:16:
dd:b9:37:83:c8:06:6c:9c:52:2e:37:72:7d:fa:84:6e:6b:ab:
c4:bc:ea:9d:45:8c:0e:01:aa:70:17:2a:df:e5:a3:52:4d:60:
71:41:f6:de:5b:dc:9b:f8:fb:3a:59:77:49:58:f0:dc:89:b2:
2d:f7:c8:25:2f:a6:d4:5f:74:65:ce:a7:1a:2e:d7:cb:9a:c8:
d2:90:e9:c1:6e:69:b0:6d:b3:d0:87:7e:a6:6e:1a:49:d1:2a:
09:59:f6:08:ae:f1:8e:10:ad:e3:c3:32:08:c5:ba:80:8f:41:
3b:13:a2:e9:fe:f1:66:24:03:a2:2c:16:ca:52:da:0c:45:66:
29:7f:33:59:f0:c7:f0:0b:9f:2f:0a:ab:2b:f7:bc:25:d6:58:
1f:9f:6c:3a:78:45:41:db:82:96:21:ff:e4:18:2c:44:3f:0d:
f8:88:f6:86:d1:51:c6:d1:e2:ea:47:93:31:58:6f:f0:89:35:
de:bc:19:80:0a:3e:90:51:c3:1a:3c:ab:57:a8:6d:98:55:48:
f3:f2:e9:65:1d:27:15:1e:1e:2f:a1:34:a2:7a:0e:a9:92:c9:
9e:38:0f:80:de:9a:ec:ee:3d:9c:b4:02:23:b9:2d:85:c5:6c:
64:f9:33:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 18:13:02 2024 by rpki-client on console-fra.rpki-client.org