Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/1-bGC5VW2-DB74hQgVbAZoSAYBV8.roa
File: 1-bGC5VW2-DB74hQgVbAZoSAYBV8.roa (raw, json)
Hash identifier: PbKHMxfuYJ0HuflYLBL2BpY3+ms6oOwlFCV24JOGIAk=
Subject key identifier: F9:B1:82:E5:55:B6:F8:30:7B:E2:14:20:55:B0:19:A1:20:18:05:5F
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 018CC9BB07F7D059A273711FF4F8214E3EDF
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/1-bGC5VW2-DB74hQgVbAZoSAYBV8.roa
Signing time: Tue 02 Jan 2024 10:32:06 +0000
ROA not before: Tue 02 Jan 2024 10:32:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60781
IP address blocks: 194.37.81.0/24 maxlen: 24
185.247.117.0/24 maxlen: 24
185.181.8.0/24 maxlen: 24
185.227.110.0/24 maxlen: 24
2a07:3b80:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 Feb 2024 22:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:07:f7:d0:59:a2:73:71:1f:f4:f8:21:4e:3e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Jan 2 10:32:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9b182e555b6f8307be2142055b019a12018055f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:02:a7:e7:c6:01:e0:1d:f5:58:71:7f:45:52:
8b:92:e0:2c:25:ee:45:a5:97:1f:e4:2f:36:29:da:
3f:17:f1:2d:d1:2a:82:5e:7f:34:41:e5:c1:9c:6e:
59:a2:74:28:06:6f:84:d1:d3:f5:95:af:cf:f0:d9:
5e:17:a2:c9:b3:fe:b7:e2:40:9e:57:90:87:fc:56:
0e:fb:cd:8d:ae:3e:8c:5d:dc:26:35:6e:89:c2:61:
18:df:0c:c9:f5:e6:23:c5:70:0d:be:71:57:17:3b:
92:b0:dc:5b:8a:bf:9b:b3:73:0b:e7:3e:b9:23:4e:
05:67:73:05:ce:1b:eb:4b:07:fc:1b:18:79:2d:ae:
48:53:cc:bd:db:8c:fe:29:b0:27:9b:a8:a1:f5:48:
80:90:8c:eb:2f:40:3c:7c:a5:97:35:d2:d2:f5:a0:
25:b2:00:13:05:b0:61:26:7f:d3:fd:fc:eb:63:d9:
ae:9e:ed:f3:18:16:19:e3:7a:f3:72:96:49:6c:85:
ac:5d:72:d5:6e:71:aa:76:97:6d:be:5a:f5:8b:1f:
28:6b:34:0d:97:db:1b:b7:40:1e:6b:31:24:6f:ee:
ac:96:1b:57:50:f4:63:03:2f:d8:d8:3a:ed:28:e5:
93:37:d3:f3:54:52:fa:94:bf:fe:f1:2e:c1:ab:83:
93:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B1:82:E5:55:B6:F8:30:7B:E2:14:20:55:B0:19:A1:20:18:05:5F
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/1-bGC5VW2-DB74hQgVbAZoSAYBV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.8.0/24
185.227.110.0/24
185.247.117.0/24
194.37.81.0/24
IPv6:
2a07:3b80:3::/48
Signature Algorithm: sha256WithRSAEncryption
1c:f7:09:17:e7:42:5d:70:dd:b0:09:8d:d3:49:6a:52:59:65:
d7:47:bd:8d:02:e7:72:4f:76:7f:d0:24:ea:d9:77:e9:34:f6:
6e:ad:e6:7a:09:4f:33:00:ff:15:32:1b:8e:d5:c0:c8:3b:35:
f0:28:5b:26:bf:bd:1c:ab:b8:13:5f:9e:7b:16:e3:50:0d:15:
91:2e:92:79:8a:e8:9f:fd:b6:15:b0:04:90:15:f6:1b:fc:63:
fa:fc:86:e1:cf:71:f5:76:81:84:a2:74:65:e1:cc:48:d4:07:
f2:a5:b4:b5:97:03:d5:52:7c:54:75:35:5f:b1:9e:d7:fc:36:
a5:6a:3f:98:1d:a1:70:a1:39:8c:55:8d:31:35:ce:4c:2c:62:
16:41:0b:7f:01:e7:70:db:1f:a8:d2:ff:e2:6e:85:01:98:87:
67:2b:f3:e8:e8:ca:bb:8d:10:1e:42:a1:f5:37:9f:81:d5:b8:
2c:a6:75:45:bb:8c:10:3e:82:0d:fc:6d:eb:fe:d9:c9:dc:f1:
70:bd:b7:13:33:35:65:46:a1:dd:6a:17:92:23:5d:e8:87:cf:
70:f8:c1:72:3b:57:69:87:76:86:e2:81:db:94:11:41:01:93:
91:17:c0:62:dd:f5:62:62:35:a7:11:38:f6:48:41:d6:7f:ae:
e7:3e:0b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 02:46:30 2024 by rpki-client on console-ams.rpki-client.org