Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/8jyyrIXpCgLN6V0DxyT0SSJ4Krk.roa
File: 8jyyrIXpCgLN6V0DxyT0SSJ4Krk.roa (raw, json)
Hash identifier: NCQhzxxqvuHv3mjrJytT0RpLKdrqsknxlOtK7051dU0=
Subject key identifier: F2:3C:B2:AC:85:E9:0A:02:CD:E9:5D:03:C7:24:F4:49:22:78:2A:B9
Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial: 01856F9DB20F6B0E6D7493A6D8F4E08C4D0F
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/8jyyrIXpCgLN6V0DxyT0SSJ4Krk.roa
Signing time: Sun 01 Jan 2023 23:14:43 +0000
ROA not before: Sun 01 Jan 2023 23:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58224
IP address blocks: 185.115.76.0/23 maxlen: 23
185.115.77.0/24 maxlen: 24
185.115.76.0/22 maxlen: 22
185.115.78.0/24 maxlen: 24
185.115.76.0/24 maxlen: 24
185.115.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:b2:0f:6b:0e:6d:74:93:a6:d8:f4:e0:8c:4d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Validity
Not Before: Jan 1 23:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f23cb2ac85e90a02cde95d03c724f44922782ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ee:93:db:75:1c:79:49:6b:73:8a:e4:38:13:
1b:15:7b:a6:4d:bc:20:dd:56:a6:1e:1a:5d:b1:db:
49:ff:9f:3e:73:be:2e:8c:10:12:8f:13:14:bc:9d:
44:a3:4a:e5:d3:3b:c8:90:c9:5f:75:c0:d1:37:1a:
97:83:16:52:66:5a:8f:03:a9:c0:b0:07:7a:4d:9c:
a0:bd:9c:0d:2f:0f:02:48:e4:8b:4b:19:48:01:74:
51:c2:f3:0d:af:82:d9:f6:ef:26:ad:f5:b1:3b:f6:
e9:c4:bd:ec:ac:c6:07:5d:5d:a5:5d:b7:db:e0:9e:
33:75:21:82:45:2d:12:8d:6e:b5:15:f6:3d:a7:20:
a0:b7:66:8d:5c:8a:5d:0d:19:4f:fd:dd:aa:61:e2:
2b:f2:9b:b6:ed:6b:3c:36:a5:66:40:ec:9e:5c:07:
de:41:96:92:37:47:c8:a0:31:88:17:8c:ec:54:e5:
52:c5:5e:2f:ef:d9:25:90:13:f2:f6:3d:de:57:7e:
5b:01:17:88:bc:41:86:c0:f5:7e:58:45:0f:00:8d:
99:7a:81:21:53:01:e2:9b:f8:05:56:4e:35:9c:c7:
7e:84:35:29:34:30:5e:5f:cf:f0:8f:7e:b3:cd:86:
1e:d0:8d:a8:47:16:5f:f6:4c:99:97:d3:91:ce:e0:
12:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3C:B2:AC:85:E9:0A:02:CD:E9:5D:03:C7:24:F4:49:22:78:2A:B9
X509v3 Authority Key Identifier:
keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/8jyyrIXpCgLN6V0DxyT0SSJ4Krk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.76.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:bd:b5:a1:3a:d0:db:c0:ac:e1:fe:cd:88:93:0d:dc:8f:d6:
77:ba:32:e6:6b:83:d1:30:7d:0c:be:50:de:cb:11:2c:f2:0f:
49:df:24:1c:d8:6a:f1:e2:b2:97:31:56:05:89:9c:27:91:75:
41:21:46:b9:14:ba:e3:f2:3d:29:50:71:4d:b4:ad:00:89:8a:
3f:75:45:8b:14:37:17:97:b3:06:13:b4:d8:6b:c0:8e:e8:f9:
6f:6b:a2:68:1f:cc:80:4b:4c:06:5d:d5:2d:00:92:65:84:19:
5c:35:e6:32:77:51:27:19:28:ef:cc:d7:0a:fe:20:7f:43:98:
7b:44:0a:26:95:12:a2:99:0d:64:fc:9c:f4:8a:3c:de:78:9c:
ce:e7:db:46:ee:4c:b0:b3:b1:0e:0e:1b:d4:ac:2e:eb:8c:30:
6c:b1:aa:d2:d9:cb:a2:94:cd:b0:f5:34:29:2e:b9:db:dc:17:
22:bd:91:3d:2e:53:e0:b6:44:df:7d:02:37:21:f4:51:b1:ea:
d9:27:ac:c7:f1:83:f4:b2:e3:b3:69:b9:a3:50:2d:87:e9:ee:
5f:a3:b4:4d:11:85:92:76:98:21:3f:ab:8c:02:5b:06:e6:61:
88:e5:b4:20:ea:74:c5:c3:ed:2e:ad:53:77:7d:40:32:22:46:
d4:67:44:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:17 2024 by rpki-client on console-fra.rpki-client.org