Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/GAEA3BUQfDCVUgGbikvOeekKL-8.roa
File: GAEA3BUQfDCVUgGbikvOeekKL-8.roa (raw, json)
Hash identifier: lW1RtQTWyahrHhqkEvW7sZOjYaDI7q6EzHeHA4+O6gM=
Subject key identifier: 18:01:00:DC:15:10:7C:30:95:52:01:9B:8A:4B:CE:79:E9:0A:2F:EF
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 018CC00F50A8513DD4F8877939B14B85D410
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/GAEA3BUQfDCVUgGbikvOeekKL-8.roa
Signing time: Sun 31 Dec 2023 13:27:58 +0000
ROA not before: Sun 31 Dec 2023 13:27:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 85.237.80.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c0:0f:50:a8:51:3d:d4:f8:87:79:39:b1:4b:85:d4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Dec 31 13:27:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=180100dc15107c309552019b8a4bce79e90a2fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:62:69:ec:dc:e7:44:b3:85:42:ba:79:ef:07:
e3:cc:07:ba:3e:ca:f3:19:11:06:cd:09:b7:91:2b:
8d:34:b4:06:34:1b:74:62:9c:8e:b1:c2:d5:04:3f:
69:81:d3:cd:e4:5f:f0:98:b7:2b:44:f4:7e:dc:c0:
39:4e:40:36:23:dd:81:b3:7c:df:09:46:8d:0a:2b:
ad:4e:49:ed:cb:d6:ce:3e:d8:ca:85:85:6a:2f:6b:
1e:f3:65:f3:10:bf:3c:28:69:04:00:4a:88:ff:d8:
34:6f:25:50:bf:e9:64:6f:fd:68:14:5c:5f:4e:20:
34:00:bd:7f:fa:8e:dc:0c:d2:23:b5:fa:e5:f8:9b:
b1:47:b2:cf:fe:2e:f7:39:c8:88:b0:9f:9f:94:88:
c2:31:a8:fd:b7:a0:b7:18:ad:71:8b:13:0e:67:18:
92:5c:47:09:1c:e8:c6:1d:0c:0d:1e:27:87:04:7c:
62:58:2d:23:70:9e:c5:37:c6:cc:0c:06:fe:1d:10:
cc:38:71:2e:ca:0a:0e:5e:de:86:08:57:d8:87:bf:
e1:bf:1f:22:f7:d7:21:fa:03:4c:4e:9b:61:34:32:
c5:9a:93:ae:ac:12:d9:5d:50:c2:07:5d:77:06:7a:
54:68:a2:eb:1c:0a:8b:16:0e:95:28:14:a3:f3:8d:
58:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:01:00:DC:15:10:7C:30:95:52:01:9B:8A:4B:CE:79:E9:0A:2F:EF
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/GAEA3BUQfDCVUgGbikvOeekKL-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.80.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:df:12:91:75:f5:4e:1e:51:2d:4e:1c:10:2c:09:02:64:c8:
24:b6:eb:5e:a9:b1:04:91:d8:e5:46:28:21:26:2f:f0:72:64:
95:fb:26:88:bc:bc:ed:57:46:ac:5e:99:d0:72:66:1d:12:e8:
36:9d:a8:c1:72:f3:60:e2:d2:91:0a:ab:18:0b:41:38:d5:21:
d0:e5:69:d4:2b:96:8e:64:06:8a:d9:94:6c:f1:65:f1:65:6e:
f9:73:4e:01:23:d1:02:89:32:a8:54:79:e4:a0:a5:27:08:c7:
73:84:73:15:04:da:42:c3:34:04:05:98:b1:36:b5:ef:ae:81:
15:c3:ee:8d:37:6a:a1:31:d8:9c:06:7f:21:87:03:5f:06:75:
8e:1d:b0:8c:ef:a0:0c:76:15:11:63:fa:fd:69:48:e0:04:8d:
79:56:28:90:dc:42:33:ba:f3:62:8e:e9:60:a2:35:11:26:15:
63:6e:56:0f:fe:0c:e5:77:e3:d2:4a:77:e5:a1:e3:48:4c:84:
88:74:63:bd:b4:ba:dc:08:cc:e5:8d:09:23:5d:ca:e0:e0:72:
a1:b6:48:e0:a3:0d:13:0d:a6:d0:4c:a8:20:40:bc:e8:87:7a:
5d:6c:06:15:47:62:7f:b9:91:c4:b7:5b:68:61:8f:ed:8b:71:
59:95:96:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org