Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/8LKHZERlPbUoDTbmJEi4rm-3o3I.roa
File: 8LKHZERlPbUoDTbmJEi4rm-3o3I.roa (raw, json)
Hash identifier: 67eT8gAP8/6tBS+1uW1rDKsRAFwx9jX69ZsGQ35rLRY=
Subject key identifier: F0:B2:87:64:44:65:3D:B5:28:0D:36:E6:24:48:B8:AE:6F:B7:A3:72
Certificate issuer: /CN=987277fc47d848fa5634ce8031a174fc249fa673
Certificate serial: 01946918D53765C5518FF9778BDC07867CC2
Authority key identifier: 98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/8LKHZERlPbUoDTbmJEi4rm-3o3I.roa
Signing time: Wed 15 Jan 2025 08:33:42 +0000
ROA not before: Wed 15 Jan 2025 08:33:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203217
IP address blocks: 185.194.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 14:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:18:d5:37:65:c5:51:8f:f9:77:8b:dc:07:86:7c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987277fc47d848fa5634ce8031a174fc249fa673
Validity
Not Before: Jan 15 08:33:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0b2876444653db5280d36e62448b8ae6fb7a372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d9:e5:6a:6c:0b:7d:75:e2:2a:61:79:1a:10:
fd:0c:ba:b2:4a:35:5f:57:e8:f1:14:2e:6f:cb:77:
c7:f9:01:9c:82:c4:20:83:fc:56:a2:4f:6c:b5:cf:
07:27:70:70:55:20:ac:bd:a8:82:27:54:ea:32:7e:
97:d4:5b:fa:e5:e7:6b:70:7c:b0:ac:e3:d9:b3:96:
b6:7e:95:41:de:4c:d5:4e:f2:cd:6b:fc:72:e2:00:
17:75:76:9d:51:81:09:fc:d9:d7:f1:30:fb:fb:7b:
22:9b:90:23:7e:e7:45:92:16:c0:db:c1:98:84:81:
53:f0:2a:f8:b2:bd:52:0a:10:cf:60:b8:09:24:c5:
26:c4:fe:15:58:ba:48:40:2f:96:c0:f8:e9:a0:86:
27:80:da:f7:fe:00:a8:67:e5:1d:59:b5:41:1d:27:
dd:30:60:e0:32:ad:19:aa:f8:99:db:f1:cf:5d:a8:
db:b5:3a:90:da:01:4f:3d:14:de:77:3c:8c:5d:4d:
a2:30:d8:4c:97:af:9a:21:8c:90:e8:aa:60:c0:2d:
5c:44:9c:7f:bb:31:00:73:e7:26:21:dd:56:3d:22:
94:b9:2d:25:d8:55:e2:9f:c4:ce:70:fd:63:a5:a5:
16:8f:7f:79:52:3f:b0:7b:3a:31:3a:c4:a2:25:ea:
a6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B2:87:64:44:65:3D:B5:28:0D:36:E6:24:48:B8:AE:6F:B7:A3:72
X509v3 Authority Key Identifier:
keyid:98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/8LKHZERlPbUoDTbmJEi4rm-3o3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.8.0/24
Signature Algorithm: sha256WithRSAEncryption
44:c5:57:cb:94:bf:f1:45:e6:6d:22:36:61:07:8d:77:05:18:
01:22:2a:62:be:0f:33:3e:9f:98:8e:d7:db:5a:73:11:a5:0e:
45:e9:3b:68:ce:05:29:44:47:10:b2:07:db:ba:54:14:93:1c:
45:1b:08:2b:ce:5e:52:6c:f6:15:14:48:a8:9f:85:a4:18:e8:
5e:72:55:fc:f1:42:76:37:50:9b:5c:7d:40:b6:57:6d:2f:18:
97:23:0d:9f:59:d6:fa:10:f4:73:1e:ff:54:7d:70:d9:d8:4d:
7b:07:bd:d3:38:89:3a:36:34:9d:4a:63:c3:e9:86:00:68:b4:
e8:50:79:06:33:6b:5a:af:d8:44:60:6a:e1:08:d5:ff:da:4b:
87:bc:48:3f:99:ea:29:05:bf:c6:dd:d5:f3:aa:c1:67:eb:13:
cc:5e:b7:ef:0f:f2:7c:05:e2:41:68:7b:74:7b:4d:96:37:80:
3a:cb:a6:09:f9:23:81:0c:7f:57:99:0f:9f:f0:fd:5f:63:6f:
b5:0b:3e:85:78:7b:f3:af:56:a3:a2:0f:5d:19:59:49:43:c5:
12:ab:48:a7:69:4b:96:06:34:ca:58:f0:e3:83:b3:36:88:2e:
49:c7:fb:96:c5:54:a6:e2:9f:83:c7:f4:02:d1:6d:93:84:fd:
6e:ab:c7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:11:23 2025 by rpki-client