Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/EwlCN13KCQqUcQvL0Qz_hRhlS_M.roa
File: EwlCN13KCQqUcQvL0Qz_hRhlS_M.roa (raw, json)
Hash identifier: Eeu02AyFJ3tpPf8DRB/uvj6GXmccc47uBvjOm1YK3J8=
Subject key identifier: 13:09:42:37:5D:CA:09:0A:94:71:0B:CB:D1:0C:FF:85:18:65:4B:F3
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0191719F7AD03CF85EB97C4C8B0C50EE5527
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/EwlCN13KCQqUcQvL0Qz_hRhlS_M.roa
Signing time: Tue 20 Aug 2024 21:09:22 +0000
ROA not before: Tue 20 Aug 2024 21:09:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 85.115.208.0/23 maxlen: 24
213.145.68.0/23 maxlen: 23
213.145.70.0/23 maxlen: 23
213.145.72.0/21 maxlen: 24
213.145.84.0/23 maxlen: 23
213.145.86.0/23 maxlen: 23
213.145.88.0/21 maxlen: 24
213.145.88.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Aug 2024 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:71:9f:7a:d0:3c:f8:5e:b9:7c:4c:8b:0c:50:ee:55:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Aug 20 21:09:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=130942375dca090a94710bcbd10cff8518654bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e4:b7:54:e1:b8:6c:06:96:d8:37:97:60:18:
a7:45:a6:0c:d9:63:00:96:3e:16:60:e2:c0:87:5a:
74:bd:f9:98:a2:6f:19:9c:27:84:3d:94:3b:01:19:
7d:52:cd:08:09:db:cb:99:0d:e0:13:56:2b:d3:cd:
5c:98:63:7f:97:ef:d5:25:e4:8d:69:b3:4a:2f:fe:
da:67:ea:46:13:a7:df:05:c3:dd:88:5a:a1:6d:6f:
23:f9:07:80:dc:aa:81:d4:5b:dd:22:02:a5:3f:d0:
10:7e:87:a4:bb:2a:e5:44:8b:ed:ee:9c:ed:c2:46:
85:9a:40:38:f8:93:f3:92:d4:7c:22:ac:70:21:7c:
7e:88:f9:36:c3:78:54:65:b8:ad:15:17:ae:e2:38:
46:7c:bf:f7:47:c6:e3:88:97:84:f7:fd:4b:8c:f3:
ad:46:2a:e8:15:42:20:b3:e1:1c:5a:a3:5f:40:8e:
0d:eb:6d:2a:14:6a:30:e7:2d:fc:47:b6:02:88:07:
66:32:7e:05:e4:3e:66:61:ab:f2:d0:70:61:9f:0a:
1e:34:75:bb:96:f3:77:4c:aa:d0:e6:71:4d:e4:a5:
bc:6b:45:be:18:47:11:65:30:7e:ab:13:e5:0c:0e:
a7:6f:21:66:fe:c5:ca:d2:5b:f1:7c:ad:f7:05:52:
05:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:09:42:37:5D:CA:09:0A:94:71:0B:CB:D1:0C:FF:85:18:65:4B:F3
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/EwlCN13KCQqUcQvL0Qz_hRhlS_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/23
213.145.68.0-213.145.79.255
213.145.84.0-213.145.95.255
Signature Algorithm: sha256WithRSAEncryption
55:ac:e8:12:3f:ef:3e:f9:99:1d:8e:57:6e:5b:dc:fd:7a:6b:
f9:c4:a5:9c:01:15:2a:b7:e6:2b:8a:d2:6a:63:2c:cd:b0:73:
03:c2:f1:67:15:67:dd:3e:e0:56:0d:7c:58:c4:e8:62:2e:c8:
9e:0b:1b:18:54:c1:31:95:1e:8f:64:40:79:88:39:19:3d:9a:
29:e9:8e:35:da:65:44:64:78:bc:12:8f:bf:c1:1b:12:5f:f7:
9a:94:75:d2:5c:b2:20:57:31:4b:b6:76:6a:58:d6:75:65:c9:
85:c5:d9:d8:5e:89:5d:f0:9b:b8:14:65:b6:f4:7f:dd:02:a7:
a3:6b:d3:ff:c3:ae:66:c0:c2:33:7d:e4:45:71:ab:03:24:19:
16:b3:c3:ec:54:32:d4:38:e0:ec:61:92:b3:a3:50:d8:4a:fc:
31:ef:03:b3:91:46:89:8d:90:da:d5:b4:49:c5:5d:94:d9:d2:
e0:64:18:f9:c1:92:3e:39:66:5f:83:24:bc:49:a2:50:0d:8c:
ba:ad:bb:c3:b9:9b:55:6c:a6:0c:30:47:10:83:e9:9e:68:77:
5e:35:10:bc:30:3a:f6:87:d1:ac:47:22:34:0b:90:67:4c:bc:
68:bc:37:5a:d9:9b:17:b7:34:8b:61:39:a4:e7:22:49:d1:53:
16:07:26:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 09:22:30 2024 by rpki-client on console-ams.rpki-client.org