Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/S8ebWxpGQC9AhsYJia3TJF3Iu6M.roa
File: S8ebWxpGQC9AhsYJia3TJF3Iu6M.roa (raw, json)
Hash identifier: rJsRNppXF3+yP0reOqaur5fKlggo3rydq/qTpBKzeO4=
Subject key identifier: 4B:C7:9B:5B:1A:46:40:2F:40:86:C6:09:89:AD:D3:24:5D:C8:BB:A3
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01932E9532A9000BEED34AE613AF4A3E9826
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/S8ebWxpGQC9AhsYJia3TJF3Iu6M.roa
Signing time: Fri 15 Nov 2024 06:49:10 +0000
ROA not before: Fri 15 Nov 2024 06:49:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 85.115.208.0/23 maxlen: 24
213.145.68.0/23 maxlen: 23
213.145.70.0/23 maxlen: 24
213.145.72.0/21 maxlen: 24
213.145.82.0/23 maxlen: 24
213.145.84.0/23 maxlen: 23
213.145.86.0/23 maxlen: 23
213.145.88.0/21 maxlen: 24
213.145.88.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Nov 2024 13:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2e:95:32:a9:00:0b:ee:d3:4a:e6:13:af:4a:3e:98:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Nov 15 06:49:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4bc79b5b1a46402f4086c60989add3245dc8bba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:51:15:9d:e7:90:d8:37:d0:8d:10:17:1c:75:
67:fe:ac:83:44:32:22:37:8d:d8:cc:c1:34:a9:f3:
06:cb:e8:3d:d2:46:70:9e:f7:55:cc:9c:65:4b:bf:
bf:b4:46:4b:64:8c:a9:bf:49:2d:9a:43:8d:dd:82:
b4:97:0e:92:01:89:06:ed:fd:63:86:ec:52:27:29:
f3:52:72:ba:54:4a:47:0b:a1:0c:29:4b:28:97:d5:
c3:48:d8:fc:49:01:6e:7f:c4:94:eb:f9:4c:18:64:
ba:c9:75:ce:02:84:38:09:7a:94:0e:2c:20:3a:d3:
ea:cb:86:c6:f2:a0:ad:68:99:7d:40:56:93:c1:8c:
a2:f2:dd:04:f0:df:61:40:74:f1:d7:c9:95:a6:6d:
1a:e0:a0:62:eb:af:b1:e8:5c:7b:2e:5a:4a:20:33:
1c:3a:1f:7f:b9:f2:fd:35:0e:74:af:38:09:14:4f:
22:68:3c:4d:72:31:37:8d:53:c0:95:6a:34:24:d2:
9d:49:64:4c:43:62:9f:b0:b1:5f:71:50:cb:4e:1c:
78:f3:7b:54:5e:b1:05:f2:eb:a6:cd:8a:d1:c5:04:
ae:da:f6:d7:02:5a:0b:af:25:a4:47:58:bf:b7:99:
b6:16:c2:88:0f:27:50:f6:15:f7:27:5e:55:ec:0d:
8b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C7:9B:5B:1A:46:40:2F:40:86:C6:09:89:AD:D3:24:5D:C8:BB:A3
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/S8ebWxpGQC9AhsYJia3TJF3Iu6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/23
213.145.68.0-213.145.79.255
213.145.82.0-213.145.95.255
Signature Algorithm: sha256WithRSAEncryption
b7:2b:4d:d9:95:f9:42:1b:22:61:7f:aa:58:3b:b9:4d:96:7f:
6c:ae:27:36:cc:44:25:6d:71:fc:63:89:00:a1:2d:00:69:e5:
7c:38:6e:9c:4c:ff:e7:e3:e5:7a:51:33:03:a2:19:dd:44:37:
8c:17:be:8d:3f:7a:35:6d:c3:ab:fb:c6:79:95:ae:14:aa:b5:
f4:83:9e:ed:30:31:f9:e5:64:8a:b2:0b:57:fb:10:f5:e1:fa:
f5:30:cc:40:e9:ff:46:86:76:6b:f9:5c:65:7e:cd:5d:45:cd:
35:da:ab:b0:18:c0:96:b2:69:55:31:6e:28:ae:95:39:41:19:
0b:07:e0:34:e0:1e:4e:66:44:a4:b9:58:52:f8:25:20:8e:34:
22:6c:6b:04:48:61:50:cf:c7:5b:62:50:f3:6a:bf:ec:cb:d6:
00:e9:bd:86:c2:ae:a4:fc:71:98:40:c1:ae:7d:4a:8a:62:88:
93:2e:d4:da:52:bc:05:21:d9:16:b2:82:01:03:23:0f:66:46:
04:26:22:77:eb:22:f1:9c:95:c5:31:15:c3:77:db:f7:51:98:
f9:2c:1e:ad:1d:36:02:bb:df:d0:c9:87:47:08:f9:73:cf:70:
ec:c3:25:bd:5b:d7:80:ac:be:4c:b2:22:67:b8:d3:f6:05:52:
e3:ea:58:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 14:38:36 2024 by rpki-client on console-fra.rpki-client.org