Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/UePJNzsMaYFJS3p0jAesGBb8eOA.roa
File: UePJNzsMaYFJS3p0jAesGBb8eOA.roa (raw, json)
Hash identifier: QXYpUsZdSYqCuB27DAimDYkkrIhGyFlrD2jkc1C5Frg=
Subject key identifier: 51:E3:C9:37:3B:0C:69:81:49:4B:7A:74:8C:07:AC:18:16:FC:78:E0
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 018CC56DF69916BB9C1B71D705D14728E8A9
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/UePJNzsMaYFJS3p0jAesGBb8eOA.roa
Signing time: Mon 01 Jan 2024 14:29:27 +0000
ROA not before: Mon 01 Jan 2024 14:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64267
IP address blocks: 85.115.209.0/24 maxlen: 24
213.145.75.0/24 maxlen: 24
213.145.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 09:09:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f6:99:16:bb:9c:1b:71:d7:05:d1:47:28:e8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jan 1 14:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51e3c9373b0c6981494b7a748c07ac1816fc78e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f5:ae:36:60:de:5d:f8:6b:89:0a:63:5d:84:
dd:43:d2:99:60:14:62:66:cc:48:f3:42:17:38:47:
0a:1f:40:9d:1d:22:ab:9e:0c:1f:09:5c:c2:a3:cd:
73:95:0f:c7:e8:d5:65:3e:2a:47:60:57:57:39:2b:
76:cd:57:bf:00:65:4f:70:bf:b8:65:7d:44:1b:cc:
1d:7b:c1:28:f5:eb:8a:42:3c:1d:8b:2f:bc:ff:f2:
17:e1:ef:bc:ab:38:70:12:4f:fb:5b:49:3c:0d:c8:
53:be:cc:8d:11:16:b9:d6:33:b8:e9:3e:a7:ef:fc:
5a:d5:42:d0:b1:9e:fb:ba:de:bd:f3:cc:04:24:0d:
b2:f0:14:6f:d8:d1:f2:fa:16:52:30:c1:62:29:35:
03:0e:d0:f9:94:c7:a9:96:93:4f:11:90:75:af:e6:
26:8d:a0:0d:22:b8:7a:bb:4c:cc:c7:7b:98:ca:3d:
ca:69:a4:51:59:1f:c9:3d:cc:1f:07:e4:d5:92:27:
18:d0:e3:fb:aa:ff:52:fa:54:4b:28:e2:5e:7f:98:
be:1d:eb:38:c6:a6:3e:3a:a7:42:a3:03:c2:2c:e0:
76:8c:a8:89:82:e7:c2:cf:3e:c7:39:3f:73:11:59:
8c:f7:ee:b7:79:0a:80:53:e2:96:9c:13:ea:10:4b:
58:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E3:C9:37:3B:0C:69:81:49:4B:7A:74:8C:07:AC:18:16:FC:78:E0
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/UePJNzsMaYFJS3p0jAesGBb8eOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.209.0/24
213.145.75.0/24
213.145.95.0/24
Signature Algorithm: sha256WithRSAEncryption
98:1a:8d:68:9f:50:46:75:b3:08:df:23:7d:0e:86:61:cb:50:
a3:94:79:ac:a6:9a:e1:dc:49:c8:41:51:1f:e2:b1:51:f3:46:
78:c0:93:de:e8:a4:8e:5d:1b:fe:6b:00:98:eb:82:b1:5b:61:
fc:93:4a:a8:16:80:e7:04:e6:45:ef:a0:5b:c1:82:b8:65:7e:
fc:bb:22:9a:4a:42:ba:10:2b:35:f9:43:da:c8:30:fb:4f:35:
63:3c:38:58:a7:b1:e6:97:76:11:6f:45:e3:33:75:03:10:72:
84:0d:6a:a5:f3:eb:af:c4:68:fe:f2:eb:ed:66:0b:2c:74:13:
3d:d0:03:9f:61:b3:64:ed:3d:00:af:33:17:bb:8e:26:df:6a:
0e:0a:e7:2f:47:13:91:bf:24:86:31:33:7e:fc:27:47:44:50:
85:52:13:52:ec:47:17:00:6e:a3:48:58:1e:d9:1f:6e:2a:06:
43:fa:bd:08:f9:58:5d:db:40:e0:b3:f8:aa:90:de:ac:95:ac:
f8:0e:5e:38:a3:d3:cf:b5:a1:67:cf:07:e1:8b:25:5b:05:5f:
ce:09:aa:f0:54:c6:bb:b9:d4:f2:bc:bf:a4:41:3a:47:a3:fe:
76:75:9b:14:b3:0c:7b:a7:c3:4e:c4:f5:53:67:ec:2c:dc:17:
84:8a:53:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:12 2024 by rpki-client on console-ams.rpki-client.org