Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/aEEUK2H8oaMBhASMBkLP39AisMI.roa
File: aEEUK2H8oaMBhASMBkLP39AisMI.roa (raw, json)
Hash identifier: 521QC3cjGj4P2iqflzXDCEVKeI+b7GK1dPGUDIoYI4U=
Subject key identifier: 68:41:14:2B:61:FC:A1:A3:01:84:04:8C:06:42:CF:DF:D0:22:B0:C2
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 018C9BA0D6F40D2CE096158D4EFC63744FAC
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/aEEUK2H8oaMBhASMBkLP39AisMI.roa
Signing time: Sun 24 Dec 2023 11:40:58 +0000
ROA not before: Sun 24 Dec 2023 11:40:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 213.145.72.0/21 maxlen: 24
85.115.208.0/23 maxlen: 24
213.145.74.0/24 maxlen: 24
213.145.88.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Dec 2023 09:15:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9b:a0:d6:f4:0d:2c:e0:96:15:8d:4e:fc:63:74:4f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Dec 24 11:40:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6841142b61fca1a30184048c0642cfdfd022b0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4e:5f:3d:4a:c4:96:3b:17:73:22:ee:6b:72:
18:62:0a:5c:1a:2c:05:05:4a:6f:bc:7b:b5:58:91:
71:58:8e:8e:cd:33:f9:5d:e7:b4:83:57:2e:17:59:
23:98:a3:c5:80:a9:8d:6b:11:17:01:e9:1c:7a:5d:
c0:4a:5b:5a:bd:58:71:12:da:be:11:14:fb:f3:64:
84:85:10:d7:94:8d:d0:53:fa:76:ae:c9:f3:eb:b8:
0c:ba:06:0f:02:d3:25:7c:e1:47:d3:16:ea:f3:29:
6f:98:a1:e3:b6:e5:b2:03:da:ff:b7:f7:0d:5e:57:
60:6a:9a:c2:71:b1:43:2a:fc:9a:0e:c9:87:44:5a:
aa:ec:88:bd:ff:c0:63:35:9f:a7:78:22:aa:58:11:
42:81:a9:86:8a:67:f7:51:c6:c7:4e:bf:54:ba:b2:
99:19:89:83:87:91:90:c7:75:df:4a:19:f4:41:1f:
89:e7:22:e7:7a:d6:b6:ea:2a:7f:6e:df:9c:f6:93:
59:42:30:c6:fa:01:27:21:3c:54:37:ba:86:d7:96:
cd:d1:73:97:73:75:ea:94:7e:56:4e:5e:a5:a7:01:
0c:71:52:f4:08:e4:2c:20:0a:a8:a1:1d:4b:bf:6a:
4a:a9:22:2b:ea:0b:23:34:5a:3e:2c:91:6e:99:25:
93:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:41:14:2B:61:FC:A1:A3:01:84:04:8C:06:42:CF:DF:D0:22:B0:C2
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/aEEUK2H8oaMBhASMBkLP39AisMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/23
213.145.72.0/21
213.145.88.0/21
Signature Algorithm: sha256WithRSAEncryption
ae:e4:ef:34:41:39:bd:9f:09:ce:a7:5a:27:dd:74:7d:e0:1a:
d4:af:f9:6f:62:42:43:78:b0:95:cb:8c:a7:f8:e7:e3:93:19:
f1:9b:f7:d1:df:9e:2a:10:2c:a4:76:62:85:68:8f:5c:7c:7d:
f4:f8:9b:f0:0e:eb:bf:65:43:53:60:6b:9c:5d:f5:ad:47:bf:
d5:db:a5:e9:66:cd:b6:46:8f:6e:9b:bc:5e:59:ed:24:c6:77:
da:38:33:5b:09:11:c6:cc:dd:b9:3a:f4:df:a5:8f:28:0a:d9:
87:90:f4:54:40:71:c7:8b:8f:a1:aa:19:62:fa:b8:ce:7e:59:
ef:9d:f4:65:3d:ae:66:bc:22:6f:62:1f:97:be:98:d7:be:c8:
6a:bd:04:af:da:8e:a7:c5:27:f8:80:33:a1:41:ba:8f:60:2a:
12:82:dd:43:43:06:8f:c0:68:41:89:d5:8a:7d:65:50:da:76:
1c:03:e1:57:a2:26:3c:fd:14:ac:50:4f:c9:e2:63:a5:e0:a2:
a8:de:3c:d8:41:73:8f:f3:ee:61:e8:9c:f0:bc:3f:46:3e:51:
66:4a:0e:28:0e:d6:c7:11:fe:54:59:27:1e:42:1f:3c:9b:51:
24:a2:fa:44:dd:4a:a6:2c:8d:c5:9c:f8:72:22:0c:f1:d3:c6:
5a:5f:9c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:12 2024 by rpki-client on console-ams.rpki-client.org