Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/r8Jb9wKMnVtNKybZ-sb1S8yPxf4.roa
File: r8Jb9wKMnVtNKybZ-sb1S8yPxf4.roa (raw, json)
Hash identifier: H9xVZl8lnkeieucryc6KlfqAXGcNH8KIVg7XGg9f7YI=
Subject key identifier: AF:C2:5B:F7:02:8C:9D:5B:4D:2B:26:D9:FA:C6:F5:4B:CC:8F:C5:FE
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0190ED7065FE65B138750771E85D4E1AEF0C
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/r8Jb9wKMnVtNKybZ-sb1S8yPxf4.roa
Signing time: Fri 26 Jul 2024 05:08:04 +0000
ROA not before: Fri 26 Jul 2024 05:08:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 85.115.208.0/23 maxlen: 24
213.145.68.0/23 maxlen: 23
213.145.70.0/23 maxlen: 23
213.145.72.0/21 maxlen: 24
213.145.82.0/23 maxlen: 23
213.145.84.0/23 maxlen: 23
213.145.86.0/23 maxlen: 23
213.145.88.0/21 maxlen: 24
213.145.88.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jul 2024 12:23:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ed:70:65:fe:65:b1:38:75:07:71:e8:5d:4e:1a:ef:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jul 26 05:08:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afc25bf7028c9d5b4d2b26d9fac6f54bcc8fc5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c5:cd:a8:bb:7a:89:7e:2a:51:c8:c8:2d:d4:
a1:be:72:d0:84:29:35:b2:86:bc:44:e8:14:0e:5a:
25:71:7a:e5:3d:16:b9:0e:da:95:5f:a8:92:92:b4:
c2:08:5f:0f:d4:9b:7f:88:7a:b2:9c:90:78:5a:58:
8e:82:89:a3:0f:29:4c:d3:29:ca:2e:7a:42:1c:e7:
11:a5:88:8c:55:b9:d4:f4:17:e1:f2:75:86:aa:89:
5f:54:58:95:b1:35:b8:36:6b:54:1f:6c:43:b8:15:
ab:60:8d:9a:b9:39:6b:2b:61:7e:88:fa:11:7b:26:
f2:bf:dc:1c:fc:4a:74:0e:bb:e5:76:7d:60:62:7c:
db:bf:36:ea:5f:eb:83:27:26:5d:25:7c:76:72:ec:
5a:c0:9e:36:ff:4a:36:ce:f9:04:15:27:f4:93:67:
2d:79:e0:f8:fd:91:95:d4:c6:1e:c1:cc:a5:15:ee:
79:ae:77:d4:b1:5c:9f:da:a5:8c:d9:42:70:68:5c:
31:31:da:4a:eb:fb:0a:6c:de:5b:8a:d1:47:69:2a:
a0:d8:53:66:eb:35:03:ad:19:bd:dd:58:7f:65:d6:
95:d6:9d:73:30:fb:b7:bf:4a:26:5c:1c:81:1e:b3:
0e:aa:27:6f:e7:50:24:04:b7:3b:e4:57:62:e5:93:
d1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C2:5B:F7:02:8C:9D:5B:4D:2B:26:D9:FA:C6:F5:4B:CC:8F:C5:FE
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/r8Jb9wKMnVtNKybZ-sb1S8yPxf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/23
213.145.68.0-213.145.79.255
213.145.82.0-213.145.95.255
Signature Algorithm: sha256WithRSAEncryption
d6:5c:85:cd:21:a3:27:f7:89:be:7e:23:24:b8:1b:e7:72:7a:
6e:46:d8:dc:68:bb:4a:4c:ed:5f:45:0e:08:ab:15:cb:80:ab:
71:38:cc:6d:1e:2b:d4:bd:39:89:0e:78:c5:56:49:2a:04:1d:
2f:a9:de:d3:ea:4f:d0:1f:58:27:de:c8:95:a3:c1:24:41:69:
bb:e0:81:1b:24:87:a8:8e:fa:3d:9a:1d:70:6d:44:ed:47:35:
9f:d5:98:61:c9:8c:4d:1f:8d:bc:c4:b5:55:d7:75:d8:05:fd:
c0:90:99:bc:cf:11:45:b0:fa:01:12:ee:6f:0f:37:94:2c:a2:
04:28:c4:1f:9b:d5:e4:98:23:aa:11:a3:53:4c:ae:5e:18:bd:
07:4d:ac:42:44:9c:1a:c0:7d:bd:6f:f6:7d:60:6d:81:75:2d:
3b:c3:de:7e:eb:0e:d2:1a:df:c5:95:63:68:0a:32:dc:16:14:
38:18:08:29:b0:a6:d8:f9:10:08:c1:99:49:79:73:17:c2:0c:
22:ce:0c:82:d2:bf:39:d5:ff:14:2f:29:f8:a1:d7:9c:ff:a5:
47:1c:3d:e7:4d:5e:dd:60:e0:19:30:99:60:be:67:1d:aa:2a:
b4:62:49:1d:e9:2c:1c:17:a1:d1:3d:1f:e3:bf:96:84:07:fe:
fb:b7:70:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 13:39:25 2024 by rpki-client on console-fra.rpki-client.org