Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/eVkiiGr9PV1AmN8Ci-nzXA_Lxt4.roa
File: eVkiiGr9PV1AmN8Ci-nzXA_Lxt4.roa (raw, json)
Hash identifier: LQ3/dipxoh12mrSCnM64Lt4XSU+3Zho2VeS7YbzLMKE=
Subject key identifier: 79:59:22:88:6A:FD:3D:5D:40:98:DF:02:8B:E9:F3:5C:0F:CB:C6:DE
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018B313199C062BECC072FFB04B951ED6399
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/eVkiiGr9PV1AmN8Ci-nzXA_Lxt4.roa
Signing time: Sun 15 Oct 2023 02:36:55 +0000
ROA not before: Sun 15 Oct 2023 02:36:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209706
IP address blocks: 185.172.20.0/22 maxlen: 22
185.64.100.0/22 maxlen: 22
62.112.0.0/21 maxlen: 24
62.112.12.0/23 maxlen: 24
188.212.104.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 15 Oct 2023 02:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:31:31:99:c0:62:be:cc:07:2f:fb:04:b9:51:ed:63:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Oct 15 02:36:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=795922886afd3d5d4098df028be9f35c0fcbc6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:60:a5:c5:3f:fc:eb:f7:99:ec:1a:1a:a8:8c:
04:c0:60:51:89:5d:48:5c:9a:da:b2:f0:69:b7:d4:
08:a3:a0:63:b2:e6:d4:92:59:0a:b0:82:db:7e:e5:
ad:f7:0a:76:59:d7:03:8c:1f:80:57:e8:b2:cd:69:
7e:aa:26:3c:0e:5b:da:71:5f:f8:46:bb:ce:47:c4:
7c:5e:77:ae:eb:2b:f8:cf:43:95:22:20:87:ed:56:
80:0a:6d:1e:47:e5:11:30:87:84:4a:39:ef:64:3d:
35:76:ce:1b:1d:d5:96:20:46:3f:23:ef:94:88:e1:
ce:c0:6b:83:1a:3f:2e:1b:68:ae:33:9e:26:a1:be:
50:cc:3d:7c:66:4b:67:a1:82:42:1d:65:21:5b:96:
b2:a3:52:32:a9:8a:5f:eb:da:02:7f:68:db:15:90:
8d:5a:59:14:59:45:03:32:96:22:a3:10:95:58:5a:
14:2b:fd:49:42:ff:ed:84:5e:92:b9:41:8a:51:84:
3a:dd:f6:ba:46:f0:34:a0:d0:1e:0d:83:22:9d:d8:
b1:c3:af:58:ee:0c:82:14:95:3f:c1:48:62:b7:1f:
ed:9f:98:4e:14:ba:44:bb:da:5b:c2:ba:4e:b4:0f:
6a:f5:ed:04:cc:e0:31:a7:5d:ea:9d:2c:f3:6f:49:
95:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:59:22:88:6A:FD:3D:5D:40:98:DF:02:8B:E9:F3:5C:0F:CB:C6:DE
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/eVkiiGr9PV1AmN8Ci-nzXA_Lxt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.0.0/21
62.112.12.0/23
185.64.100.0/22
185.172.20.0/22
188.212.104.0/22
Signature Algorithm: sha256WithRSAEncryption
13:e4:8d:7a:14:73:2c:d8:ee:a0:7a:2f:67:de:ac:19:ee:e5:
e1:10:8d:db:8a:4d:39:ff:e2:ee:5e:99:74:3a:72:09:6b:68:
72:49:50:bb:11:8e:8a:c5:f7:46:74:b5:a3:8b:0a:0d:ce:54:
31:11:57:fb:26:1a:b7:fc:f6:36:48:3b:26:12:c1:d0:9a:fb:
b7:66:4b:11:fc:2e:00:be:e2:a7:40:a8:37:7a:9f:65:b3:1b:
b8:76:1a:c9:32:29:29:8d:21:62:fa:74:06:35:97:5f:19:37:
39:5d:6b:79:9e:4b:eb:93:ff:d5:b0:e2:36:ef:05:a5:aa:b1:
55:00:34:ab:e1:eb:e1:df:3c:ba:a8:02:fe:52:3d:82:91:13:
1e:21:67:4f:74:2f:63:81:17:95:74:30:37:80:aa:13:83:71:
94:f1:02:ce:f0:47:f1:f5:24:ed:87:9c:ce:3c:d5:db:78:05:
d3:a8:9e:ce:a5:71:4e:d9:be:36:c2:52:8d:27:f4:49:0c:49:
fb:17:a6:2c:c7:67:3e:2d:ff:cd:cb:82:86:ea:5f:a0:6e:d5:
52:b6:1d:13:99:33:f6:b3:38:a0:9d:d4:a3:18:5b:87:51:0a:
50:0b:31:ca:97:cc:f2:72:71:14:6b:fc:87:ed:cb:25:99:af:
1b:21:58:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:49 2024 by rpki-client on console-ams.rpki-client.org