Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/8sPK9Qrl71LB1gBgUuu3lQnzC-E.roa
File: 8sPK9Qrl71LB1gBgUuu3lQnzC-E.roa (raw, json)
Hash identifier: yfMqOaAyxKbXnxUaBPOchioQViW1px/nSP2AezgOMU8=
Subject key identifier: F2:C3:CA:F5:0A:E5:EF:52:C1:D6:00:60:52:EB:B7:95:09:F3:0B:E1
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 018CC802CA1A71C9241EF8A138F5C66196F4
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/8sPK9Qrl71LB1gBgUuu3lQnzC-E.roa
Signing time: Tue 02 Jan 2024 02:31:15 +0000
ROA not before: Tue 02 Jan 2024 02:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48881
IP address blocks: 188.212.111.0/24 maxlen: 24
37.156.7.0/24 maxlen: 24
86.105.26.0/24 maxlen: 24
46.102.254.0/24 maxlen: 24
93.113.28.0/24 maxlen: 24
91.250.247.0/24 maxlen: 24
188.209.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 14:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:ca:1a:71:c9:24:1e:f8:a1:38:f5:c6:61:96:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 2 02:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2c3caf50ae5ef52c1d6006052ebb79509f30be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:45:b7:6d:17:8f:a7:8c:cd:11:e4:b9:eb:98:
d5:8d:6d:e5:ff:5d:a6:b7:f9:44:71:92:fe:d0:ab:
37:1b:fe:a0:e2:e4:e5:8c:48:dd:3a:13:8f:da:9a:
98:b6:1d:86:f8:e1:55:24:5a:5a:5c:49:48:32:53:
0b:5d:58:f5:8b:15:35:bc:2a:57:a1:81:16:e9:b4:
24:00:57:40:39:d9:1f:ee:62:39:66:20:a5:1e:f6:
e5:8c:6e:22:57:ee:17:f9:b1:b1:85:b7:e2:4b:6e:
12:42:33:57:73:18:7d:b7:b4:4a:63:4a:a2:01:c2:
14:ab:b7:9d:51:6a:d9:af:8e:9b:b1:27:4c:39:48:
a1:ce:f6:ff:a5:d4:32:c6:ea:af:9a:25:45:34:08:
8e:62:40:f3:d6:51:ba:fc:58:65:c7:0b:44:f7:48:
59:26:e6:13:a1:2e:7c:5e:c1:f8:7c:bb:0c:64:9c:
1b:1e:95:a9:6e:6b:0c:11:8a:0d:f1:3c:84:3b:03:
4e:e2:7d:23:33:5f:7c:74:59:70:c7:a0:30:ce:f4:
bc:c2:81:08:3e:2b:d0:34:b8:f3:d8:d4:7d:1f:e1:
8e:13:55:b9:1b:e0:cf:55:6c:b6:16:d3:77:bd:17:
63:c5:26:ad:fd:b0:eb:9d:cc:9b:7d:04:b8:7f:08:
96:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C3:CA:F5:0A:E5:EF:52:C1:D6:00:60:52:EB:B7:95:09:F3:0B:E1
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/8sPK9Qrl71LB1gBgUuu3lQnzC-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.7.0/24
46.102.254.0/24
86.105.26.0/24
91.250.247.0/24
93.113.28.0/24
188.209.212.0/24
188.212.111.0/24
Signature Algorithm: sha256WithRSAEncryption
79:97:4e:fb:dd:80:b6:a0:c1:3e:82:84:11:08:c7:a0:c9:ce:
d6:27:d6:07:e8:8c:41:fb:cc:de:80:13:dd:c7:12:3b:30:ef:
2a:ad:fe:ae:14:02:b8:9e:4f:5b:5b:6c:84:4f:99:24:3a:fc:
6c:2d:da:e8:f4:3a:e4:8a:4b:07:48:ca:17:63:01:d8:23:7d:
19:ae:80:20:c9:72:fb:f9:c0:e3:1a:c7:a0:8a:01:33:fd:6d:
a6:bf:f5:20:3f:fa:cb:68:d0:3f:51:11:1d:f9:4d:df:7a:6f:
ac:e1:a2:e7:9a:a2:b1:65:58:65:7f:9c:fd:d7:e6:1a:b5:c0:
2a:2d:7e:c0:bd:6c:b9:b8:57:7f:3d:51:20:14:67:31:9e:2e:
55:54:f0:19:7e:0f:a2:fb:0d:f5:e8:cb:a0:91:6d:15:09:57:
7a:5d:ee:a7:a5:64:a5:5b:16:d9:19:08:1e:d7:88:0c:18:89:
cb:29:c6:d4:37:29:fe:d8:9d:76:a4:32:87:00:5f:67:91:9b:
44:58:73:4e:78:89:50:05:7f:62:9f:6b:5b:e7:8e:0a:e0:40:
79:33:63:d0:34:ca:e2:0d:20:92:17:70:79:98:72:a7:15:1e:
17:7d:57:cb:91:f7:27:b1:66:3b:6c:88:85:14:3b:2b:c2:9c:
6e:9c:a9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:00:48 2024 by rpki-client on console.sobornost.net