Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/T07Pg8k9BOLDWkQQha7JVcPu_W4.roa
File: T07Pg8k9BOLDWkQQha7JVcPu_W4.roa (raw, json)
Hash identifier: W442M+m93GgZpu/9coHfg8V9KMLRUmEf40tZqV0Y+Ow=
Subject key identifier: 4F:4E:CF:83:C9:3D:04:E2:C3:5A:44:10:85:AE:C9:55:C3:EE:FD:6E
Certificate issuer: /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Certificate serial: 018A6C30D5693E8CFE204CA812A7335EF275
Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/T07Pg8k9BOLDWkQQha7JVcPu_W4.roa
Signing time: Wed 06 Sep 2023 20:30:54 +0000
ROA not before: Wed 06 Sep 2023 20:30:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49871
IP address blocks: 195.234.129.0/24 maxlen: 32
193.104.9.0/24 maxlen: 32
193.109.236.0/24 maxlen: 32
195.66.154.0/23 maxlen: 32
194.29.56.0/22 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6c:30:d5:69:3e:8c:fe:20:4c:a8:12:a7:33:5e:f2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Validity
Not Before: Sep 6 20:30:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f4ecf83c93d04e2c35a441085aec955c3eefd6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:75:04:1f:21:ad:aa:65:63:5e:c1:f8:48:30:
f8:d1:bf:b9:51:a6:7b:cc:91:c8:56:2c:f1:f4:7e:
d5:db:26:e9:07:91:37:84:2d:62:ff:45:95:01:27:
b2:51:f7:e6:b9:72:1c:c3:2e:90:32:d0:a2:8e:73:
8b:a4:78:5d:0d:af:aa:47:24:ee:54:91:c8:cb:ca:
6c:12:27:1a:09:df:f7:0a:d6:d0:b3:59:46:f4:96:
d6:07:8a:21:4c:e3:78:24:7b:e4:37:89:5f:d7:41:
5a:a2:fc:1b:60:13:11:32:9b:89:32:e4:d1:7c:90:
c5:54:97:ce:f1:03:5f:95:07:08:de:62:5b:56:b7:
ab:21:61:68:de:5a:83:a8:07:cc:83:d2:93:46:a8:
7f:be:ff:86:27:79:f6:61:ec:5d:b9:d6:c3:66:d9:
e3:4c:c5:62:07:22:d1:6a:e2:80:fd:a3:5b:a0:0f:
82:47:a7:df:4b:5a:d9:64:36:7c:44:19:a5:08:d6:
3c:91:8d:50:0a:bc:9a:e3:0c:e6:4f:54:f1:54:28:
13:23:d3:63:91:1a:04:fe:f4:d2:08:77:e8:e0:5b:
c6:ca:51:bd:e4:1b:b9:4b:1d:e2:79:0c:fe:79:3c:
a9:4f:49:73:aa:d1:fd:a1:44:fa:0f:9a:fa:1b:fa:
10:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4E:CF:83:C9:3D:04:E2:C3:5A:44:10:85:AE:C9:55:C3:EE:FD:6E
X509v3 Authority Key Identifier:
keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/T07Pg8k9BOLDWkQQha7JVcPu_W4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.9.0/24
193.109.236.0/24
194.29.56.0/22
195.66.154.0/23
195.234.129.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:f0:4c:54:ce:9b:4b:ea:54:9f:ac:cf:25:10:91:0e:12:9b:
80:9e:70:bf:99:0c:d4:e5:a7:91:f8:8b:0a:cc:13:e4:93:b5:
14:11:f5:e7:ee:56:ec:cf:e6:b0:30:fe:92:cf:5d:62:3a:25:
0b:e4:2f:1b:eb:48:5e:3a:a3:a1:6c:7d:b4:b5:85:af:81:1e:
7c:85:3d:08:86:77:6f:af:b4:9a:8f:34:f0:68:7c:ac:24:d1:
79:71:d5:94:49:2b:d6:f1:ae:0a:69:51:3d:35:5a:b2:4b:dd:
34:76:58:64:bb:90:c7:2b:34:d4:fa:69:8a:15:56:6b:8b:d7:
36:29:94:28:a8:26:18:7d:41:2e:47:25:53:ff:cc:82:56:5c:
11:3c:77:91:dd:33:56:1a:db:09:69:62:10:45:f5:04:0e:48:
e2:f0:29:17:6f:a9:4e:02:b4:8f:4d:5d:ac:1b:67:00:a4:ea:
d0:3c:f6:e0:36:e5:ea:3e:37:94:db:70:31:15:2b:54:63:7b:
f8:84:79:06:47:37:d8:87:5e:56:65:e0:d7:90:d3:d5:84:2e:
33:22:e7:c6:5b:a4:e7:e0:5d:e5:ab:e7:d3:b7:96:5d:f6:56:
8c:a1:bc:6e:83:c5:50:34:d3:36:ce:6e:cf:72:9e:fd:1f:3f:
69:f4:b5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:45 2024 by rpki-client on console-fra.rpki-client.org