Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/9w6md7DdKzX9Qc7-nIsujYpGBMs.roa
File: 9w6md7DdKzX9Qc7-nIsujYpGBMs.roa (raw, json)
Hash identifier: jShVM3ShB7Cy1jReCdJGGrnzuLL6GgYqZ/hcmHeDGYE=
Subject key identifier: F7:0E:A6:77:B0:DD:2B:35:FD:41:CE:FE:9C:8B:2E:8D:8A:46:04:CB
Certificate issuer: /CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Certificate serial: 018BB3A46466BFC83F99993F38768A07B64B
Authority key identifier: A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/9w6md7DdKzX9Qc7-nIsujYpGBMs.roa
Signing time: Thu 09 Nov 2023 10:32:57 +0000
ROA not before: Thu 09 Nov 2023 10:32:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9008
IP address blocks: 85.93.192.0/19 maxlen: 24
80.90.32.0/19 maxlen: 24
109.69.240.0/21 maxlen: 24
195.200.240.0/23 maxlen: 24
185.211.232.0/22 maxlen: 24
2001:1610::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b3:a4:64:66:bf:c8:3f:99:99:3f:38:76:8a:07:b6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Validity
Not Before: Nov 9 10:32:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f70ea677b0dd2b35fd41cefe9c8b2e8d8a4604cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9b:3e:d4:39:87:79:d4:55:ed:e6:47:d8:76:
7a:48:80:a2:a0:85:31:8b:af:81:4e:82:4a:28:34:
4a:16:43:04:f3:fb:62:52:9d:bd:44:79:fd:88:0a:
85:66:bf:7d:82:ff:2c:5a:b2:99:0f:67:e6:cd:d2:
7b:70:b3:1d:26:a3:74:07:a9:4d:04:ca:e3:e4:8c:
24:47:8e:16:88:0f:64:24:9a:12:13:6b:7a:f7:7b:
e9:85:fd:7f:11:97:cd:8c:5e:d8:88:2b:18:f8:0e:
a0:6a:c0:85:54:04:7a:fe:f4:82:c9:56:a5:b1:4a:
3e:09:28:72:ee:4c:29:f8:8d:32:8d:61:22:cd:d9:
d3:ce:1a:80:03:41:c3:7a:e1:52:a6:53:3c:32:0a:
c2:93:83:19:a6:00:58:1c:9b:da:fc:38:6f:8a:32:
b0:fb:00:96:97:3e:c4:01:85:a9:ff:2e:c1:f0:f9:
a9:69:ed:28:0c:db:7a:ae:f1:82:13:6e:45:3a:d2:
94:ba:b0:59:f9:21:16:35:f4:0a:ea:63:99:dc:95:
82:9e:8f:34:a2:50:32:5d:90:74:fd:96:fb:61:7a:
ef:3b:af:e5:79:4f:a9:27:30:cc:72:91:f4:fe:35:
b0:fc:8b:c3:b1:ce:ea:13:78:2c:27:39:7f:25:69:
9b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0E:A6:77:B0:DD:2B:35:FD:41:CE:FE:9C:8B:2E:8D:8A:46:04:CB
X509v3 Authority Key Identifier:
keyid:A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/9w6md7DdKzX9Qc7-nIsujYpGBMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.32.0/19
85.93.192.0/19
109.69.240.0/21
185.211.232.0/22
195.200.240.0/23
IPv6:
2001:1610::/29
Signature Algorithm: sha256WithRSAEncryption
05:5b:34:e7:03:80:51:00:15:ba:f0:83:46:fe:d1:cf:5a:9e:
f5:cf:c5:36:b7:ca:2a:6c:09:29:d5:35:8a:f9:f8:69:b5:dd:
0d:9a:a5:2c:35:99:6e:4b:4e:ba:ee:29:93:f3:28:bc:7f:98:
03:64:ed:90:7b:9e:81:b2:68:a2:2e:f0:fe:8a:c2:e7:95:fe:
25:37:c3:f0:e5:9f:58:7c:e1:ed:85:10:ad:54:1a:3d:8a:48:
06:0f:94:68:c2:8a:f7:db:93:0a:de:95:7d:80:27:4c:dc:23:
3e:4d:8f:6b:de:a2:76:88:06:c0:29:a7:c8:d1:c2:b4:ba:b6:
f0:2e:40:23:83:a6:4e:1a:8a:dc:5e:d0:1c:2b:af:34:ad:49:
db:0b:26:06:3d:7f:29:3f:30:ef:44:db:3e:b2:ce:a6:89:2f:
c8:a4:f4:9b:85:0d:68:5e:59:bc:97:2f:e2:a5:3c:d8:b4:b5:
64:42:42:27:f6:06:d5:6c:c2:b4:22:6d:3c:f5:4d:23:08:27:
e1:34:55:d4:a0:89:ed:9b:99:38:13:cd:d8:c4:b2:1e:6e:8d:
63:94:7d:1d:38:90:30:04:93:e2:3b:84:11:b9:55:86:50:aa:
9c:0a:54:c3:69:99:94:de:64:16:b7:28:0e:04:a3:30:d2:5d:
9c:dd:44:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:50 2024 by rpki-client on console-fra.rpki-client.org