Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/gG9eNRYAUKPLUCl4qfu_swH_tMc.roa
File: gG9eNRYAUKPLUCl4qfu_swH_tMc.roa (raw, json)
Hash identifier: PuwTo+5Fhl+bP8S7C/lLXJ39z/SyE2KkURFQE9CfjmU=
Subject key identifier: 80:6F:5E:35:16:00:50:A3:CB:50:29:78:A9:FB:BF:B3:01:FF:B4:C7
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 01856F4298D3BF2639AFAD9CF11A07B26548
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/gG9eNRYAUKPLUCl4qfu_swH_tMc.roa
Signing time: Sun 01 Jan 2023 21:35:13 +0000
ROA not before: Sun 01 Jan 2023 21:35:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31100
IP address blocks: 85.93.69.0/24 maxlen: 24
85.93.72.0/24 maxlen: 24
85.93.77.0/24 maxlen: 24
212.40.190.0/24 maxlen: 24
85.93.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:98:d3:bf:26:39:af:ad:9c:f1:1a:07:b2:65:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 1 21:35:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=806f5e35160050a3cb502978a9fbbfb301ffb4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e7:8f:81:c3:00:fa:50:57:39:e0:c7:42:bd:
71:50:0b:6c:42:83:76:64:42:7b:3d:76:79:32:7e:
d6:9d:2f:0d:ac:4a:f1:10:3a:d0:4d:d6:e3:f6:b9:
1d:7b:06:72:ea:27:44:11:85:9f:f4:6e:d7:af:03:
4c:15:00:ab:11:f2:61:06:8c:aa:3b:02:24:90:de:
4c:2c:7e:27:70:2e:43:66:47:69:05:93:6a:61:c4:
6c:60:44:0e:f2:74:fa:e1:da:a4:fe:90:40:98:fa:
2f:f2:23:b0:2b:6d:83:47:eb:86:64:c2:b6:db:ea:
cc:1b:3f:4a:2a:d6:99:28:d0:86:b8:6b:ca:fb:13:
4c:b6:7f:2f:3c:4d:de:64:ac:ed:78:6e:fb:a2:da:
1e:1c:0d:2d:2a:7b:71:ed:12:74:43:a6:4e:45:fe:
30:5d:8d:98:44:5a:e1:58:dd:f8:30:d8:5b:e5:63:
5b:35:e4:3e:75:d8:02:d5:6d:36:27:94:fd:6a:c1:
ec:30:5b:86:38:f7:ce:3c:72:cb:7d:a0:79:9e:bf:
61:05:0c:27:9d:05:95:f5:7b:41:bb:54:06:3e:63:
2f:58:fc:74:f4:6a:7f:e5:64:f9:a2:a5:29:87:68:
c4:52:3e:81:7d:5b:5c:20:57:4d:6c:06:00:fa:82:
66:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6F:5E:35:16:00:50:A3:CB:50:29:78:A9:FB:BF:B3:01:FF:B4:C7
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/gG9eNRYAUKPLUCl4qfu_swH_tMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.93.64.0/24
85.93.69.0/24
85.93.72.0/24
85.93.77.0/24
212.40.190.0/24
Signature Algorithm: sha256WithRSAEncryption
90:c2:e1:0e:3f:0b:b8:4a:d0:69:f1:fd:77:52:3b:91:a7:a6:
07:81:fe:ff:ce:9f:6f:7f:63:ae:8e:17:be:bc:19:fc:f7:bc:
09:aa:ed:2b:7b:50:16:ba:72:02:bd:36:31:4b:d0:a1:c9:2c:
d7:08:47:45:73:06:5c:54:b7:17:a0:79:bf:82:6f:4a:25:f0:
d3:ad:b6:d0:08:0a:d6:aa:82:4e:19:a1:a4:1d:2e:db:63:39:
ed:87:42:d9:df:4e:2d:20:7f:08:59:44:37:bc:2b:ae:71:d6:
9b:41:6f:1c:d7:bf:f5:77:54:72:01:dc:64:bb:f8:4f:f3:7e:
15:a2:40:41:29:2c:f2:b2:0e:33:3a:83:e9:92:19:f4:ca:ca:
a3:d3:90:9d:3a:b8:6d:5a:65:78:47:ca:b6:dd:28:b7:46:9b:
1d:85:63:96:20:65:b3:e1:a6:c9:c6:2f:94:41:3d:a8:c2:2b:
b7:68:e9:4a:59:45:0a:24:41:c8:df:d9:e5:22:6c:96:c4:fe:
cb:bc:a8:81:46:f3:ba:85:36:34:21:76:13:29:52:93:54:bd:
52:a1:c8:1d:f5:44:2f:4e:4b:d7:31:8f:94:4a:0c:1a:24:a3:
db:b6:f1:01:1d:f0:5a:e5:2e:f0:06:f3:22:e7:c8:23:cb:a8:
0b:64:46:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:03 2024 by rpki-client on console-fra.rpki-client.org