Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/7tnZJ4MKRrI8zC4KE9FzjzRW2Ys.roa
File: 7tnZJ4MKRrI8zC4KE9FzjzRW2Ys.roa (raw, json)
Hash identifier: I4EkLZbXeU+/s+clH8TVKWmHqCcfv1AbK+83Eskb3pc=
Subject key identifier: EE:D9:D9:27:83:0A:46:B2:3C:CC:2E:0A:13:D1:73:8F:34:56:D9:8B
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 018B9B941967DBA4A69EAFAA2223A9389060
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/7tnZJ4MKRrI8zC4KE9FzjzRW2Ys.roa
Signing time: Sat 04 Nov 2023 18:24:16 +0000
ROA not before: Sat 04 Nov 2023 18:24:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 185.254.52.0/24 maxlen: 24
193.111.77.0/24 maxlen: 24
193.111.78.0/24 maxlen: 24
93.190.10.0/24 maxlen: 24
93.190.8.0/24 maxlen: 24
93.190.11.0/24 maxlen: 24
193.17.4.0/24 maxlen: 24
193.17.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9b:94:19:67:db:a4:a6:9e:af:aa:22:23:a9:38:90:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Nov 4 18:24:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eed9d927830a46b23ccc2e0a13d1738f3456d98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:21:56:5c:40:12:88:69:4b:bc:cb:52:bd:1a:
8d:15:2a:6b:b1:ff:9a:0b:33:00:65:8d:1a:a4:cc:
a8:46:6d:3a:b0:cd:d5:89:07:ff:b9:fb:1e:a5:19:
59:4b:05:53:b3:c4:68:13:d3:22:c5:7b:f2:0b:b1:
6c:72:6a:14:0f:22:2d:19:d3:1c:c4:d6:89:59:43:
f7:3d:71:25:79:08:36:75:b0:b3:b8:fd:88:62:10:
ca:6f:5d:b2:cb:09:f5:fc:38:e8:4b:bd:7d:07:f7:
c2:1a:20:b2:44:fb:73:ca:ca:cb:5a:98:ae:28:a1:
71:fb:54:57:70:21:12:0c:e8:bd:72:de:0d:35:4f:
28:7f:ad:4d:5d:64:24:46:77:4e:94:0d:75:0a:87:
c4:52:90:e1:0e:6d:90:95:79:4a:03:7f:e4:88:0d:
ed:9f:21:29:a3:e7:e2:3d:d7:11:a6:5f:9a:b6:c1:
3e:ee:bb:f3:f5:db:1e:4c:20:67:f8:85:32:4b:f3:
c4:2b:fc:82:10:d6:22:5c:bd:b8:49:f4:91:e2:86:
3e:57:de:67:f2:e0:06:e0:5a:6a:09:52:97:b4:26:
45:27:99:74:cb:a9:89:65:04:a0:48:e3:53:9b:56:
38:66:df:b2:5a:9c:84:9f:ff:88:c0:56:41:38:6e:
76:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D9:D9:27:83:0A:46:B2:3C:CC:2E:0A:13:D1:73:8F:34:56:D9:8B
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/7tnZJ4MKRrI8zC4KE9FzjzRW2Ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.8.0/24
93.190.10.0/23
185.254.52.0/24
193.17.4.0/24
193.17.6.0/24
193.111.77.0-193.111.78.255
Signature Algorithm: sha256WithRSAEncryption
de:04:7b:ec:77:14:5c:bd:22:bb:09:43:fe:3e:96:ec:5d:8e:
85:e7:00:22:ed:b0:2f:b9:3e:8b:df:45:71:16:49:85:29:49:
fc:8f:1e:0e:43:52:88:98:4a:e9:14:18:b6:13:4d:14:dc:79:
5b:df:72:77:e4:9e:04:d2:c8:8d:19:0c:34:90:df:9a:e2:8d:
56:d1:82:f2:48:f5:ed:6b:08:5c:d3:18:aa:bc:6a:48:86:bb:
0b:ae:5c:6b:99:9d:f4:58:db:a4:6b:72:1c:b0:ea:ba:49:89:
72:b0:40:dd:d9:9f:16:0e:5a:9b:83:f8:3c:79:64:3b:a4:c6:
b5:2f:23:42:8a:f0:62:3f:b6:13:66:d9:7e:d3:3b:b6:bf:cb:
5d:64:ca:b5:e2:ee:fe:26:dc:74:55:b2:f3:aa:aa:a7:50:df:
3b:5d:8e:39:34:38:1a:f5:cb:c8:b1:f6:23:90:76:d3:01:e0:
bb:3b:ce:eb:48:f2:8a:c8:cf:55:fd:69:55:a6:5f:77:2c:c6:
ac:8a:38:65:f5:28:28:60:68:fa:23:44:93:70:d5:96:3f:ac:
a3:f7:1d:b2:0a:a6:90:65:57:37:48:c2:33:a2:37:58:0c:f7:
49:c9:32:b8:ac:37:0c:f0:3e:5a:40:1d:ed:0f:4b:dd:f3:51:
b7:0b:54:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:49 2024 by rpki-client on console-ams.rpki-client.org