Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/52xRvzHhMz48VzO3YkjIi2_ICJ0.roa
File: 52xRvzHhMz48VzO3YkjIi2_ICJ0.roa (raw, json)
Hash identifier: d/AsOV1ZTOBte1Pu/T7NWJmP0nVhF4Xyz1jK8uvdDGI=
Subject key identifier: E7:6C:51:BF:31:E1:33:3E:3C:57:33:B7:62:48:C8:8B:6F:C8:08:9D
Certificate issuer: /CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Certificate serial: 018BA943D8755B0C0FF4CB8281E987FE53C5
Authority key identifier: BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/52xRvzHhMz48VzO3YkjIi2_ICJ0.roa
Signing time: Tue 07 Nov 2023 10:11:17 +0000
ROA not before: Tue 07 Nov 2023 10:11:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200852
IP address blocks: 185.93.196.0/22 maxlen: 22
185.93.196.0/23 maxlen: 23
185.93.197.0/24 maxlen: 24
185.93.198.0/23 maxlen: 23
2a02:ea00::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a9:43:d8:75:5b:0c:0f:f4:cb:82:81:e9:87:fe:53:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Validity
Not Before: Nov 7 10:11:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e76c51bf31e1333e3c5733b76248c88b6fc8089d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8f:f7:f0:c0:49:16:b0:8b:12:dd:16:cb:62:
df:85:6f:35:a7:79:dd:8c:7b:a5:60:34:c1:52:54:
4f:0a:20:3d:ff:52:8f:56:d3:7a:e2:c1:ad:5d:e1:
89:50:57:86:dd:6d:71:22:8e:80:0d:b8:85:7c:9f:
c2:a6:19:34:24:32:db:97:3d:2f:63:6e:f4:c2:0e:
17:60:c7:08:dd:e4:5c:fb:18:fb:bd:d2:8c:10:a0:
de:c5:07:44:4e:ff:ea:bb:16:6e:b5:2c:1b:27:f3:
78:25:e7:38:96:05:f4:35:db:45:58:b4:f8:53:5f:
1a:69:c0:3d:42:7c:8f:19:d4:1c:43:26:7a:b6:48:
82:4e:62:48:33:cb:12:59:15:34:ab:ce:91:a2:5b:
11:fe:7b:a9:30:9b:6e:05:a4:fe:10:f3:a3:f9:1d:
f5:19:bc:c9:c5:5d:56:85:4a:7b:ca:70:3a:87:47:
d3:18:fa:d1:7b:f5:e4:e9:bc:a7:fa:56:e3:d7:42:
e1:d8:9f:1a:0b:ef:c0:29:55:15:bd:df:e1:a4:73:
c1:0b:ab:58:e8:0f:cc:98:e6:94:72:49:32:c4:34:
e8:86:f9:3c:65:4a:3d:13:f2:4a:00:5d:a1:86:22:
cc:de:56:b1:e2:b7:06:f4:ee:4f:12:ba:15:74:9f:
19:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6C:51:BF:31:E1:33:3E:3C:57:33:B7:62:48:C8:8B:6F:C8:08:9D
X509v3 Authority Key Identifier:
keyid:BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/52xRvzHhMz48VzO3YkjIi2_ICJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.196.0/22
IPv6:
2a02:ea00::/29
Signature Algorithm: sha256WithRSAEncryption
0d:09:56:a7:ab:f3:28:90:79:3c:42:06:d5:15:17:cc:56:97:
04:3b:9e:80:4a:9d:70:8c:54:d7:1c:df:a5:5d:fd:8a:ff:de:
03:89:1c:60:d9:43:43:3d:fd:55:2e:b9:1e:58:70:f0:e6:75:
e2:9c:fd:b2:94:96:9c:0e:7f:0a:a6:e0:b4:3e:0e:f8:af:02:
fb:f9:61:80:b4:ae:c0:7f:96:b5:41:2a:c0:91:bc:bc:34:4f:
59:36:74:f0:d2:34:79:d2:46:dc:08:e1:ae:22:d6:23:45:32:
34:3a:9e:8f:12:8a:7a:17:42:f9:1c:e3:de:57:43:ef:e7:60:
50:49:19:02:d3:7f:41:83:c0:80:8d:31:7f:ef:f9:38:5c:90:
f9:88:97:0e:b5:89:8f:5c:a5:e4:00:c7:38:2a:ed:62:13:c4:
b1:da:a1:e1:05:27:5f:ec:17:0b:74:ca:b9:ee:85:85:13:71:
46:99:c3:21:ca:ff:67:7e:00:8b:41:87:69:bb:e5:20:7c:e2:
aa:99:de:d7:6d:48:e4:54:c0:2f:7f:bc:11:46:c8:a8:75:d3:
e5:62:1d:ff:e9:84:41:d5:ba:8a:80:f1:ac:bf:f9:a1:3d:58:
b9:4d:ce:ec:ab:04:07:45:82:f1:05:32:58:80:68:86:fe:50:
39:f5:ee:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org