Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/n7lqhm1mngLbIZVliL8JCC0DURA.roa
File: n7lqhm1mngLbIZVliL8JCC0DURA.roa (raw, json)
Hash identifier: GqyyqcRH5TInTH04c4qlFcr9by68wfjBg4G5IOxw1Rw=
Subject key identifier: 9F:B9:6A:86:6D:66:9E:02:DB:21:95:65:88:BF:09:08:2D:03:51:10
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 01856FF93B0229AD3D94E23B0AD7DEF6BDBB
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/n7lqhm1mngLbIZVliL8JCC0DURA.roa
Signing time: Mon 02 Jan 2023 00:54:42 +0000
ROA not before: Mon 02 Jan 2023 00:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3209
IP address blocks: 194.126.198.0/24 maxlen: 24
185.45.248.0/23 maxlen: 23
185.45.250.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 03 Nov 2023 20:13:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:3b:02:29:ad:3d:94:e2:3b:0a:d7:de:f6:bd:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Jan 2 00:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fb96a866d669e02db21956588bf09082d035110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c4:c0:bb:4d:5f:85:7c:aa:72:41:fa:aa:4b:
27:74:a7:11:e1:67:18:29:91:4e:d5:75:5c:8a:66:
9d:a0:04:79:43:61:aa:aa:52:a9:3a:62:5f:9e:da:
57:49:39:80:a9:8b:08:80:95:f8:15:d9:a7:0f:6a:
dd:4e:7a:b3:26:d2:eb:10:6c:7a:e9:81:fa:2b:87:
3f:85:58:a8:3d:d5:ec:2c:94:00:69:84:89:a1:48:
d8:ae:f0:d4:9f:92:fe:3e:f8:e4:47:f7:3a:38:5d:
e6:97:5d:c4:9f:66:da:e6:4a:c0:c3:5a:24:41:c9:
b4:6f:39:93:2f:b6:42:a1:ff:ff:c2:67:c2:37:2d:
e3:0e:61:04:9a:c1:ef:ee:30:0e:80:12:b8:c6:ea:
6f:ab:c4:75:8b:d4:cd:6a:31:d3:1d:8b:58:01:c2:
d2:ae:a9:e4:29:73:34:93:41:b5:53:8f:99:db:1c:
76:5e:74:de:ec:81:a9:2e:80:3b:1a:b9:20:1d:41:
83:43:3c:03:dd:06:3f:53:f2:bf:93:0f:08:92:15:
8b:5e:cd:fe:4a:0f:21:98:dc:0d:22:d0:ea:c7:e5:
f6:27:a9:d4:62:51:1c:b6:0c:61:8d:8d:2c:a7:69:
54:55:af:4c:94:cd:00:9c:55:b5:a5:aa:de:32:a4:
53:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B9:6A:86:6D:66:9E:02:DB:21:95:65:88:BF:09:08:2D:03:51:10
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/n7lqhm1mngLbIZVliL8JCC0DURA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.248.0/22
194.126.198.0/24
Signature Algorithm: sha256WithRSAEncryption
27:83:d4:7f:cc:b9:00:43:28:77:51:3e:f5:d2:36:72:c8:f9:
27:f3:8a:50:bb:49:50:b9:d7:e0:e8:22:af:2e:53:db:c8:33:
b2:2d:43:45:20:6b:14:53:08:29:b9:39:c8:20:6d:e0:29:12:
48:ac:6a:91:3c:27:39:57:23:f9:fd:19:8d:cc:c3:59:de:8c:
bf:18:60:83:f8:fe:cc:9b:bd:0f:ee:da:2d:5a:ce:c1:62:4b:
2b:c7:96:a4:47:92:38:e9:36:2c:27:6a:29:71:6c:45:4d:d0:
9a:d2:4a:c5:9e:4f:9f:d6:6e:93:fc:48:07:7f:a7:28:44:0e:
20:b6:b5:06:2e:1c:91:7d:2f:66:bf:75:56:f9:c6:76:cd:ff:
6a:b2:c9:25:f4:34:b8:48:59:9d:68:39:5f:cb:cb:df:08:d9:
61:89:7f:3f:e6:29:a6:16:b3:fa:62:e7:73:11:5e:6e:a8:1e:
6e:fe:46:b9:ad:38:96:cd:c4:30:e6:ce:88:e9:5e:56:81:09:
fa:ee:fd:74:6a:35:8c:64:04:da:2f:c7:bc:b2:42:17:90:36:
c4:39:2f:47:8b:f1:64:a2:bc:a7:45:e9:c5:17:eb:54:94:83:
e1:e0:0f:9a:59:a5:88:66:5c:67:82:05:10:3c:df:63:f9:bd:
2a:44:ed:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:26 2024 by rpki-client on console-fra.rpki-client.org