Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/B6lPnW3ghJ8z5Toaq-Z9PX3k4O8.roa
File: B6lPnW3ghJ8z5Toaq-Z9PX3k4O8.roa (raw, json)
Hash identifier: HQxwaaQW6nLTAFd16AaQq3AJxQ14fOFcbGG82Tp7x1o=
Subject key identifier: 07:A9:4F:9D:6D:E0:84:9F:33:E5:3A:1A:AB:E6:7D:3D:7D:E4:E0:EF
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 018920049101CA56E7BA27BC602F5D4D1FB5
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/B6lPnW3ghJ8z5Toaq-Z9PX3k4O8.roa
Signing time: Tue 04 Jul 2023 08:28:37 +0000
ROA not before: Tue 04 Jul 2023 08:28:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39577
IP address blocks: 185.230.243.0/24 maxlen: 24
92.118.74.0/24 maxlen: 24
92.118.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:20:04:91:01:ca:56:e7:ba:27:bc:60:2f:5d:4d:1f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Jul 4 08:28:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07a94f9d6de0849f33e53a1aabe67d3d7de4e0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ca:fa:a0:6a:64:ce:54:06:43:4a:2a:ae:78:
10:ab:49:ae:73:93:8b:d4:37:2f:4a:d1:46:a3:39:
62:9b:e5:3f:d0:71:2f:0c:10:23:dc:0c:6a:d3:82:
9c:13:a4:ac:90:23:45:04:1c:f4:9b:df:23:50:a5:
5e:5b:0e:12:9d:83:fe:5d:c5:5d:5c:cb:85:55:7f:
88:40:6d:65:a2:a4:c1:fb:20:30:8a:4f:0f:a9:a2:
34:da:fb:d8:df:c2:0f:df:ea:51:ea:bf:28:8f:d3:
4d:6d:a6:c9:47:05:c6:b2:c7:69:82:e9:c0:6a:25:
a3:df:58:5f:ed:ca:38:ba:92:d2:6c:5f:a2:37:b3:
e0:3b:09:2f:c2:97:40:90:bf:cb:ea:90:29:8a:ae:
53:4d:14:25:87:09:11:9e:18:35:f4:94:5c:48:db:
bb:f7:18:4c:d1:47:90:ce:e2:02:85:a7:63:f7:e9:
18:bc:d8:1f:23:c1:c9:7a:d5:08:54:fe:16:4b:dc:
e0:30:35:67:4b:43:c7:01:13:b5:7f:3f:59:ba:ec:
30:99:30:5d:57:5e:7a:4a:d0:5d:d9:08:b2:81:97:
d6:24:15:8e:ad:02:93:eb:56:0f:e7:03:a6:1c:4a:
98:89:d5:b5:c4:13:f4:43:da:3d:b2:bf:d5:18:e4:
86:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A9:4F:9D:6D:E0:84:9F:33:E5:3A:1A:AB:E6:7D:3D:7D:E4:E0:EF
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/B6lPnW3ghJ8z5Toaq-Z9PX3k4O8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.74.0/23
185.230.243.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:fc:48:fc:86:49:bf:d8:19:df:f9:2a:c6:0e:96:68:e0:de:
ce:3c:52:9b:6a:f1:c7:75:1e:e0:37:e5:f9:e4:8e:4f:d3:9f:
8e:7d:22:33:7c:4b:36:72:e2:34:e5:89:fc:f8:b2:88:4a:8f:
0f:8c:cb:f7:f0:9c:c8:a3:3f:9d:80:08:a5:af:c7:ab:de:61:
0c:3b:29:6c:6c:2d:2c:51:26:3e:40:77:f1:43:97:94:46:0d:
11:98:ac:e6:fe:09:2f:fe:de:06:56:80:e0:c6:51:b5:dd:57:
ae:c1:46:2f:76:a4:82:69:e3:aa:31:fa:23:db:06:b1:86:86:
ce:e8:7b:1d:80:6c:34:7d:b9:c5:e6:ef:45:2b:45:21:2a:c9:
de:0b:fe:84:65:dd:4c:f5:95:b1:03:f4:b7:96:7f:c5:c1:bc:
19:85:d2:ae:f3:39:ed:8c:6d:fb:3a:d0:41:bb:dc:76:ff:e9:
1a:e5:23:cf:42:ba:7a:ce:2c:43:c7:f6:9b:79:4f:01:19:07:
c2:08:a5:56:69:04:59:85:07:0d:38:c5:ec:56:e5:69:fb:01:
48:82:7d:ff:e0:a8:fc:3f:7b:08:71:7a:8d:60:30:45:46:23:
5d:56:b7:78:01:0f:ba:5f:42:b1:b0:b2:b1:6a:14:8b:13:d8:
2f:58:c5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:08 2024 by rpki-client on console-ams.rpki-client.org