Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/D55rChlS-9IV4Eu8Zy5UlvJvS_c.roa
File: D55rChlS-9IV4Eu8Zy5UlvJvS_c.roa (raw, json)
Hash identifier: Abebvw/Jrs4/xoBzm21/crn9KxQKTGhW3a7jAG5O7mU=
Subject key identifier: 0F:9E:6B:0A:19:52:FB:D2:15:E0:4B:BC:67:2E:54:96:F2:6F:4B:F7
Certificate issuer: /CN=e73933c08af9c02dbb0d3e97f1f90933f5356fc1
Certificate serial: 0185711E5BB51ACC5EB9690B9A48B25BFA69
Authority key identifier: E7:39:33:C0:8A:F9:C0:2D:BB:0D:3E:97:F1:F9:09:33:F5:35:6F:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zkzwIr5wC27DT6X8fkJM_U1b8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/D55rChlS-9IV4Eu8Zy5UlvJvS_c.roa
Signing time: Mon 02 Jan 2023 06:14:52 +0000
ROA not before: Mon 02 Jan 2023 06:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41424
IP address blocks: 193.41.33.0/24 maxlen: 24
89.207.240.0/24 maxlen: 24
89.207.241.0/24 maxlen: 24
89.207.244.0/24 maxlen: 24
89.207.240.0/21 maxlen: 21
89.207.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:35:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:5b:b5:1a:cc:5e:b9:69:0b:9a:48:b2:5b:fa:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73933c08af9c02dbb0d3e97f1f90933f5356fc1
Validity
Not Before: Jan 2 06:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f9e6b0a1952fbd215e04bbc672e5496f26f4bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ce:86:38:33:68:54:52:63:ef:bb:d1:b7:13:
74:f5:ac:4d:48:6c:ad:fc:12:ce:d2:4f:e7:11:94:
81:0b:e3:2c:3f:2e:60:26:b1:5e:17:6d:6a:42:cb:
ad:d5:9f:a9:6c:2d:87:5b:30:68:22:d2:48:d2:91:
11:57:8a:c4:99:bb:92:2b:bd:6c:dc:09:73:c5:f8:
32:5c:cb:9a:68:a4:10:13:5c:e7:e9:bd:fb:ad:61:
f9:57:32:34:7d:fc:0d:d7:08:95:97:6d:c2:35:8c:
8d:63:60:ab:55:ca:4e:97:f4:2d:0b:ec:b2:bd:1f:
66:56:51:d1:8f:5a:bb:b3:46:71:98:a5:e8:be:7f:
3d:2a:26:10:a5:e6:5b:e6:91:2d:f9:54:1b:55:61:
79:dd:66:7e:a2:ba:5b:64:10:b8:38:84:c1:59:2c:
85:79:75:04:ba:5f:0e:0d:38:9d:37:5f:5a:e1:32:
1c:f1:e3:58:55:a5:41:75:fa:ce:53:16:4a:c5:85:
e5:fa:9a:d4:8e:14:62:6f:b1:07:b4:f0:99:98:8e:
a4:a6:87:ab:29:0d:8d:66:3f:31:cc:3a:3a:96:6d:
2e:c7:8e:59:8e:90:4c:66:8b:91:81:d6:5b:49:72:
26:44:20:3d:70:f8:b1:25:3b:51:bc:76:09:58:78:
ea:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9E:6B:0A:19:52:FB:D2:15:E0:4B:BC:67:2E:54:96:F2:6F:4B:F7
X509v3 Authority Key Identifier:
keyid:E7:39:33:C0:8A:F9:C0:2D:BB:0D:3E:97:F1:F9:09:33:F5:35:6F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zkzwIr5wC27DT6X8fkJM_U1b8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/D55rChlS-9IV4Eu8Zy5UlvJvS_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.240.0/21
193.41.33.0/24
Signature Algorithm: sha256WithRSAEncryption
46:b7:97:9a:92:58:f8:07:6b:5b:f9:9c:97:99:0c:99:24:6c:
02:06:57:63:3d:74:d1:71:a3:98:c5:cd:ae:19:1e:7b:f3:66:
4f:d5:0d:73:96:a2:b1:9a:24:63:81:db:d8:9b:90:a5:eb:15:
cc:c8:a1:64:a9:41:3c:11:51:a5:c9:da:9a:d1:d8:5d:1a:ee:
15:63:0b:bb:6c:63:de:77:0d:92:76:91:e0:05:8c:89:f1:f1:
bb:09:5a:48:ef:29:1d:d8:10:4f:78:c1:cd:40:6b:4a:d5:0c:
58:08:e3:80:65:2e:54:80:9e:7e:d9:43:c9:80:4d:80:7e:9e:
0a:4c:08:1d:e4:49:15:25:6e:57:c1:72:d8:d4:f4:b2:91:b4:
04:00:79:01:11:53:ce:96:8d:59:3f:cc:1f:b4:12:e1:b6:d2:
ae:ed:39:5a:91:39:99:29:9c:b9:85:d4:27:55:19:dd:2e:72:
c5:eb:67:14:60:a9:ae:b9:c2:d4:fd:26:19:b9:e6:cd:0d:ce:
2e:b9:fe:0d:c7:40:a6:47:87:a5:e9:ad:32:e1:72:16:a1:28:
dd:a4:fa:4d:56:07:91:4a:26:33:6f:7f:d2:8a:ca:6c:0f:be:
8b:87:da:b9:4f:f3:bc:83:8a:39:3d:e7:a6:60:75:89:68:f5:
54:58:0c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:18 2024 by rpki-client on console-ams.rpki-client.org