Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/m3h7dFik32h6qczMmqPB5WOK50E.roa
File: m3h7dFik32h6qczMmqPB5WOK50E.roa (raw, json)
Hash identifier: uL+Olpr3Kmee4JBhC3n6zI7TxXb9BDgypKcciK4EYQ8=
Subject key identifier: 9B:78:7B:74:58:A4:DF:68:7A:A9:CC:CC:9A:A3:C1:E5:63:8A:E7:41
Certificate issuer: /CN=b732762a5e861e976de53d14786f39e3a669681b
Certificate serial: 01856D5CED9CEBF8514051F3A68F9024A9C4
Authority key identifier: B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/m3h7dFik32h6qczMmqPB5WOK50E.roa
Signing time: Sun 01 Jan 2023 12:44:44 +0000
ROA not before: Sun 01 Jan 2023 12:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41327
IP address blocks: 185.157.228.0/22 maxlen: 24
93.94.88.0/21 maxlen: 24
31.185.96.0/21 maxlen: 21
185.61.168.0/22 maxlen: 24
2a03:b020::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5c:ed:9c:eb:f8:51:40:51:f3:a6:8f:90:24:a9:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b732762a5e861e976de53d14786f39e3a669681b
Validity
Not Before: Jan 1 12:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b787b7458a4df687aa9cccc9aa3c1e5638ae741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a8:db:45:14:7d:9a:b7:39:07:62:04:75:74:
b1:20:30:f7:1d:f2:61:3e:39:c5:0d:e2:4f:ef:3d:
5f:3f:10:6e:64:1c:7e:05:dd:2f:88:11:7a:25:46:
0c:6b:b9:a3:a1:18:51:4e:e3:b6:7a:0f:bc:e5:fb:
9b:66:c0:8e:bc:fe:13:d5:55:63:55:c1:2f:d1:c7:
3a:05:02:6b:7b:da:b7:83:f1:cd:46:bf:a1:b8:b0:
58:94:cc:95:bb:0e:5c:00:fb:b8:2b:f6:2e:f9:1b:
1d:48:42:54:c7:95:81:11:3b:cb:a0:31:24:fe:fc:
65:b0:b0:88:70:40:22:a8:b2:b1:2f:d9:60:23:0a:
ae:38:6b:ef:96:5d:c6:7e:76:a3:c5:60:76:01:ad:
71:c8:a2:ae:2b:02:1a:64:71:07:8e:99:eb:35:b4:
7b:1c:7b:32:a1:55:d7:5f:08:33:c6:c3:b0:f0:db:
77:09:25:b0:08:1d:f1:66:17:6f:a3:af:ab:b8:2b:
ea:e6:66:7e:26:0c:0d:d2:cf:9b:9d:52:90:19:a2:
c8:85:07:99:12:b6:43:24:56:2e:92:85:a0:ea:6d:
5d:0b:d9:ea:79:51:8e:9c:4d:72:54:d7:f1:86:1a:
bb:a3:bc:05:a3:08:be:62:2f:09:0f:48:1f:83:ec:
a2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:78:7B:74:58:A4:DF:68:7A:A9:CC:CC:9A:A3:C1:E5:63:8A:E7:41
X509v3 Authority Key Identifier:
keyid:B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/m3h7dFik32h6qczMmqPB5WOK50E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.96.0/21
93.94.88.0/21
185.61.168.0/22
185.157.228.0/22
IPv6:
2a03:b020::/29
Signature Algorithm: sha256WithRSAEncryption
78:bc:fe:bd:eb:85:dc:b9:79:12:d6:f7:3b:50:e9:49:1e:2d:
48:3f:6e:c1:d3:50:d9:1d:84:16:1c:31:97:d2:53:da:92:55:
4a:76:b5:f2:e6:c8:71:59:4a:5a:6a:af:ee:0c:a9:5c:71:68:
b9:ab:2d:db:d0:a4:ce:df:b8:61:fa:60:73:67:54:f5:69:a1:
0c:ab:ad:e8:34:86:df:f2:d8:c6:15:64:a7:72:cf:0c:6a:4a:
e9:ad:04:0c:c0:3e:de:fd:c1:32:f0:7f:4b:bf:e9:ea:ad:c0:
33:93:09:ca:d3:0b:64:74:d8:82:2c:f2:96:b8:4b:76:e2:c0:
df:5d:57:5a:fe:81:07:82:75:cc:fc:86:74:d7:ee:7d:15:49:
af:86:1e:f3:44:3b:ff:7b:13:5f:5b:30:43:d6:53:ff:6c:0b:
1f:c1:b6:b5:75:ed:cf:c9:d1:8c:92:9b:35:ba:58:b9:91:ac:
f9:54:95:de:c4:0d:15:17:a2:09:18:ed:a6:49:97:53:5e:61:
d0:82:f8:05:ae:28:db:a0:54:7f:2b:80:6c:3d:1e:a8:66:4d:
db:68:d3:61:c2:a7:07:66:71:ab:be:97:c0:bf:e2:be:2f:f2:
bc:61:6c:17:09:90:bb:2a:3d:23:fa:84:fb:9d:ea:9d:4f:a8:
34:06:27:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:46 2024 by rpki-client on console-fra.rpki-client.org