Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/8kauNQD-Fy311718gX2CDol-Sa8.roa
File: 8kauNQD-Fy311718gX2CDol-Sa8.roa (raw, json)
Hash identifier: Vf0KlQ0xSnDGPoJAv4CKxjm4VwLOPHGyW9VmrC/PUBQ=
Subject key identifier: F2:46:AE:35:00:FE:17:2D:F5:D7:BD:7C:81:7D:82:0E:89:7E:49:AF
Certificate issuer: /CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Certificate serial: 018572280BE5D3E29D1F0D00C189FFE2D4BA
Authority key identifier: 0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/8kauNQD-Fy311718gX2CDol-Sa8.roa
Signing time: Mon 02 Jan 2023 11:05:05 +0000
ROA not before: Mon 02 Jan 2023 11:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196670
IP address blocks: 91.213.26.0/24 maxlen: 24
194.36.92.0/24 maxlen: 24
195.200.255.0/24 maxlen: 24
195.200.254.0/23 maxlen: 23
195.200.254.0/24 maxlen: 24
2a04:9140:3041::/48 maxlen: 48
2a04:9140:3001::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:28:0b:e5:d3:e2:9d:1f:0d:00:c1:89:ff:e2:d4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Validity
Not Before: Jan 2 11:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f246ae3500fe172df5d7bd7c817d820e897e49af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:96:d4:5f:d2:d9:af:d5:45:e5:94:94:6e:0d:
c1:7d:b5:4b:ef:0f:32:bc:48:0a:62:67:b3:da:bb:
76:79:e5:f3:bc:52:38:e0:ad:c2:af:31:24:80:3f:
6e:d3:82:29:25:07:05:0d:87:09:23:35:ef:c5:54:
b1:7a:41:54:08:ad:b7:7a:e6:51:ee:5d:c7:f6:65:
09:e7:c0:c4:0f:30:b5:63:f9:38:67:d2:08:e3:53:
1f:6f:97:df:83:d1:51:48:67:b7:f5:2a:ab:a0:8c:
44:41:81:6b:be:e3:93:7a:44:67:ef:5f:2a:d4:65:
8e:e9:00:f6:aa:cc:80:88:43:f9:fe:f4:e7:6f:86:
31:bd:5b:04:90:77:cc:49:52:2a:b4:9f:d2:b3:48:
86:31:86:7a:2c:bb:b9:2a:26:1e:79:8d:47:09:96:
9b:1e:85:77:36:22:ca:2e:65:2f:36:44:2c:a7:5d:
34:d1:3f:00:e9:d5:7e:e8:c6:1b:80:82:a9:a9:2a:
95:a9:6c:da:eb:0b:c4:72:b0:ea:19:48:c1:15:db:
b8:ac:09:d7:36:b8:8d:aa:b7:56:8f:98:00:f0:db:
51:66:9a:b2:64:5d:94:c5:b3:e0:05:a8:d2:d3:4d:
40:15:7f:91:47:31:34:2b:c7:b4:c9:be:cb:7f:f0:
e2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:46:AE:35:00:FE:17:2D:F5:D7:BD:7C:81:7D:82:0E:89:7E:49:AF
X509v3 Authority Key Identifier:
keyid:0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/8kauNQD-Fy311718gX2CDol-Sa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.26.0/24
194.36.92.0/24
195.200.254.0/23
IPv6:
2a04:9140:3001::/48
2a04:9140:3041::/48
Signature Algorithm: sha256WithRSAEncryption
7d:d5:38:24:19:19:d8:81:d5:f5:f6:4d:27:19:e8:7e:3e:d0:
94:09:05:4b:3e:0e:27:05:11:94:f1:43:86:8c:2b:f0:2a:be:
0a:5b:73:7e:9b:b5:f2:2d:b1:d8:3a:21:98:88:43:99:3f:72:
d1:35:fd:93:21:cd:32:ce:da:13:ee:34:ce:5e:bd:ac:7e:5b:
58:db:6b:44:b9:b9:ab:5b:65:e4:0f:13:f0:3d:7b:b7:e3:5e:
47:7b:8b:00:cb:5c:3d:59:8d:17:e9:1f:e3:82:fd:77:90:79:
2d:58:36:de:c9:3c:54:a2:09:63:20:c7:8c:d1:e8:e0:ec:59:
d1:a7:00:49:2c:a6:c7:f8:53:34:a2:57:1e:a6:c2:c9:71:4e:
37:ad:29:c2:dd:88:7c:46:d4:37:ea:82:6f:29:dd:a1:c3:65:
66:de:29:75:40:c1:85:78:c0:ba:ce:de:eb:66:f6:e3:a5:fa:
f6:4f:8b:a8:65:d9:c4:fa:89:12:03:cb:d1:29:b6:61:7f:a7:
97:0b:91:04:f5:2a:43:c6:4d:c6:34:8c:f2:c0:91:c8:23:e4:
e2:72:82:b0:1b:e2:4c:1e:9d:b9:9c:d2:7c:8a:d5:89:dc:aa:
d1:9f:61:aa:f6:c1:4e:ed:d0:06:68:a9:b7:8f:61:da:9e:c6:
f5:ed:b0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:46 2024 by rpki-client on console-ams.rpki-client.org