Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/9275ff-ba9e-48e0-90a1-477270661163/1/4c0RbyQYLlkU8_ZXEhepUHb0dvI.roa
File: 4c0RbyQYLlkU8_ZXEhepUHb0dvI.roa (raw, json)
Hash identifier: wfGl/06fgPMsDlAIkvo3Qk783hz80zGyZNj2WaikkdM=
Subject key identifier: E1:CD:11:6F:24:18:2E:59:14:F3:F6:57:12:17:A9:50:76:F4:76:F2
Certificate issuer: /CN=7ef532ebb07ea8506b653430c046ec8d402f968b
Certificate serial: 018AD7C8F96F832C6E583F6B7C20C4B58CC7
Authority key identifier: 7E:F5:32:EB:B0:7E:A8:50:6B:65:34:30:C0:46:EC:8D:40:2F:96:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fvUy67B-qFBrZTQwwEbsjUAvlos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/9275ff-ba9e-48e0-90a1-477270661163/1/4c0RbyQYLlkU8_ZXEhepUHb0dvI.roa
Signing time: Wed 27 Sep 2023 17:56:27 +0000
ROA not before: Wed 27 Sep 2023 17:56:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202050
IP address blocks: 193.108.215.0/24 maxlen: 24
193.108.219.0/24 maxlen: 24
193.109.94.0/24 maxlen: 24
193.109.92.0/24 maxlen: 24
2a0f:f840::/48 maxlen: 64
Validation: Failed, certificate revoked on Thu 28 Sep 2023 12:55:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d7:c8:f9:6f:83:2c:6e:58:3f:6b:7c:20:c4:b5:8c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ef532ebb07ea8506b653430c046ec8d402f968b
Validity
Not Before: Sep 27 17:56:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1cd116f24182e5914f3f6571217a95076f476f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:55:80:8c:e2:fe:5c:11:15:cb:78:d3:f1:a1:
bb:a0:30:51:5d:43:2c:00:f5:63:d3:e3:61:40:94:
62:f8:4f:b7:85:17:28:54:de:b6:1f:a0:f4:6f:2a:
e8:b4:d4:1d:fa:b0:22:ed:94:d6:8d:3b:33:80:fd:
32:04:63:0f:04:7a:70:c9:e0:90:d3:b9:18:0a:de:
40:13:ba:dd:55:b8:01:2f:a4:9c:5c:ce:b3:87:b9:
a2:f6:f1:37:4c:e2:09:3e:a2:0b:3e:68:e6:b4:12:
30:7b:4e:ae:60:22:31:20:87:48:d4:25:75:40:79:
58:39:cf:9c:9d:c0:d4:9a:30:d4:51:d3:65:da:27:
3d:2b:5a:92:5c:d5:31:89:de:b4:bd:16:24:8a:0c:
d3:10:71:a1:18:6d:0a:8c:26:db:27:d0:ce:0c:79:
e0:83:6c:54:bd:d6:3a:5c:3f:40:d1:70:a7:fb:9d:
14:8f:86:46:d1:2c:57:a8:e1:c2:9e:48:bb:5b:f9:
0f:0e:eb:a7:38:2f:25:42:cb:64:1b:52:bd:4c:19:
a0:6d:f3:a9:2e:f9:cb:a8:b0:f3:2f:c7:d1:3b:aa:
36:32:1e:86:c6:51:ce:2d:00:be:c3:47:f3:dd:c5:
4d:f3:00:67:a5:fd:26:2a:be:da:22:f5:58:4e:e9:
39:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CD:11:6F:24:18:2E:59:14:F3:F6:57:12:17:A9:50:76:F4:76:F2
X509v3 Authority Key Identifier:
keyid:7E:F5:32:EB:B0:7E:A8:50:6B:65:34:30:C0:46:EC:8D:40:2F:96:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fvUy67B-qFBrZTQwwEbsjUAvlos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/9275ff-ba9e-48e0-90a1-477270661163/1/4c0RbyQYLlkU8_ZXEhepUHb0dvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/9275ff-ba9e-48e0-90a1-477270661163/1/fvUy67B-qFBrZTQwwEbsjUAvlos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.215.0/24
193.108.219.0/24
193.109.92.0/24
193.109.94.0/24
IPv6:
2a0f:f840::/48
Signature Algorithm: sha256WithRSAEncryption
24:15:06:2a:73:f6:9e:de:3e:92:89:d1:fb:e5:b9:5f:e5:6a:
d1:4a:fd:97:8b:5e:9f:84:2a:81:51:91:f3:02:16:da:56:28:
ee:98:4b:21:7b:23:af:c6:49:e8:d4:c6:1d:ea:9e:6b:0b:d7:
fd:2b:fa:4e:dc:b8:a4:bf:16:17:ee:75:29:71:31:7f:27:ad:
c4:53:ed:c9:30:3f:4f:0d:90:92:f3:09:2b:9b:fb:15:21:71:
00:d2:2b:70:66:3a:ad:c8:91:f2:88:93:89:45:fb:5a:36:26:
15:8c:42:f3:44:31:f5:56:2c:5c:0f:c2:1a:4b:1a:85:e2:b7:
5f:9d:6a:e2:d9:db:1a:5f:dd:17:5a:52:76:61:17:85:2f:34:
6d:7d:99:a4:78:e0:c2:3d:8f:b1:85:cd:6d:d6:3e:df:75:ca:
a5:5f:20:4a:78:b0:bb:3b:9c:49:b9:a0:b3:bd:6d:25:20:62:
e6:29:78:8d:84:f8:c4:48:1a:71:ee:aa:ff:a2:6b:08:a7:e7:
e4:bd:86:7b:95:3e:38:8c:74:c1:5e:c3:11:91:9d:7b:14:5d:
29:2c:6d:3a:3b:f6:a6:7a:a2:e6:63:08:5f:90:dc:97:7a:9d:
dc:cb:e7:69:83:c8:ba:e7:d9:af:dd:1d:d2:94:c4:cd:95:c0:
5a:a8:5a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:58 2024 by rpki-client on console-fra.rpki-client.org