Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/fFxMfdsdJ76jyPZk2Cf181g2l94.roa
File: fFxMfdsdJ76jyPZk2Cf181g2l94.roa (raw, json)
Hash identifier: IvibVB7oXsko+gqsqhToY5pb6YcQEvY2urbcUXbNaBk=
Subject key identifier: 7C:5C:4C:7D:DB:1D:27:BE:A3:C8:F6:64:D8:27:F5:F3:58:36:97:DE
Certificate issuer: /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Certificate serial: 0187BA821B79FE286BF14107ADCEBBDDA20F
Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/fFxMfdsdJ76jyPZk2Cf181g2l94.roa
Signing time: Tue 25 Apr 2023 22:21:41 +0000
ROA not before: Tue 25 Apr 2023 22:21:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200325
IP address blocks: 91.200.176.0/24 maxlen: 24
107.150.176.0/24 maxlen: 24
193.162.131.0/24 maxlen: 24
109.104.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ba:82:1b:79:fe:28:6b:f1:41:07:ad:ce:bb:dd:a2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Validity
Not Before: Apr 25 22:21:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c5c4c7ddb1d27bea3c8f664d827f5f3583697de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7b:fe:28:d7:f1:a4:30:1a:ac:0d:81:68:d5:
97:e4:87:33:95:bb:41:29:ce:f4:52:42:6e:01:85:
e1:f1:76:ce:e7:95:e0:d2:1c:3a:0e:24:64:7f:29:
e2:7f:a8:7d:ec:e3:6c:46:c7:3a:99:d7:bc:10:c5:
f0:93:29:dd:55:e3:48:13:29:40:9d:18:83:03:06:
e4:4b:54:c8:64:ab:36:cd:6e:df:8b:34:fd:71:c7:
b1:8c:75:b7:bb:e5:3e:1e:1b:7f:f9:07:69:cd:b5:
3d:b7:d5:4b:40:74:2b:00:52:90:52:e9:f1:00:a3:
8c:cb:49:e3:86:9d:01:18:00:7e:e8:1b:2d:52:cd:
b7:58:72:e6:f6:c9:e7:66:ca:89:69:c7:e8:41:9c:
55:d8:b4:f2:ac:19:d8:71:cb:34:f5:c6:f7:46:8a:
4d:2f:1b:c0:26:de:65:5f:9e:a4:96:3f:2a:78:fd:
87:8f:db:31:ce:8a:4c:e1:12:9d:96:cb:fb:9d:05:
78:62:30:e6:61:06:ff:72:3d:39:d7:e7:ce:73:62:
8e:4d:c1:39:f9:c9:6d:aa:11:ec:cc:10:64:e2:56:
0d:ae:9b:2a:9e:db:c3:5c:90:24:25:12:46:c3:be:
44:82:4a:30:26:31:ed:91:61:e7:34:49:62:d0:be:
e2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5C:4C:7D:DB:1D:27:BE:A3:C8:F6:64:D8:27:F5:F3:58:36:97:DE
X509v3 Authority Key Identifier:
keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/fFxMfdsdJ76jyPZk2Cf181g2l94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.176.0/24
107.150.176.0/24
109.104.146.0/23
193.162.131.0/24
Signature Algorithm: sha256WithRSAEncryption
26:4c:ca:b8:e1:7d:fa:91:ec:6b:22:18:da:42:2c:ce:bf:b2:
24:cd:33:e5:ca:73:71:66:4c:03:f3:90:ec:91:3b:ff:12:71:
6d:14:df:09:1b:96:c3:80:d4:4d:3f:2e:27:05:d3:f6:57:8a:
b1:f5:94:ce:7d:fe:b6:86:c5:d8:cb:4b:71:98:14:e3:fe:1a:
01:08:75:e3:80:b8:16:ed:bb:02:a5:6d:50:3a:eb:3f:68:55:
5d:9b:6d:53:00:9b:87:b3:9b:65:a4:35:89:ca:fb:6e:93:d2:
68:54:61:49:43:62:a5:ee:33:da:21:0d:e7:7d:6d:23:76:f2:
b2:55:35:ec:20:45:a9:71:35:9c:85:d7:32:1b:7e:62:67:46:
40:ab:5e:7f:68:c1:b7:05:76:8b:7a:e1:ab:89:38:56:f0:f2:
a3:be:89:2d:8b:9e:ec:5a:b4:12:5e:46:19:76:53:3b:97:36:
2f:ab:f3:da:dd:7f:0e:40:5f:e8:fa:63:45:4c:7a:45:37:db:
b8:1a:ba:47:09:a6:6c:1e:0e:b5:59:39:f7:3e:7e:14:03:96:
90:82:ca:72:0f:28:c9:1d:59:54:05:86:90:f1:6d:8d:8a:61:
4e:c9:f8:9e:1b:8e:3d:14:86:b4:c0:ab:3f:e4:d5:44:44:5e:
73:a4:ea:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:01 2024 by rpki-client on console-fra.rpki-client.org