Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/u93MtB01aoMLdwiJSlMqL0wMrMA.roa
File: u93MtB01aoMLdwiJSlMqL0wMrMA.roa (raw, json)
Hash identifier: ogVg8JVCwxQqJAk5RCe+eq+bH2HUbmY8zYivv9haoys=
Subject key identifier: BB:DD:CC:B4:1D:35:6A:83:0B:77:08:89:4A:53:2A:2F:4C:0C:AC:C0
Certificate issuer: /CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
Certificate serial: 0188535ACA36DBF00D61EC96907E24757355
Authority key identifier: B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/u93MtB01aoMLdwiJSlMqL0wMrMA.roa
Signing time: Thu 25 May 2023 14:40:38 +0000
ROA not before: Thu 25 May 2023 14:40:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60823
IP address blocks: 185.25.124.0/22 maxlen: 22
92.243.92.0/24 maxlen: 24
195.191.254.0/23 maxlen: 23
2a04:3180::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 06 Jun 2023 12:08:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:53:5a:ca:36:db:f0:0d:61:ec:96:90:7e:24:75:73:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
Validity
Not Before: May 25 14:40:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbddccb41d356a830b7708894a532a2f4c0cacc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3f:7c:65:56:2b:bf:c1:dc:79:ea:77:51:c4:
8c:5a:39:9a:93:4b:d5:af:7e:af:89:b9:9c:d1:f5:
2b:b8:a3:0a:6b:b4:51:a9:73:a9:5a:3a:02:da:96:
9b:c8:19:d1:6c:c9:ee:41:5f:9b:e0:01:14:f9:dd:
c1:f4:1f:7e:c7:ad:ac:64:ab:fb:31:2a:e1:f8:4e:
4f:b8:c4:1a:da:04:da:8d:35:f7:5e:7d:f4:6a:8a:
0a:ad:c8:48:51:3a:29:0c:5c:70:c1:b0:e0:1e:fd:
54:e5:07:cd:e8:ed:32:00:c2:1d:eb:f5:85:bf:17:
28:0d:02:73:90:a8:e7:45:26:ef:d6:da:47:3a:da:
84:e5:e9:6a:56:0e:01:b7:d1:ec:3a:1c:22:cd:b3:
ae:b7:69:70:a5:49:84:e1:15:6b:05:69:ce:68:11:
46:7d:9c:b7:2c:3b:00:95:5d:bf:a3:28:66:ae:f9:
49:2f:1f:e1:01:76:2c:15:5d:b5:16:cd:47:68:69:
fc:21:1e:52:f0:02:3a:0e:74:8f:3f:ee:14:6a:7e:
b4:38:70:4b:14:07:6a:db:19:45:a2:21:19:89:5c:
a9:31:9b:5f:5e:18:0c:fe:1f:54:c3:a7:b4:37:da:
1c:fc:2a:e6:e5:66:a6:d8:f8:23:29:ba:fa:04:2f:
13:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DD:CC:B4:1D:35:6A:83:0B:77:08:89:4A:53:2A:2F:4C:0C:AC:C0
X509v3 Authority Key Identifier:
keyid:B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/u93MtB01aoMLdwiJSlMqL0wMrMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.243.92.0/24
185.25.124.0/22
195.191.254.0/23
IPv6:
2a04:3180::/29
Signature Algorithm: sha256WithRSAEncryption
3e:7d:f8:70:51:b6:66:1a:5f:40:96:04:c6:b3:63:b2:8e:f9:
68:aa:2d:2f:16:84:3b:d2:ce:4a:14:34:28:70:24:c7:d6:ff:
a8:b2:13:89:8b:82:f8:9c:8e:4e:b8:a1:e4:f1:18:42:aa:59:
8f:8f:d0:20:1e:21:bf:87:e4:9b:42:f1:e7:09:37:28:4c:28:
af:e9:8b:35:0a:73:47:1c:80:67:c9:f7:40:7d:4e:6a:ac:ac:
3c:df:27:e9:a5:c3:0f:d3:40:e9:bd:35:da:3d:88:a4:97:0d:
0e:cd:d4:3a:5f:9d:bc:eb:a9:69:e8:7d:a0:4e:8a:89:02:af:
32:90:1e:57:69:da:7b:69:7a:99:69:3c:18:91:fc:29:a6:95:
a6:e4:52:14:24:84:41:db:77:98:19:4d:27:35:91:e0:c6:0e:
37:f7:86:b7:bc:33:46:b1:fc:57:25:94:a1:75:02:51:a1:57:
f8:af:80:d1:8a:23:0c:7e:7e:14:6a:1b:e0:08:28:a2:c8:b7:
d8:fb:bf:a7:e4:d3:49:78:23:73:46:c7:5b:64:e6:b8:41:12:
70:52:13:a7:98:51:5f:d3:3c:ef:3c:81:de:c4:27:0a:83:95:
0b:d9:ee:5a:7f:27:19:45:3e:0a:1e:97:88:b8:2d:48:b2:4f:
9e:60:44:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:39 2024 by rpki-client on console-fra.rpki-client.org