Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/miL34pXf0OO5ddWdFJOQJOYjOp0.roa
File: miL34pXf0OO5ddWdFJOQJOYjOp0.roa (raw, json)
Hash identifier: eIT30Zd2DK5WBBTBQ6BewynogPvRAJNv2IzJ4b5Razo=
Subject key identifier: 9A:22:F7:E2:95:DF:D0:E3:B9:75:D5:9D:14:93:90:24:E6:23:3A:9D
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 018B60F3A9F43AF24DAFCF6FE3A446A9C733
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/miL34pXf0OO5ddWdFJOQJOYjOp0.roa
Signing time: Tue 24 Oct 2023 09:11:03 +0000
ROA not before: Tue 24 Oct 2023 09:11:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 185.187.47.0/24 maxlen: 24
185.187.46.0/23 maxlen: 23
185.187.46.0/24 maxlen: 24
92.42.22.0/24 maxlen: 24
92.42.23.0/24 maxlen: 24
92.42.21.0/24 maxlen: 24
92.42.20.0/24 maxlen: 24
194.50.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:60:f3:a9:f4:3a:f2:4d:af:cf:6f:e3:a4:46:a9:c7:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Oct 24 09:11:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a22f7e295dfd0e3b975d59d14939024e6233a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:22:0b:ee:61:f0:35:21:55:e3:74:42:4d:49:
23:89:8a:79:c5:e3:fe:81:88:dc:99:d3:70:d9:82:
36:97:bb:19:5e:4e:cd:35:37:f1:78:40:f8:4b:bb:
23:a7:b5:86:d4:2a:58:50:73:40:93:35:a5:d6:a1:
56:a7:6a:2a:f8:c6:3a:01:fb:a5:63:09:31:7b:b9:
c7:62:8f:59:e4:23:b7:20:33:c7:b5:e0:3d:c0:57:
2b:4e:de:8b:b9:f0:27:54:a9:38:ce:88:34:b9:ed:
f4:3f:06:51:97:2e:43:f7:33:15:3c:b2:d5:6d:59:
26:2d:76:cf:a9:d6:86:ee:e6:67:1f:1a:e7:55:b0:
d1:4a:32:40:53:56:a7:b7:11:6b:a4:3f:da:93:a3:
eb:6d:e9:41:0f:6d:d0:06:8b:5d:53:4a:f3:d8:7f:
3c:c1:15:ce:9a:f0:9f:bf:95:99:e7:0f:67:67:c0:
39:2e:c9:74:18:4a:bb:a2:4f:ed:1d:7c:8d:05:30:
99:6c:de:29:94:14:59:b2:0b:6a:7c:18:11:1a:cd:
02:d0:c9:88:64:0e:f3:6b:18:2d:5b:f0:7d:5d:88:
be:1e:f8:0f:51:a9:f9:2d:58:96:07:33:2c:55:e7:
36:b3:1c:3c:fb:89:8d:16:f2:69:8a:57:fb:b4:62:
c0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:22:F7:E2:95:DF:D0:E3:B9:75:D5:9D:14:93:90:24:E6:23:3A:9D
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/miL34pXf0OO5ddWdFJOQJOYjOp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.20.0/22
185.187.46.0/23
194.50.59.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:89:d4:20:5c:64:7b:29:81:2e:b4:87:b7:78:d1:d6:18:44:
ff:4b:11:a6:53:00:fb:81:c9:7e:0e:8c:63:42:d7:43:0e:3f:
64:d7:ba:73:59:0e:ba:ac:08:2d:db:71:85:64:8e:a7:df:ff:
1c:e3:81:d4:a2:35:3d:68:fc:01:c5:61:c3:53:c5:0a:e7:f6:
9c:c5:65:76:54:37:9b:52:fe:68:72:7c:89:fb:d3:28:dc:26:
16:8a:bf:21:09:f4:6c:50:c2:6e:71:27:56:43:dc:60:30:18:
f2:78:13:a4:b9:57:55:5f:d5:f5:9d:b1:cf:c6:cc:38:22:c8:
db:72:2c:81:bb:6e:f7:a7:93:cc:f8:98:67:5b:14:d2:1b:7c:
40:0c:bf:31:cb:e3:06:4a:3b:ad:06:13:3b:82:b1:91:de:0b:
8e:cb:1f:48:fe:36:93:d9:37:c4:46:bd:7a:02:dc:41:7c:68:
ac:53:6e:de:d0:77:90:e9:0f:9b:bd:2c:11:fa:d7:1d:8e:01:
e8:31:04:dc:8e:c6:68:0f:c4:5e:30:54:55:c7:c4:cd:70:ef:
32:87:89:58:22:52:3a:84:d6:7f:07:1c:24:ea:77:e6:2f:36:
02:f7:54:41:ad:81:c1:f1:97:a3:4c:31:d1:ff:c0:6b:8e:cc:
6c:f4:fc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:59 2024 by rpki-client on console-fra.rpki-client.org