Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/rPE7_KAVTbiQhJR0cObW9YSXji8.roa
File: rPE7_KAVTbiQhJR0cObW9YSXji8.roa (raw, json)
Hash identifier: FkRPCgW42vX5GHbbX2x4TjUPYabz1yGVXO8ciJHfJpc=
Subject key identifier: AC:F1:3B:FC:A0:15:4D:B8:90:84:94:74:70:E6:D6:F5:84:97:8E:2F
Certificate issuer: /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial: 01856CB8212EA5196E4AE5FB7CF1F7330F85
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/rPE7_KAVTbiQhJR0cObW9YSXji8.roa
Signing time: Sun 01 Jan 2023 09:44:44 +0000
ROA not before: Sun 01 Jan 2023 09:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50472
IP address blocks: 185.106.84.0/22 maxlen: 24
195.54.164.0/23 maxlen: 23
193.23.244.0/24 maxlen: 24
2001:678:558::/48 maxlen: 48
2001:67c:20a1::/48 maxlen: 48
2a02:8000::/32 maxlen: 32
2001:67c:20a0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 17 Jul 2023 16:57:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:21:2e:a5:19:6e:4a:e5:fb:7c:f1:f7:33:0f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Validity
Not Before: Jan 1 09:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=acf13bfca0154db89084947470e6d6f584978e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:67:fb:45:52:1f:41:28:33:e2:a4:3f:2b:d8:
6a:b1:08:3d:ce:06:e8:24:20:02:48:b7:63:f1:0a:
11:f6:92:8c:39:67:5b:19:d2:9c:64:9d:3e:86:4c:
38:14:94:be:84:91:86:89:df:d2:b5:43:15:ec:27:
74:a0:3f:28:7d:5c:2d:89:b6:70:19:0b:4f:ff:05:
cf:fa:7d:20:0f:9c:fe:e6:eb:14:7c:b7:2f:2e:f1:
49:b0:1c:9d:2b:63:79:1b:d9:59:9d:83:f3:b2:f3:
45:03:0f:1d:98:38:48:94:cb:03:f3:8f:ff:62:40:
0b:83:a0:4b:c7:be:68:9e:d4:dc:83:3b:13:1b:ee:
33:53:92:7e:5b:39:32:a6:ad:ae:27:03:de:28:ed:
8d:1b:df:dc:87:6f:77:a9:ad:51:a3:2f:7e:fa:10:
9d:b3:40:a4:ce:02:f8:5c:ca:75:5c:a7:a2:61:62:
12:61:1a:e0:58:81:7c:bc:2e:84:0f:b4:43:18:a8:
d5:92:66:69:55:9e:4b:77:d7:d3:26:c5:47:d9:42:
d4:92:46:29:8c:1c:fe:c0:a7:0d:46:b7:fd:d4:3d:
ca:f3:c4:76:c6:77:52:55:96:4a:cb:72:7b:2c:88:
7f:5b:5a:06:8c:85:e6:f1:c2:02:0a:25:49:88:a6:
c6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F1:3B:FC:A0:15:4D:B8:90:84:94:74:70:E6:D6:F5:84:97:8E:2F
X509v3 Authority Key Identifier:
keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/rPE7_KAVTbiQhJR0cObW9YSXji8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.84.0/22
193.23.244.0/24
195.54.164.0/23
IPv6:
2001:678:558::/48
2001:67c:20a0::/47
2a02:8000::/32
Signature Algorithm: sha256WithRSAEncryption
25:cb:2e:04:9e:9f:03:34:60:b2:70:3a:e0:ce:80:01:18:9a:
10:76:b1:c5:a9:3d:dc:60:32:5f:65:85:2c:dd:ce:f1:e1:a6:
ff:96:79:d2:2b:d7:55:ec:8f:5f:c9:68:92:af:48:a8:96:d0:
b2:f0:e8:4f:e4:8e:c3:fc:d5:a6:fa:fe:94:2b:cc:7f:4e:a5:
58:bc:be:e9:03:de:7e:61:b1:b5:44:23:41:ed:4c:32:cb:6b:
d1:49:0a:e8:8a:87:9f:99:3d:12:95:b0:68:56:df:f8:80:a9:
09:38:d0:9e:1c:40:05:76:b0:8c:5f:dd:60:57:64:1d:bb:0a:
9d:59:e3:a2:80:0b:e2:c8:c9:ff:eb:d6:a6:4a:d3:d0:3a:cd:
96:5a:87:e8:d6:b1:f2:8e:86:28:1e:c3:c3:b8:e6:6d:23:c5:
e3:6b:93:2f:24:f1:95:16:82:32:1e:3f:a3:d4:e7:33:cc:36:
67:f4:6b:6e:dd:89:e3:d1:4e:70:47:e5:00:78:28:c6:00:75:
c3:66:98:69:65:89:a5:f8:b2:61:46:35:0c:89:1d:5f:02:b5:
00:52:d2:4d:8c:c0:bb:9b:be:99:ea:20:cb:c4:c4:ca:a6:fa:
7b:bf:cf:11:17:2e:40:0d:b3:b9:7a:9e:1e:d1:f2:71:19:af:
42:97:c6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:55 2024 by rpki-client on console-fra.rpki-client.org