Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/o303QpL760zZ4_x-w34l7SwQvRI.roa
File: o303QpL760zZ4_x-w34l7SwQvRI.roa (raw, json)
Hash identifier: 9mqBOxtJlepJws6ipwkJfeViKy02S32b7NGQBGeAonU=
Subject key identifier: A3:7D:37:42:92:FB:EB:4C:D9:E3:FC:7E:C3:7E:25:ED:2C:10:BD:12
Certificate issuer: /CN=9ba94bc14937bb0b3632374355a446724104a981
Certificate serial: 01856EA682A832A43E27DF7A72E328CBAD32
Authority key identifier: 9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/o303QpL760zZ4_x-w34l7SwQvRI.roa
Signing time: Sun 01 Jan 2023 18:44:44 +0000
ROA not before: Sun 01 Jan 2023 18:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31480
IP address blocks: 193.151.109.0/24 maxlen: 24
193.151.108.0/22 maxlen: 22
193.151.108.0/24 maxlen: 24
193.151.110.0/24 maxlen: 24
91.196.32.0/22 maxlen: 22
185.59.136.0/24 maxlen: 24
2a0c:1d80::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:82:a8:32:a4:3e:27:df:7a:72:e3:28:cb:ad:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba94bc14937bb0b3632374355a446724104a981
Validity
Not Before: Jan 1 18:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a37d374292fbeb4cd9e3fc7ec37e25ed2c10bd12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:50:e5:ae:2a:ba:94:7b:ac:25:3f:ca:ae:dd:
ef:b3:35:e6:ec:ba:7f:42:be:b8:eb:b3:17:03:59:
e8:c9:6f:7b:44:dd:9b:3e:2d:eb:e3:84:48:1b:9c:
09:46:0c:37:65:e4:0e:db:f1:d5:b8:0c:8b:b3:97:
0d:2c:49:3b:ce:13:43:e1:81:51:19:fb:f3:5a:e9:
39:c4:85:02:ea:88:d1:c6:aa:d8:fe:19:9b:26:a6:
cb:e3:bc:33:bb:48:4c:84:40:c8:2c:74:a9:25:42:
c7:d5:2d:0e:68:2e:ab:3e:6c:14:06:39:a0:41:42:
5a:93:59:06:c5:da:fd:b5:68:a9:b8:50:7d:1a:29:
1b:6a:07:1d:5d:b9:00:96:bd:b6:2a:e7:88:8f:ae:
60:c5:24:cb:69:b2:18:4b:24:b1:a7:05:6e:85:46:
ab:5d:9b:c5:db:5e:40:f5:c0:55:7a:d9:b9:30:7b:
bb:5b:2f:2c:8c:4a:96:78:3d:9f:62:65:2d:08:74:
42:3a:7a:df:c6:6f:ac:b8:4e:e7:99:fb:d6:85:60:
19:bc:3c:bb:bf:a6:0d:5b:d3:2f:e4:08:da:40:76:
66:75:35:a4:89:8f:a0:db:95:13:6f:83:42:7d:09:
cd:93:8d:c6:4b:49:22:87:2a:99:04:4a:49:c9:62:
f1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7D:37:42:92:FB:EB:4C:D9:E3:FC:7E:C3:7E:25:ED:2C:10:BD:12
X509v3 Authority Key Identifier:
keyid:9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/o303QpL760zZ4_x-w34l7SwQvRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.32.0/22
185.59.136.0/24
193.151.108.0/22
IPv6:
2a0c:1d80::/29
Signature Algorithm: sha256WithRSAEncryption
08:78:68:e7:1a:3b:60:58:a1:3f:9f:1e:dd:d3:aa:2d:27:a5:
1e:87:45:24:79:9b:44:ef:99:94:50:50:de:1f:79:f9:7e:3a:
e4:c1:4c:13:fc:eb:d8:c4:e1:c1:51:dd:ef:84:b6:94:b9:cd:
f6:62:b6:df:44:cb:3b:32:64:c7:99:4c:a1:b7:5f:8e:79:6c:
14:34:34:19:f0:f7:46:37:29:5d:57:f9:ae:d6:02:84:14:df:
ea:ad:37:c1:22:f7:5a:26:ce:f7:60:78:b4:b5:3d:1e:26:45:
d4:3b:8b:bb:fb:42:24:08:d8:23:90:e2:52:06:36:c1:54:62:
2c:d6:07:46:04:fc:a0:f4:f6:8c:c5:7a:bf:04:15:3f:db:b1:
8c:ab:14:c0:53:3a:74:1e:2b:66:85:72:af:54:81:0b:42:05:
25:d8:39:dd:37:f0:a8:f6:4c:ce:ac:14:ea:69:e4:4e:5d:13:
48:03:5a:b9:bb:e2:7a:e2:a5:24:0c:37:b4:97:4f:3a:78:b1:
ac:fc:46:a9:18:87:dc:97:4a:0a:99:3d:5c:cf:09:6f:ad:70:
9b:dc:8f:16:c1:ab:dd:52:61:09:37:5f:1e:72:bb:89:8a:92:
3f:97:5c:8e:e9:1d:4f:0f:7b:1b:d6:0e:82:84:cf:aa:cb:95:
b9:c0:54:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:19 2024 by rpki-client on console-fra.rpki-client.org