Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/teVMvV2DDWN57YffdNMJ3JlZ73g.roa
File: teVMvV2DDWN57YffdNMJ3JlZ73g.roa (raw, json)
Hash identifier: OMzU2qNBXFYMoO+8fUkExggR0RmLm87UmxK1tr8HFIQ=
Subject key identifier: B5:E5:4C:BD:5D:83:0D:63:79:ED:87:DF:74:D3:09:DC:99:59:EF:78
Certificate issuer: /CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Certificate serial: 018572B3FF69EAF7243EAC708FAFBE8C008F
Authority key identifier: 9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/teVMvV2DDWN57YffdNMJ3JlZ73g.roa
Signing time: Mon 02 Jan 2023 13:37:56 +0000
ROA not before: Mon 02 Jan 2023 13:37:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1200
IP address blocks: 91.236.189.0/24 maxlen: 24
193.105.101.0/24 maxlen: 24
185.55.139.0/24 maxlen: 24
185.55.138.0/24 maxlen: 24
185.55.137.0/24 maxlen: 24
185.55.136.0/22 maxlen: 22
185.55.136.0/24 maxlen: 24
91.200.16.0/22 maxlen: 22
195.69.144.0/22 maxlen: 22
195.60.82.128/26 maxlen: 26
80.249.208.0/21 maxlen: 21
2001:67c:1a8::/48 maxlen: 48
2a02:4b60::/32 maxlen: 32
2001:7f8:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 18 Aug 2023 07:49:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b3:ff:69:ea:f7:24:3e:ac:70:8f:af:be:8c:00:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Validity
Not Before: Jan 2 13:37:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5e54cbd5d830d6379ed87df74d309dc9959ef78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7b:32:cd:e4:3d:e8:f5:22:da:e8:39:d3:0c:
9e:97:7c:f0:94:96:4d:5c:e8:46:1a:36:db:22:d3:
8e:df:c9:3c:59:57:32:01:e7:78:f6:35:65:df:7c:
82:24:23:71:a3:a1:56:46:74:a4:16:5e:12:10:f8:
55:7b:9e:89:eb:93:e6:e0:a6:2b:f3:5f:d2:c7:c7:
3f:90:b9:59:71:7f:98:7e:a3:db:66:71:fa:3c:6d:
42:c0:2f:6f:49:3d:9c:4a:b9:3b:bd:40:7e:f0:cf:
ef:6d:9d:de:a0:81:c5:5c:37:22:5d:13:14:be:6c:
b9:63:c3:51:71:75:91:b6:92:50:b5:ca:65:4e:3d:
8d:34:79:25:f1:58:a6:09:0a:5f:77:1a:00:8e:df:
cb:01:98:ea:a3:23:ba:7b:e2:95:53:46:b1:2c:96:
3c:02:7c:d6:6d:fd:87:6c:c7:51:b3:32:d3:61:3b:
16:2a:a1:46:0d:ed:dc:ed:99:20:23:54:d5:40:63:
09:78:66:b6:72:1e:ca:46:0a:bd:01:40:16:dc:57:
1d:d1:db:90:a9:83:7f:b8:30:6d:c7:b0:be:4c:da:
be:6b:93:b9:6b:46:96:4b:ae:ba:2a:ef:ce:7b:dc:
a6:03:60:bf:2d:06:4f:79:c5:95:ae:8b:b8:69:a9:
8c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E5:4C:BD:5D:83:0D:63:79:ED:87:DF:74:D3:09:DC:99:59:EF:78
X509v3 Authority Key Identifier:
keyid:9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/teVMvV2DDWN57YffdNMJ3JlZ73g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.249.208.0/21
91.200.16.0/22
91.236.189.0/24
185.55.136.0/22
193.105.101.0/24
195.60.82.128/26
195.69.144.0/22
IPv6:
2001:67c:1a8::/48
2001:7f8:1::/48
2a02:4b60::/32
Signature Algorithm: sha256WithRSAEncryption
79:8e:65:6e:40:fe:bc:58:33:2d:df:fa:99:d7:4d:b0:1a:8b:
36:73:fa:3c:c9:03:95:02:63:e2:7a:b5:dd:ca:44:cc:06:93:
0b:e2:8c:09:7e:ed:e4:69:5d:b8:f2:7b:35:cd:ea:64:06:6b:
0c:13:34:97:81:c3:66:c4:4e:73:16:42:58:de:82:78:69:ca:
e4:c9:c5:05:24:5f:7a:4d:54:8c:6a:6a:8c:ac:8f:22:12:8b:
10:20:3a:29:85:f6:8a:b2:d2:c9:2f:58:64:7f:21:ee:c6:c5:
00:8e:c2:f0:ea:36:cc:47:05:0c:99:c6:d8:14:45:8d:b9:90:
2c:14:0b:90:ba:3b:31:70:45:f6:5f:ed:4e:18:ab:22:67:a2:
4c:d4:f3:23:80:41:4f:df:64:ca:37:c2:22:7a:fa:8b:9a:93:
fc:a2:7b:da:22:f3:35:bb:16:90:ce:7b:0e:e1:58:6a:ab:ec:
b5:11:4c:25:49:04:45:ab:e1:f1:a7:59:7b:c0:2e:4e:d3:39:
56:da:11:ae:5f:59:a5:63:44:25:95:21:24:1a:ae:e2:47:91:
a2:a5:d8:99:0b:b7:c3:53:ce:aa:13:05:02:d0:1d:75:c2:ef:
93:2e:a9:ae:f0:ea:d1:e1:5c:07:08:17:a7:c2:31:8f:dc:8d:
47:0b:2c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:15 2024 by rpki-client on console-fra.rpki-client.org