Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/IF6r4pb1Cj0C9OkslzcaAR4jPLs.roa
File: IF6r4pb1Cj0C9OkslzcaAR4jPLs.roa (raw, json)
Hash identifier: WeN7GLFaL8XVAuspiHerGY6kYLz8J4HLxxiubx0jq+c=
Subject key identifier: 20:5E:AB:E2:96:F5:0A:3D:02:F4:E9:2C:97:37:1A:01:1E:23:3C:BB
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 019192CEA913A8C553245A9BD1914876E90F
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/IF6r4pb1Cj0C9OkslzcaAR4jPLs.roa
Signing time: Tue 27 Aug 2024 07:48:22 +0000
ROA not before: Tue 27 Aug 2024 07:48:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 84.19.27.0/24 maxlen: 24
84.19.31.0/24 maxlen: 24
91.190.145.0/24 maxlen: 24
91.228.105.0/24 maxlen: 24
91.228.107.0/24 maxlen: 24
91.230.27.0/24 maxlen: 24
195.225.240.0/24 maxlen: 24
195.225.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 10:26:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:92:ce:a9:13:a8:c5:53:24:5a:9b:d1:91:48:76:e9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Aug 27 07:48:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=205eabe296f50a3d02f4e92c97371a011e233cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c3:e1:27:44:0c:67:b4:5b:0f:81:5c:49:5a:
8f:3c:b7:35:96:07:fd:e5:50:31:7c:08:38:d1:71:
fb:99:f6:ff:86:a2:58:7c:40:21:c0:98:33:f4:5d:
8c:30:93:eb:36:4c:ef:46:42:50:f8:69:27:27:70:
5d:bf:df:3f:00:25:2d:aa:db:a3:c6:23:5c:c2:5e:
5c:7f:a3:f4:64:bb:79:8d:a6:dc:39:b3:9a:54:25:
fe:b1:24:72:9e:1b:9b:37:b9:1c:1f:e5:e2:d8:28:
23:41:5a:57:70:fa:54:1f:17:e2:49:87:57:f9:d2:
78:ba:b0:ad:02:64:61:d8:1b:bc:16:86:e5:ab:4e:
62:bb:8d:b3:8d:3d:46:d2:08:a5:3f:50:d0:41:ad:
c9:91:b1:aa:83:10:ca:ad:d3:69:49:29:f9:38:11:
bf:32:85:dc:c5:e5:9a:f3:d6:aa:fb:57:ac:fc:18:
e7:d5:12:13:5e:94:b2:c8:f9:7d:ff:a5:da:5f:ce:
69:95:64:cd:50:78:6e:b8:e3:f9:fe:bb:8b:b0:e1:
8e:07:2a:89:83:a0:f0:6d:eb:0b:1d:72:68:f1:5f:
c3:33:c9:1d:4e:4a:c7:fb:d9:26:04:f5:e5:8e:77:
86:4b:50:a9:37:cb:19:fa:09:46:10:6f:67:2c:81:
41:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5E:AB:E2:96:F5:0A:3D:02:F4:E9:2C:97:37:1A:01:1E:23:3C:BB
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/IF6r4pb1Cj0C9OkslzcaAR4jPLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.19.27.0/24
84.19.31.0/24
91.190.145.0/24
91.228.105.0/24
91.228.107.0/24
91.230.27.0/24
195.225.240.0/24
195.225.243.0/24
Signature Algorithm: sha256WithRSAEncryption
03:fc:7c:dd:f8:fa:1d:94:8c:30:d9:b0:ca:39:de:66:ef:35:
e1:43:b7:9e:d9:5b:32:3b:49:12:66:60:0a:e9:a7:6f:45:81:
cd:2a:c2:0b:8a:43:de:1d:0b:d4:77:e8:48:d2:e1:94:ad:43:
12:a2:22:b3:06:10:9a:ea:a2:f7:7a:05:cb:64:81:ff:1b:e0:
ee:0b:e3:cf:9b:f2:a7:74:2f:de:c8:9d:01:5e:5b:f0:e6:ee:
1a:45:8b:ff:a8:54:2e:07:4d:5a:0e:d2:5e:2d:c0:a8:6e:2a:
30:01:dd:82:fa:90:68:d7:1c:5a:07:e2:eb:28:aa:3e:64:f8:
d4:ec:86:8a:e1:a9:54:2e:8f:96:d4:17:db:ba:c8:43:a0:5e:
75:36:2b:61:20:fd:e7:72:02:07:68:2e:0a:8d:44:30:7b:fd:
bb:56:94:cd:b0:ac:4f:72:9f:99:18:58:0c:33:77:d8:09:dd:
8d:49:60:8d:03:c8:d6:b9:b9:bd:34:65:aa:23:73:90:d7:89:
7a:96:0a:4c:a4:23:8c:34:3e:d5:f8:5e:f1:53:06:09:3a:c3:
eb:83:28:3d:b5:27:1b:f1:d1:7b:11:0a:8a:36:60:42:79:85:
b1:32:b5:ea:b1:60:77:ff:21:88:25:08:b7:3c:23:5e:90:8c:
cf:cb:c5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 13:10:43 2024 by rpki-client on console-ams.rpki-client.org