Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/c8Ht_CBvFfme6p6vvZX4D6hlC-Y.roa
File: c8Ht_CBvFfme6p6vvZX4D6hlC-Y.roa (raw, json)
Hash identifier: 3oDkR+EoYo8RrGSGN2BKAF1U+7luoFVW+I5u7NZjE0c=
Subject key identifier: 73:C1:ED:FC:20:6F:15:F9:9E:EA:9E:AF:BD:95:F8:0F:A8:65:0B:E6
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 018C6825F0E1A06D0EF3360C61F27CE92CD7
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/c8Ht_CBvFfme6p6vvZX4D6hlC-Y.roa
Signing time: Thu 14 Dec 2023 11:46:06 +0000
ROA not before: Thu 14 Dec 2023 11:46:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41108
IP address blocks: 91.228.52.0/23 maxlen: 23
91.229.229.0/24 maxlen: 24
193.25.100.0/23 maxlen: 23
195.88.44.0/23 maxlen: 23
91.228.104.0/22 maxlen: 22
195.110.20.0/23 maxlen: 23
195.110.20.0/24 maxlen: 24
2001:67c:12a0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:68:25:f0:e1:a0:6d:0e:f3:36:0c:61:f2:7c:e9:2c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Dec 14 11:46:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73c1edfc206f15f99eea9eafbd95f80fa8650be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bf:c9:f1:31:cc:9f:ca:5c:4c:90:6e:66:06:
cc:8f:c4:1d:ba:8e:7c:1a:d1:2c:5d:f5:d6:d3:c4:
8c:98:ea:5f:25:17:8c:1f:4b:4c:61:82:d0:27:81:
5c:5b:d7:1c:47:58:18:40:9a:72:6b:70:f4:d9:f4:
28:08:03:77:6d:c6:01:3d:87:9a:8a:f3:b9:a3:8f:
99:62:6d:34:30:e6:1f:ea:bc:26:79:09:c9:2c:d9:
d4:7f:08:48:6d:e7:8d:6f:67:fe:dd:2b:fd:fa:39:
1b:18:5f:0b:54:6e:80:98:43:e2:7d:11:0c:bd:cf:
76:28:2c:9b:dc:1b:22:e0:5d:36:d9:5c:ab:85:5d:
cd:99:c1:02:34:08:3a:4f:8a:37:d3:87:a8:82:ca:
ab:cd:b9:52:a3:27:99:fd:7b:a1:a0:87:f5:40:82:
8e:91:06:95:4a:74:75:05:dc:85:48:ad:34:9d:1d:
6b:87:37:1b:1f:2b:da:21:51:a5:d0:91:0c:d7:52:
01:2b:bf:56:ba:d6:ce:4d:63:22:e6:cc:b7:22:1d:
6a:eb:c5:a6:ef:57:1f:61:eb:94:e4:be:52:8c:d0:
e7:21:ce:37:4c:42:3b:10:35:dc:4f:60:4b:7f:aa:
b6:08:07:e3:0e:42:c4:d5:08:77:da:df:af:96:b6:
61:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C1:ED:FC:20:6F:15:F9:9E:EA:9E:AF:BD:95:F8:0F:A8:65:0B:E6
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/c8Ht_CBvFfme6p6vvZX4D6hlC-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.52.0/23
91.228.104.0/22
91.229.229.0/24
193.25.100.0/23
195.88.44.0/23
195.110.20.0/23
IPv6:
2001:67c:12a0::/48
Signature Algorithm: sha256WithRSAEncryption
12:78:18:21:48:23:9e:63:25:8f:41:4f:05:a7:e8:16:86:44:
62:8f:a8:0a:6a:69:3c:84:c0:b7:e0:1d:5d:85:92:11:5c:d8:
2d:23:f8:85:ab:e8:d5:1d:65:ad:38:1a:3b:a3:c8:59:9c:62:
1e:7f:ef:61:14:25:5c:81:f7:a2:e2:0a:17:a6:de:06:eb:e2:
28:d9:aa:8b:f4:3e:54:0a:9c:b6:cc:42:8a:83:7e:f2:b1:e5:
7d:1c:e9:79:f7:2d:1d:4d:ce:a1:b4:50:01:28:d3:54:1f:fd:
40:31:c4:66:b6:3e:27:17:a1:83:9d:6c:36:f7:35:c3:dd:66:
d0:af:0d:29:f4:ce:be:6e:c3:f1:41:e8:33:1a:81:d1:9e:20:
b0:b5:b2:5d:a2:90:b4:46:e4:e3:ec:db:39:ad:ba:86:cf:ec:
18:b2:74:db:d4:63:d3:6e:74:64:ab:62:60:eb:f8:4d:c1:6a:
a2:31:21:e5:28:69:c0:6f:cb:ce:10:d4:59:a5:4d:7a:c2:71:
2e:51:53:62:85:0f:d3:3e:74:6a:ae:1d:7a:4e:5d:cc:ef:0b:
30:9e:97:24:e9:4e:46:03:29:3a:4e:f2:1a:df:30:36:ca:dd:
42:cf:e1:51:d5:52:ad:47:35:a8:4e:6b:68:86:32:57:5e:63:
2f:14:af:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:29 2024 by rpki-client on console-ams.rpki-client.org