Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/vDhsVVV73shfk3Sf4OqXD-Rdk8Y.roa
File: vDhsVVV73shfk3Sf4OqXD-Rdk8Y.roa (raw, json)
Hash identifier: PqQK+YdV6u9I4mpPWts17/2esFu4AHYk52U3UoVtsqM=
Subject key identifier: BC:38:6C:55:55:7B:DE:C8:5F:93:74:9F:E0:EA:97:0F:E4:5D:93:C6
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 018C62889053A53D76D7E228FAA98F09DF95
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/vDhsVVV73shfk3Sf4OqXD-Rdk8Y.roa
Signing time: Wed 13 Dec 2023 09:36:06 +0000
ROA not before: Wed 13 Dec 2023 09:36:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41108
IP address blocks: 91.229.229.0/24 maxlen: 24
91.228.52.0/23 maxlen: 23
193.25.100.0/23 maxlen: 23
195.88.44.0/23 maxlen: 23
91.228.104.0/22 maxlen: 22
195.110.20.0/23 maxlen: 23
2001:67c:12a0::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 14 Dec 2023 11:46:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:62:88:90:53:a5:3d:76:d7:e2:28:fa:a9:8f:09:df:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Dec 13 09:36:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc386c55557bdec85f93749fe0ea970fe45d93c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7a:86:7f:e7:64:a7:bd:3e:4e:c2:aa:3b:04:
95:71:68:00:91:e1:e6:b8:47:35:40:77:d1:ab:6b:
11:d4:37:24:4c:8e:a7:6f:d4:cc:7e:92:ad:61:ba:
d9:a2:13:89:49:98:e6:f2:e9:32:95:e2:60:71:85:
40:39:d4:8b:45:3b:60:19:dd:bd:32:5b:9c:58:61:
c2:11:09:6b:0f:8c:d2:bb:45:02:6d:1b:8c:d3:16:
3f:83:f2:d3:00:01:fa:be:53:e8:4c:c5:21:14:a6:
fc:13:b1:37:a6:0f:6f:ff:03:da:ed:6c:1e:82:17:
15:56:13:b5:82:f5:30:cc:6c:8f:08:38:2f:11:e2:
ee:d4:87:17:eb:cb:e5:c5:e9:ba:90:0a:60:a0:16:
31:6f:5b:2e:80:c8:a3:e5:42:9d:7c:00:44:f9:d6:
63:b3:ee:7b:f5:74:08:31:41:7f:ea:ff:8b:fe:02:
92:ec:c4:9c:0b:6f:7b:64:dc:78:42:9b:e1:88:1f:
d6:63:0a:3a:cd:e9:6f:51:43:1b:c0:73:fc:e1:3b:
31:0c:d0:8c:c4:8f:08:a7:35:b1:f1:97:23:0f:fc:
b7:de:db:f3:7c:1d:6c:b4:c7:77:0e:23:76:bf:e2:
ec:c5:b6:a7:05:21:74:5a:dd:13:01:8c:2b:00:3a:
ee:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:38:6C:55:55:7B:DE:C8:5F:93:74:9F:E0:EA:97:0F:E4:5D:93:C6
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/vDhsVVV73shfk3Sf4OqXD-Rdk8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.52.0/23
91.228.104.0/22
91.229.229.0/24
193.25.100.0/23
195.88.44.0/23
195.110.20.0/23
IPv6:
2001:67c:12a0::/48
Signature Algorithm: sha256WithRSAEncryption
1f:84:f9:10:98:21:8d:2e:14:a2:41:67:41:93:e7:b2:84:01:
b3:71:4d:6c:37:d4:e7:41:bc:b4:0f:19:73:6e:52:54:fa:b4:
47:a4:94:df:f4:44:64:95:86:c4:1b:ea:d4:c0:dc:bc:fd:42:
ee:bd:ea:d8:a7:f9:c4:90:42:a4:05:ce:bb:a3:e5:f7:0a:34:
26:aa:c5:33:cd:8c:61:8e:7b:9d:36:cf:89:7b:cf:df:c2:a9:
4f:3f:ae:69:c7:d5:4c:f8:18:31:8b:c5:2d:70:63:09:6b:b7:
13:1e:29:c3:99:06:79:b9:b9:c6:24:a6:8c:de:e5:37:b7:f8:
54:f3:db:64:89:28:0b:9c:67:47:d7:e7:3e:16:b5:ea:d3:43:
3a:c8:4f:6a:9e:ce:ac:29:ac:dd:9d:68:48:90:b6:69:36:b4:
5b:a0:b9:45:c1:b8:ba:b8:2d:27:7c:1f:78:c0:47:b2:97:1d:
ac:78:ff:f1:68:a9:d1:cd:f8:bc:79:94:10:8b:42:00:a0:7a:
cd:2d:e3:92:6c:d8:49:66:5a:52:03:e2:07:24:0e:a2:e8:c2:
db:20:78:c6:d1:e0:0e:a0:98:53:9d:57:a8:ee:fb:bc:90:c6:
94:e4:90:2d:ad:6a:d5:08:9b:6c:8c:90:84:45:9c:b5:9f:b3:
8f:78:34:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:29 2024 by rpki-client on console-ams.rpki-client.org