Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/v05H5O3rlY70I3SPbbAI-j4-Ras.roa
File: v05H5O3rlY70I3SPbbAI-j4-Ras.roa (raw, json)
Hash identifier: 6ySenHc133sSur+naflh0G8Ojf6bFUdzDSz4OvCfML0=
Subject key identifier: BF:4E:47:E4:ED:EB:95:8E:F4:23:74:8F:6D:B0:08:FA:3E:3E:45:AB
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 01856E1420FA99BEA8828D52793D8C3C5194
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/v05H5O3rlY70I3SPbbAI-j4-Ras.roa
Signing time: Sun 01 Jan 2023 16:04:50 +0000
ROA not before: Sun 01 Jan 2023 16:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 185.254.52.0/24 maxlen: 24
93.190.11.0/24 maxlen: 24
193.111.78.0/24 maxlen: 24
93.190.10.0/24 maxlen: 24
93.190.8.0/24 maxlen: 24
193.17.4.0/24 maxlen: 24
193.17.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Nov 2023 18:24:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:20:fa:99:be:a8:82:8d:52:79:3d:8c:3c:51:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 1 16:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf4e47e4edeb958ef423748f6db008fa3e3e45ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:61:03:26:e5:c3:84:73:cb:d4:a3:44:d9:4d:
fe:30:c7:d7:3f:35:23:f5:71:c9:7e:d3:51:62:96:
05:7e:7e:93:a8:b6:59:a4:c0:c9:7b:3b:8d:5b:81:
01:f9:02:2c:52:fa:71:c2:9b:1e:7b:41:c7:d7:33:
07:b5:bd:56:80:38:ff:27:2b:2f:b2:b2:94:43:c8:
ed:7b:3b:97:c4:a3:b1:be:56:ff:23:4a:0d:02:05:
a0:47:7c:d9:64:98:f9:37:93:65:ea:8d:6b:56:8f:
ab:77:1a:63:78:c6:57:d0:86:6a:75:6c:b9:12:4c:
af:11:d5:d5:70:cb:6e:ec:83:44:f6:fc:17:35:59:
b5:87:80:06:f1:17:7a:41:d2:3e:8b:e9:44:80:80:
0a:da:40:fa:93:fd:64:aa:bc:c6:a9:ab:47:df:3f:
35:66:57:2a:8a:5a:ae:a4:0d:82:8c:95:2f:5c:2d:
f8:10:6c:ce:d0:cd:ed:c4:67:e9:3b:05:12:d5:35:
7b:9d:be:33:89:46:4c:54:33:9c:06:d2:81:19:01:
21:55:58:8b:03:aa:9e:e5:d7:94:aa:b8:48:5e:f2:
a5:b8:e5:8c:e2:ad:9f:eb:23:23:6d:94:d6:f9:62:
6e:4a:49:a1:cb:60:96:79:13:23:ec:54:0d:57:27:
e0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4E:47:E4:ED:EB:95:8E:F4:23:74:8F:6D:B0:08:FA:3E:3E:45:AB
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/v05H5O3rlY70I3SPbbAI-j4-Ras.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.8.0/24
93.190.10.0/23
185.254.52.0/24
193.17.4.0/24
193.17.6.0/24
193.111.78.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:07:e6:a6:51:e0:cf:71:c6:28:de:2d:0a:61:28:f4:80:bd:
1c:e4:59:5e:f1:7f:83:cd:78:6d:57:c1:60:2a:28:b8:08:29:
e2:e7:2b:6c:58:ab:01:49:88:b2:fe:46:1c:0b:26:c3:f4:ce:
5f:54:c6:b1:3f:1d:9b:4a:58:19:1d:1b:47:c5:e9:73:eb:d0:
53:52:90:6a:08:bd:31:b8:e8:c3:7c:30:84:e8:68:f6:f7:18:
35:03:75:c9:a7:ac:e7:e1:01:2b:6f:68:88:b6:c8:8f:a4:60:
c8:2c:f5:a9:21:86:28:af:e6:e5:93:54:83:a1:5f:7e:26:5a:
5b:e1:47:b4:ed:a7:05:c8:af:78:b1:2a:b9:97:b0:0f:bd:80:
f3:02:a6:8b:4e:f3:f2:d5:ec:7a:94:65:0b:78:20:07:cf:53:
e4:59:50:21:14:89:b2:38:2d:b4:f5:f0:d0:d4:ba:cb:75:a0:
6d:73:05:11:a7:b6:e5:dd:e0:9b:7a:9b:f5:14:5e:41:27:33:
e1:20:ab:72:98:32:b7:c6:b7:f0:a6:0d:1f:2a:e2:70:c6:a7:
53:20:96:70:f3:7e:46:56:a1:dc:36:76:9d:95:b1:ea:5e:0d:
9d:c8:71:10:09:04:71:18:35:ee:97:c0:82:a0:be:58:e9:07:
09:a4:c1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:49 2024 by rpki-client on console-ams.rpki-client.org