Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/_ncDsU_dgUrlB0UXNS3O7ZmfbMY.roa
File: _ncDsU_dgUrlB0UXNS3O7ZmfbMY.roa (raw, json)
Hash identifier: vkyMrRbhF4CHczbKcYXEsacNwYGWY2gF4/6HNqP9ssY=
Subject key identifier: FE:77:03:B1:4F:DD:81:4A:E5:07:45:17:35:2D:CE:ED:99:9F:6C:C6
Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd
Certificate serial: 018C8C9AB639239FA71ED252A787DC103907
Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/_ncDsU_dgUrlB0UXNS3O7ZmfbMY.roa
Signing time: Thu 21 Dec 2023 13:39:58 +0000
ROA not before: Thu 21 Dec 2023 13:39:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137427
IP address blocks: 2.59.153.0/24 maxlen: 24
91.204.224.0/24 maxlen: 24
91.204.225.0/24 maxlen: 24
91.204.226.0/24 maxlen: 24
91.204.227.0/24 maxlen: 24
45.91.225.0/24 maxlen: 24
194.126.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Dec 2023 15:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8c:9a:b6:39:23:9f:a7:1e:d2:52:a7:87:dc:10:39:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd
Validity
Not Before: Dec 21 13:39:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe7703b14fdd814ae5074517352dceed999f6cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:43:12:47:62:08:7d:3d:f5:89:8d:4c:20:6e:
32:57:0b:98:6a:07:6d:e5:d8:2f:d6:d9:0e:6a:16:
50:a4:1f:0c:7f:dd:90:bb:63:be:9a:39:81:01:b4:
26:1a:14:4c:e3:0d:8b:90:33:bb:5a:40:e2:54:0a:
bf:30:95:8d:97:ac:96:4b:0f:f5:ca:7a:46:92:88:
bd:7d:43:e9:b8:55:41:b5:d1:6d:dc:a9:43:2f:88:
14:05:03:38:93:ea:cb:29:23:fa:b6:3f:e6:13:ba:
c4:bc:8f:c2:4a:5e:f2:99:3b:18:6e:44:65:66:56:
c0:c7:5e:63:ac:3b:16:13:55:f4:7a:52:de:11:5a:
3d:f5:45:e5:07:27:8a:8b:87:48:5a:e7:c1:c2:d4:
97:a6:21:5e:c1:88:38:99:9d:f3:e0:56:25:90:a4:
bf:64:0d:f2:28:9b:e2:e3:00:01:ae:f3:bc:0f:07:
98:5a:8a:53:b8:ad:28:b6:68:0a:c7:ff:21:c8:91:
37:fa:1b:9e:c9:f3:76:30:92:1c:d5:0e:56:6f:f9:
0b:05:55:68:37:97:f9:ed:6b:ed:c8:1c:ea:fe:ed:
c7:fb:85:71:ed:65:f1:6e:3f:5d:0d:22:5d:83:60:
8f:a2:0c:00:5e:77:f3:77:af:bc:1c:83:2e:cc:94:
43:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:77:03:B1:4F:DD:81:4A:E5:07:45:17:35:2D:CE:ED:99:9F:6C:C6
X509v3 Authority Key Identifier:
keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/_ncDsU_dgUrlB0UXNS3O7ZmfbMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.153.0/24
45.91.225.0/24
91.204.224.0/22
194.126.215.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:1a:8a:90:75:c0:77:0b:b8:40:80:23:e9:c1:89:2d:4b:05:
b7:ae:78:c0:e9:29:ac:23:41:b0:68:d9:ef:58:f3:29:d4:fc:
f8:74:9b:d2:f5:b7:b5:af:02:ed:71:1a:35:04:80:06:b0:67:
43:2c:a6:71:da:91:fd:be:17:25:6d:35:94:91:35:a0:79:64:
4d:6c:f8:6d:12:13:5f:52:53:11:b0:5d:70:a3:69:bb:82:56:
dc:d5:7c:55:de:af:5d:95:a7:6d:91:69:46:2d:52:08:2c:a3:
8f:56:d2:90:0c:88:d3:f0:b3:b9:41:08:f7:b7:63:99:e0:e8:
a2:5e:c9:71:03:5a:bb:57:2f:67:53:c1:84:68:62:a5:3b:b4:
61:25:64:9a:d2:d3:8c:e2:ac:81:03:d3:36:b1:09:35:0f:1a:
e5:d0:d9:a2:1c:4f:65:88:b3:1d:a7:b5:a1:37:ca:87:df:bc:
0d:5d:aa:1b:cb:53:e2:41:76:2d:0d:ea:84:d6:90:cb:a6:e0:
e9:d3:7f:50:ab:6d:98:9b:44:10:50:5c:84:f8:3d:ff:7f:b2:
3e:3f:d5:44:1d:a5:54:7d:d4:e6:54:2a:3b:60:9f:d0:46:19:
03:16:49:c6:b4:58:42:64:58:4b:07:16:28:ef:de:27:76:94:
eb:ab:16:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:56 2024 by rpki-client on console-fra.rpki-client.org