Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/f9Kz4bkTv4UI8KRCdTZ-Mn4BSag.roa
File: f9Kz4bkTv4UI8KRCdTZ-Mn4BSag.roa (raw, json)
Hash identifier: MqpqTuAD1j9/ZOWGl/jJzjk/uL5kV/wU3QngUwCYHJY=
Subject key identifier: 7F:D2:B3:E1:B9:13:BF:85:08:F0:A4:42:75:36:7E:32:7E:01:49:A8
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018571A7B5D26B6FACD9369F69BBC4F1574D
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/f9Kz4bkTv4UI8KRCdTZ-Mn4BSag.roa
Signing time: Mon 02 Jan 2023 08:44:54 +0000
ROA not before: Mon 02 Jan 2023 08:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206068
IP address blocks: 86.104.195.0/24 maxlen: 24
89.32.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Jul 2023 15:13:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:b5:d2:6b:6f:ac:d9:36:9f:69:bb:c4:f1:57:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 2 08:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fd2b3e1b913bf8508f0a44275367e327e0149a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a2:d0:29:31:d5:a3:5d:e2:cf:62:d1:fe:f5:
3e:e9:47:d4:df:67:b6:76:59:d0:72:3f:80:aa:3d:
2b:af:2f:c6:cd:94:28:4f:bf:8a:c9:a9:a0:47:75:
84:40:e1:d4:71:a7:c5:ec:35:dd:1c:51:64:a7:26:
2c:2b:bf:69:a4:3b:14:a6:fa:fe:9d:bc:24:8d:2f:
48:21:13:b8:b7:f2:df:09:56:a2:c7:8a:d8:5c:9b:
37:18:5b:ac:88:07:48:f2:04:d6:f9:0c:e0:56:68:
2e:13:e9:cc:d8:50:44:02:f5:4d:e4:3b:27:70:03:
fd:1d:8c:fb:6a:92:00:d2:e9:77:85:aa:38:fa:53:
8e:b3:1b:c4:e4:46:b5:5e:81:87:ec:bb:fe:d3:cf:
d6:59:c3:5a:6c:88:02:7d:82:f3:82:3b:2f:d2:79:
75:ea:50:01:51:94:b1:e1:f0:80:a0:77:34:e9:e5:
39:d9:57:d5:e6:02:6c:66:a5:8d:f9:69:36:b5:80:
9c:af:2b:34:d2:20:56:5b:01:e0:da:ef:e4:7e:2b:
14:38:42:1a:9d:b5:20:71:4f:05:19:85:73:e3:6d:
b6:ad:20:30:35:76:a0:11:c1:90:75:a2:d9:a8:aa:
fa:73:27:44:96:c0:53:a3:e1:66:81:9d:49:32:f8:
bb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D2:B3:E1:B9:13:BF:85:08:F0:A4:42:75:36:7E:32:7E:01:49:A8
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/f9Kz4bkTv4UI8KRCdTZ-Mn4BSag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.195.0/24
89.32.126.0/24
Signature Algorithm: sha256WithRSAEncryption
74:51:27:ff:6e:87:28:ab:cc:51:03:38:dd:9a:d3:27:f6:c8:
92:ed:e5:03:f1:e7:bc:01:3e:b9:35:9b:b8:40:fc:5a:f6:af:
c1:dd:e0:55:3b:46:8c:89:c5:d2:c9:63:68:9b:7c:9e:7a:69:
a6:8b:6d:4e:a7:3d:fa:02:4f:cd:46:ae:ec:59:73:6e:a1:0b:
5e:36:68:89:61:e9:4f:43:34:d2:bf:e1:32:40:f9:3d:7f:c5:
fd:5a:7c:2d:91:6c:f2:0e:7f:5d:12:d5:ed:a2:18:67:23:60:
0e:ee:0f:b5:53:94:f9:d4:81:44:c0:9c:09:0e:73:6f:7b:53:
14:78:5c:1b:8d:1e:8a:24:d7:9f:00:81:64:a8:cd:96:9d:3a:
70:f3:3f:7c:33:de:7d:66:87:e1:0f:e2:35:ed:fa:0a:e1:0e:
8c:f9:86:2b:fe:df:83:0c:20:12:a2:08:ae:93:5d:06:fc:21:
21:98:18:04:0e:81:f0:97:b8:b5:2f:4d:1d:7a:5d:08:78:e6:
f0:29:52:c2:d3:8b:3b:c1:45:13:4d:86:9c:f2:fb:4f:88:55:
09:e6:62:92:cf:1c:2c:77:8a:77:3c:1f:85:64:f9:b2:c6:75:
32:c9:94:41:ae:53:70:3a:54:80:c6:78:1c:cb:e3:c2:94:d6:
25:60:51:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:41 2024 by rpki-client on console-fra.rpki-client.org