Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/7dQCUKz_hkRPzJlCHDnLZ1fOExQ.roa
File: 7dQCUKz_hkRPzJlCHDnLZ1fOExQ.roa (raw, json)
Hash identifier: K7l/TiYOR5vudZk8sdQl5PTjucXTSxEeLfcxDWnDffA=
Subject key identifier: ED:D4:02:50:AC:FF:86:44:4F:CC:99:42:1C:39:CB:67:57:CE:13:14
Certificate issuer: /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial: 018CC4935997432AAC3E355463DB15DA5F60
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/7dQCUKz_hkRPzJlCHDnLZ1fOExQ.roa
Signing time: Mon 01 Jan 2024 10:30:40 +0000
ROA not before: Mon 01 Jan 2024 10:30:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211392
IP address blocks: 193.106.189.0/24 maxlen: 24
91.192.106.0/24 maxlen: 24
91.192.106.0/23 maxlen: 23
91.192.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Mar 2024 04:25:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:59:97:43:2a:ac:3e:35:54:63:db:15:da:5f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
Validity
Not Before: Jan 1 10:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edd40250acff86444fcc99421c39cb6757ce1314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d1:6a:ab:b5:eb:cc:b3:17:5c:13:ac:e9:f3:
d0:f0:ef:3d:d7:b7:5a:99:21:87:02:82:a1:44:71:
88:7e:9c:23:3b:3b:7d:a6:f9:fc:1e:04:17:2a:ef:
80:68:e5:9b:93:51:9d:f0:de:16:41:cb:3a:c0:de:
d5:2f:6c:d6:2e:6d:04:f7:ab:2f:30:3f:55:0e:44:
3f:91:5e:44:84:4b:2f:eb:bd:45:d7:6c:32:25:c7:
72:a0:5c:f0:1c:0e:59:78:25:a0:df:1c:05:e9:71:
1e:71:23:6e:f7:f1:e9:a0:c6:b0:62:21:ea:ba:ac:
36:7f:9d:99:c0:dc:eb:b9:82:a5:0c:41:ca:8e:a6:
0a:49:db:42:2e:08:2d:95:79:91:43:95:f8:d9:14:
75:74:7a:9f:8f:8f:31:9b:8d:5a:98:4e:e9:4f:76:
ca:fc:f3:08:56:36:56:75:53:fe:23:1d:a1:f6:ed:
59:f2:53:10:18:04:1c:12:f7:a1:45:d6:9d:f5:ad:
27:cb:3c:d2:56:fc:f9:e7:fd:67:c0:6f:c8:fb:80:
49:3d:98:9e:21:ff:f7:a6:59:d3:4b:f0:b3:67:df:
ab:7c:71:81:b7:88:9d:47:bd:f9:00:91:87:28:98:
cd:37:e0:9b:3e:04:82:e3:b5:be:18:6e:a1:48:03:
7d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D4:02:50:AC:FF:86:44:4F:CC:99:42:1C:39:CB:67:57:CE:13:14
X509v3 Authority Key Identifier:
keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/7dQCUKz_hkRPzJlCHDnLZ1fOExQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.106.0/23
193.106.189.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:96:c0:99:8b:83:5c:bc:cb:97:ae:fb:e9:1e:ff:a3:19:21:
dd:cb:62:70:a1:4b:e6:80:68:86:b4:77:1e:77:60:8b:c6:72:
df:70:35:37:0f:ad:6b:0e:90:be:ae:ed:4c:40:12:89:db:5a:
76:2e:5e:57:cf:f4:96:40:63:ed:88:9f:ad:36:43:ec:4e:25:
c1:1f:5d:a1:0c:b0:eb:35:13:31:22:ad:29:62:cf:ba:1b:47:
da:a5:be:56:85:2d:52:a1:f4:30:02:77:c4:99:a4:5a:1c:88:
ea:fe:56:ec:d9:d9:ea:c4:e8:9d:42:f8:28:b5:81:18:9c:bf:
ee:87:d0:f5:58:85:cc:f2:c5:7a:fa:a0:68:80:5d:47:12:66:
bb:aa:61:ae:3b:d9:4f:ab:b2:6d:74:4a:8b:1c:5a:19:37:9d:
a5:57:e1:fb:30:97:d3:99:f3:2d:81:2d:3e:23:93:a5:94:e3:
e5:d8:7e:6f:29:02:02:e1:c2:0f:dd:50:b2:c5:54:99:ff:2c:
cf:6a:0b:69:56:a7:61:0e:c0:9d:fd:17:51:29:13:92:f1:3f:
e6:2f:49:94:1f:48:3d:b1:ef:f4:55:47:d1:2a:85:e8:4b:3e:
f8:f5:35:94:4b:c8:17:6c:82:d2:bc:bd:21:8f:6d:8d:eb:f3:
1d:be:27:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:49 2024 by rpki-client on console-fra.rpki-client.org