Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/chB39KmWJh-UtqtnMTe-c2frePY.roa
File: chB39KmWJh-UtqtnMTe-c2frePY.roa (raw, json)
Hash identifier: +92XrHsUvYj1f9JqgCCAmd4rKMjfF5QH73TYupxAytY=
Subject key identifier: 72:10:77:F4:A9:96:26:1F:94:B6:AB:67:31:37:BE:73:67:EB:78:F6
Certificate issuer: /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial: 0185723A1ACCA2DDAADB5F029872F0ADE2B3
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/chB39KmWJh-UtqtnMTe-c2frePY.roa
Signing time: Mon 02 Jan 2023 11:24:48 +0000
ROA not before: Mon 02 Jan 2023 11:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211392
IP address blocks: 193.106.189.0/24 maxlen: 24
91.192.106.0/24 maxlen: 24
91.192.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 24 Dec 2023 16:06:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:1a:cc:a2:dd:aa:db:5f:02:98:72:f0:ad:e2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
Validity
Not Before: Jan 2 11:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=721077f4a996261f94b6ab673137be7367eb78f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d6:8a:fa:94:dc:9d:ad:29:9f:2a:4f:c4:cb:
16:63:52:b9:f5:45:86:fe:bd:82:61:3a:c5:83:47:
5d:d3:bc:9c:61:b8:43:47:3b:17:30:16:d0:05:af:
d0:54:bc:9b:1f:60:ee:13:4f:1f:72:c1:97:14:94:
3b:af:14:fd:6d:ee:02:f2:a7:36:a1:6f:08:67:d7:
f5:5c:9d:c6:d6:fd:bf:41:da:0d:d8:d1:a7:c7:bd:
e4:22:e1:f3:6b:0c:09:1e:13:5e:e8:38:a9:f8:2d:
f5:cf:5a:27:81:ee:b3:78:4c:54:d4:92:e3:27:32:
19:11:57:86:db:17:34:bf:29:31:d8:7c:a4:29:54:
61:96:c3:b0:7d:34:f2:45:2c:5d:69:b4:ad:11:ba:
aa:c2:20:85:08:78:4a:19:73:94:be:c4:17:96:f0:
27:c1:8d:47:71:5c:c4:40:99:99:8f:2f:f4:46:84:
f2:f0:13:74:b3:e7:e1:d7:db:81:5f:aa:b7:ff:d4:
57:e8:c2:c6:3a:ca:bf:e2:16:df:f1:a6:ca:b6:39:
f5:d3:15:01:b5:38:ba:d0:6f:63:c1:06:40:b1:ab:
ac:d4:79:4f:2f:f5:d6:6e:4c:a0:15:bb:08:0f:ea:
1f:bb:f2:26:2c:01:36:35:d5:24:e7:34:bf:f7:cc:
7b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:10:77:F4:A9:96:26:1F:94:B6:AB:67:31:37:BE:73:67:EB:78:F6
X509v3 Authority Key Identifier:
keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/chB39KmWJh-UtqtnMTe-c2frePY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.106.0/23
193.106.189.0/24
Signature Algorithm: sha256WithRSAEncryption
35:50:28:ff:97:db:77:e7:37:cf:a1:bf:bf:2d:9b:96:49:12:
62:fc:f6:1c:a2:1e:b1:5e:25:3a:62:ad:2b:1c:71:db:cb:e1:
8c:f8:60:57:e1:e3:9a:9f:70:29:91:c6:71:97:74:75:57:9f:
e2:03:f8:d4:49:33:e9:e5:d9:53:51:6d:71:9c:af:03:72:30:
d4:fb:36:c9:8e:18:f8:d6:19:f4:fa:b6:04:62:d7:e4:9b:07:
70:22:4b:14:be:4e:67:e6:70:7a:a8:f2:1f:a6:1f:0d:54:69:
10:e0:2b:47:fa:37:a0:10:d3:d4:1b:da:49:da:fa:59:7c:54:
a1:be:48:d7:e5:1a:f5:53:5d:e0:d4:7e:9d:99:70:3e:32:20:
3b:d3:fb:40:64:1e:de:ef:1b:29:aa:af:eb:36:44:87:b5:a7:
10:ea:86:0d:0a:41:07:4f:02:81:56:96:35:ed:9d:03:42:a2:
ec:35:da:af:03:04:be:37:88:3c:8d:3b:0e:1e:2a:95:ee:ed:
5c:0a:84:0c:c6:c8:71:7f:82:fa:4d:46:1c:17:78:53:9c:7d:
50:43:02:d5:ac:dc:40:85:ce:c6:e0:26:94:cf:24:07:9b:3e:
04:c7:30:c2:2e:97:dd:41:e1:91:29:35:19:31:6c:f3:3e:e8:
d9:fe:fc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:49 2024 by rpki-client on console-fra.rpki-client.org