Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/9R4Mbcff4510REJAZOafoJ7uQFY.roa
File: 9R4Mbcff4510REJAZOafoJ7uQFY.roa (raw, json)
Hash identifier: luw+fVjDzRWWYTaq59yc7mFErSHKNcV3VQTIx+sjcMA=
Subject key identifier: F5:1E:0C:6D:C7:DF:E3:9D:74:44:42:40:64:E6:9F:A0:9E:EE:40:56
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 018CC94DFA946FEA06D0E45571F407BBE404
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/9R4Mbcff4510REJAZOafoJ7uQFY.roa
Signing time: Tue 02 Jan 2024 08:32:59 +0000
ROA not before: Tue 02 Jan 2024 08:32:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6762
IP address blocks: 85.204.127.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
89.33.163.0/24 maxlen: 24
89.39.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Apr 2024 10:39:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:fa:94:6f:ea:06:d0:e4:55:71:f4:07:bb:e4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 2 08:32:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f51e0c6dc7dfe39d7444424064e69fa09eee4056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:26:c9:f8:e8:37:57:e1:b8:cf:b4:5e:28:d8:
2f:21:b1:cd:c5:b8:6a:ff:a4:25:3a:64:ad:86:a5:
b6:a0:92:da:d9:3b:f1:cc:3c:c8:75:15:ad:79:5c:
7b:ce:ef:bb:2b:4e:45:44:85:86:47:dc:7a:bb:05:
17:4e:ab:f7:ba:34:51:44:6c:f5:ca:46:23:21:5f:
0f:fe:70:e0:3d:4c:73:4c:d4:ce:7b:50:86:d6:d9:
54:ff:77:59:79:60:f2:fc:ac:e7:6c:c3:a4:1b:77:
6d:b6:7e:0a:60:6e:83:bd:86:9e:cd:35:a1:b9:02:
22:ab:7c:d2:4e:67:91:48:94:d2:bc:1e:e0:22:f9:
ba:03:c3:3e:5a:cc:b8:a2:c0:3f:02:61:39:52:6b:
e1:c8:4a:97:81:ac:a3:e6:5e:cf:14:81:a4:55:a5:
c7:de:07:d6:b4:47:34:ab:d6:6d:3c:a4:a7:3b:5d:
ba:e5:5e:dc:06:8a:a3:30:07:ab:1b:28:2d:d7:93:
ab:3d:6a:e2:a8:30:78:98:2e:21:6a:bb:17:bf:30:
e3:6d:c7:ad:94:2e:fe:66:b2:bd:86:4c:13:ec:46:
9d:6c:d5:f9:59:92:9e:ef:f6:b4:d0:4b:ae:dc:2e:
97:db:79:61:6f:fc:68:0a:38:88:70:83:4b:72:8e:
70:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1E:0C:6D:C7:DF:E3:9D:74:44:42:40:64:E6:9F:A0:9E:EE:40:56
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/9R4Mbcff4510REJAZOafoJ7uQFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.127.0/24
89.33.163.0/24
89.39.252.0/24
93.113.158.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:75:12:b3:11:09:2c:29:16:e5:2c:a2:65:b9:8b:3b:bb:26:
db:e8:06:7e:ff:aa:63:0c:f1:f3:9b:28:d7:91:c7:8e:63:a1:
4a:2e:ad:8f:ce:b4:cb:65:de:45:a9:91:b8:7c:ba:03:75:ae:
e0:32:41:7c:51:4f:ac:af:d0:0d:31:58:10:88:76:92:0e:ad:
49:56:af:b5:03:59:28:90:68:8d:e4:7c:e2:f7:24:24:17:94:
c2:7a:e2:e4:0f:15:7d:38:0d:d4:82:b7:2a:87:f0:f6:b5:fb:
13:6a:ab:54:8c:36:65:9e:28:0a:1b:f6:ed:14:92:dd:27:73:
c6:99:2c:71:cd:bf:43:9e:5d:ac:22:0b:26:0d:19:7c:fa:a4:
7e:11:f9:85:a0:11:28:74:13:6d:7f:f6:b8:47:61:15:f6:9f:
ca:05:cb:e6:45:4d:ca:9a:07:5c:f7:a0:7b:00:65:10:c5:d1:
0d:69:e7:d0:0a:8d:88:4d:83:5d:a7:02:5a:00:53:f4:6a:59:
0b:f2:ef:75:b5:56:c6:55:7b:e2:21:97:6e:ae:50:57:84:d9:
ae:73:ab:58:96:3d:53:f0:21:bf:54:0c:2c:7e:e0:22:80:bf:
16:3c:52:d3:30:5c:e7:e8:95:df:ed:a2:23:9c:46:34:b1:cc:
9a:42:1d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:38 2024 by rpki-client on console-ams.rpki-client.org