Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/RLCTrf14WC4OVhvrYoxJJvR4NvI.roa
File: RLCTrf14WC4OVhvrYoxJJvR4NvI.roa (raw, json)
Hash identifier: 7b8iHYNRY3BFxAwmaTUZdhYsrjuJpw3XS04BHRAO+/Q=
Subject key identifier: 44:B0:93:AD:FD:78:58:2E:0E:56:1B:EB:62:8C:49:26:F4:78:36:F2
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 01856EA6BCA28A9B0056651A310F4F5A3985
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/RLCTrf14WC4OVhvrYoxJJvR4NvI.roa
Signing time: Sun 01 Jan 2023 18:44:59 +0000
ROA not before: Sun 01 Jan 2023 18:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41953
IP address blocks: 185.202.84.0/22 maxlen: 22
92.114.111.0/24 maxlen: 24
89.40.196.0/22 maxlen: 22
93.113.47.0/24 maxlen: 24
93.115.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:bc:a2:8a:9b:00:56:65:1a:31:0f:4f:5a:39:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 18:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44b093adfd78582e0e561beb628c4926f47836f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5f:21:0a:20:52:e2:b9:ec:ee:a1:34:14:a6:
96:4c:ef:d8:9a:53:af:eb:9e:21:a7:7e:93:bb:65:
e2:1a:fb:5c:ea:91:ce:67:7c:20:07:bc:9d:4f:7a:
20:42:81:5f:fd:14:28:60:21:93:9c:75:a7:76:bf:
a7:12:dc:f8:52:1c:f2:cd:d5:cc:c8:15:95:ca:ef:
33:0c:d2:b1:3f:b9:0e:8e:34:6d:df:93:bd:55:b5:
e6:b5:fb:7b:e4:3a:64:bd:e9:98:2b:d5:02:24:99:
98:ad:6b:55:6c:16:2e:0e:58:85:25:68:1c:59:b0:
2a:d6:c0:08:09:ac:08:41:6d:6b:60:e6:38:c9:7c:
26:78:79:6d:96:23:b4:5d:71:8c:62:f7:0c:57:d8:
d2:00:d4:a4:e6:29:45:02:8e:07:39:95:84:0a:10:
f2:ec:be:d7:3d:17:58:92:b6:db:bc:5e:aa:06:c3:
82:44:bb:d5:74:c0:e0:17:68:85:65:c7:e2:d1:3d:
7e:a7:86:2a:16:1b:98:e6:29:75:ce:4d:af:5f:5c:
b8:a3:84:ca:c2:92:6f:3c:bd:2b:78:8a:09:41:f7:
35:ab:9b:e0:8a:13:c2:61:dd:fa:af:a8:a5:b1:31:
a3:f5:92:b2:58:ca:60:44:79:65:4e:32:16:9a:02:
27:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B0:93:AD:FD:78:58:2E:0E:56:1B:EB:62:8C:49:26:F4:78:36:F2
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/RLCTrf14WC4OVhvrYoxJJvR4NvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.196.0/22
92.114.111.0/24
93.113.47.0/24
93.115.34.0/24
185.202.84.0/22
Signature Algorithm: sha256WithRSAEncryption
50:10:dc:20:b9:df:55:e0:e2:d4:6b:1b:b8:46:8a:62:50:21:
7f:82:64:ce:16:a4:5b:8f:78:84:80:4f:6d:67:ab:0b:39:ca:
17:25:66:a9:d4:7b:9e:6c:64:49:78:25:a4:b0:ac:12:b2:62:
57:c6:18:7b:da:10:a2:6a:f3:29:88:7e:f5:92:a4:48:89:dc:
ec:03:e0:25:db:00:09:89:de:0c:3d:86:48:d5:26:b8:bc:91:
56:f9:86:c3:e5:8f:51:28:f6:5a:ef:bd:36:82:07:45:85:ce:
c1:22:ed:5b:b7:38:27:22:0a:c0:38:4a:d0:2b:24:c8:ec:e5:
93:19:26:af:b9:bc:d0:40:20:31:9b:95:8a:40:c2:51:f7:4e:
57:52:a9:85:93:04:26:54:4f:4b:5f:e4:17:27:2a:bf:ca:4f:
82:be:32:19:32:da:16:3c:45:39:c8:d7:13:59:33:70:e8:94:
fc:a6:d1:3a:41:18:e0:c6:07:4a:ac:0f:40:7d:cf:24:ad:78:
10:0f:e7:61:bc:65:43:08:57:18:47:ec:69:b4:de:89:e8:4c:
fb:da:1f:ad:11:9b:92:00:bc:57:b5:f9:0b:7f:19:1e:c0:0a:
78:19:7f:94:05:a3:cb:1a:e3:cb:1e:4d:83:ea:d8:df:0c:43:
bf:89:43:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:38 2024 by rpki-client on console-ams.rpki-client.org