Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/q7d76WWCGBa8NcY3tCiko8QHGRs.roa
File: q7d76WWCGBa8NcY3tCiko8QHGRs.roa (raw, json)
Hash identifier: CCrqiJRKFMDGs9lelgVZuideYWhyykHne3wrkzI484o=
Subject key identifier: AB:B7:7B:E9:65:82:18:16:BC:35:C6:37:B4:28:A4:A3:C4:07:19:1B
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01894941BC108879670D1D783098F57C35A2
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/q7d76WWCGBa8NcY3tCiko8QHGRs.roa
Signing time: Wed 12 Jul 2023 08:39:51 +0000
ROA not before: Wed 12 Jul 2023 08:39:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 188.209.128.0/22 maxlen: 22
194.15.99.0/24 maxlen: 24
45.65.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Jul 2023 13:13:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:49:41:bc:10:88:79:67:0d:1d:78:30:98:f5:7c:35:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jul 12 08:39:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abb77be965821816bc35c637b428a4a3c407191b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f5:6e:28:32:89:1a:95:f9:ff:fd:25:4d:56:
41:7b:44:f0:42:d8:af:67:8b:35:c7:10:47:19:a2:
ea:7b:44:58:3b:2d:de:f5:18:c0:37:62:75:da:5f:
ff:51:de:dd:84:dc:21:e6:f5:1f:09:ac:d0:aa:ba:
e5:dc:33:9d:d5:ff:73:95:a2:05:19:c9:a0:d9:65:
a8:d3:f2:c7:4d:20:ec:17:0e:ab:4f:25:f2:d7:8d:
d7:5a:a7:45:1e:d6:b6:6c:d0:8c:bd:2f:0e:40:8d:
63:a3:9b:70:bc:12:c4:98:e3:59:63:d5:0e:15:5c:
33:7f:c6:64:36:26:bc:ad:94:5e:dc:71:d1:ea:3a:
3a:99:12:61:64:54:9f:97:88:80:18:78:3a:84:bd:
d0:41:fc:c1:2f:33:da:3a:98:b6:0b:7a:83:b2:78:
cd:bd:33:8f:1e:c7:75:60:42:87:09:85:1a:b0:0a:
93:14:7e:91:ae:16:cb:89:87:5f:c1:1d:c5:58:ca:
54:d5:81:7f:60:6f:47:bc:27:73:46:6a:31:f8:e0:
89:54:27:dc:0a:2e:ea:ae:bc:67:1e:f5:1f:e1:d2:
d6:7e:de:c5:a8:05:25:98:bb:53:41:21:a8:4d:32:
12:c5:77:af:07:a9:e4:8a:6b:75:57:01:28:66:6e:
b5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B7:7B:E9:65:82:18:16:BC:35:C6:37:B4:28:A4:A3:C4:07:19:1B
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/q7d76WWCGBa8NcY3tCiko8QHGRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.113.0/24
188.209.128.0/22
194.15.99.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:03:a7:63:c0:42:5f:74:c0:db:c4:ec:65:ee:3c:bd:6d:41:
66:f3:f7:81:1e:22:fc:f0:63:6c:94:41:69:31:e2:87:9b:99:
5e:bd:73:0e:51:97:1c:95:68:2b:49:69:76:b5:81:a2:57:52:
00:63:24:2e:9d:c9:6a:4f:55:b3:89:2e:2d:03:9b:d5:af:74:
bd:a8:b6:e9:94:8f:07:64:46:0d:3e:74:21:43:86:e8:6e:12:
3b:19:d8:e2:70:86:0a:bd:39:4c:85:e3:5b:54:a8:a9:1d:6e:
dc:56:5a:07:90:d3:72:3a:0c:8a:76:23:da:72:4d:b5:59:46:
cc:14:ce:c7:54:36:cc:af:77:40:bc:12:2d:b3:67:89:ff:6a:
3c:66:e3:52:ef:5e:98:df:b8:55:a5:31:2b:df:4f:1a:1d:e7:
b3:54:12:8c:71:49:c0:a2:4d:e8:af:e4:41:f4:a8:91:ac:99:
a8:fb:c2:e9:71:5a:10:7c:df:8a:cd:e1:93:02:1e:ce:39:7b:
a2:b6:98:30:84:5b:87:79:53:8b:fe:e3:fb:9c:d0:54:fd:75:
13:e7:94:7b:64:00:fb:6c:f7:9e:12:6b:52:02:20:5b:1f:d5:
f0:ae:79:30:af:df:84:93:5e:f3:ce:34:00:87:dc:66:46:f5:
69:16:ea:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:41 2024 by rpki-client on console-fra.rpki-client.org