Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Eqq-az8gMYw8LG6WeqIh-S28o0I.roa
File: Eqq-az8gMYw8LG6WeqIh-S28o0I.roa (raw, json)
Hash identifier: FDL3unCa28FE/UGCzEU4uqjD99QxXkGlcp7fLKR+Fk0=
Subject key identifier: 12:AA:BE:6B:3F:20:31:8C:3C:2C:6E:96:7A:A2:21:F9:2D:BC:A3:42
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018DC740B9F74ECB6E14DCAC016699E2F175
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Eqq-az8gMYw8LG6WeqIh-S28o0I.roa
Signing time: Tue 20 Feb 2024 16:02:04 +0000
ROA not before: Tue 20 Feb 2024 16:02:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48031
IP address blocks: 91.246.48.0/24 maxlen: 24
91.247.166.0/24 maxlen: 24
91.247.173.0/24 maxlen: 24
194.105.60.0/24 maxlen: 24
194.107.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Feb 2024 15:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c7:40:b9:f7:4e:cb:6e:14:dc:ac:01:66:99:e2:f1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 20 16:02:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12aabe6b3f20318c3c2c6e967aa221f92dbca342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9a:ea:14:87:a6:37:1e:31:37:c1:b6:6b:42:
d2:d5:b6:68:54:9c:7c:ea:5f:0b:8d:27:34:27:50:
f1:97:5c:eb:81:36:fe:a7:3d:94:d7:4c:65:f1:66:
d2:82:65:8b:47:10:80:24:31:78:ec:2f:7b:3b:ce:
fe:52:69:f1:1e:92:17:96:73:1e:25:80:32:b4:c0:
5e:85:06:b2:77:bf:de:ef:d3:67:0b:dc:f8:e1:81:
07:bd:3a:93:a8:09:3e:6e:99:75:ef:e0:4d:f4:15:
b3:d3:75:3d:fa:6c:cb:2c:73:0c:29:3e:8c:37:8e:
8b:6c:30:b3:ae:08:1a:21:c1:df:2d:e8:14:0b:05:
af:0b:d9:f7:43:74:28:d1:b1:cb:5a:0b:73:9c:bc:
fa:d6:7a:10:05:f9:e8:b6:69:2c:84:27:b0:a2:60:
7c:35:54:06:fa:28:73:98:6e:15:82:c6:52:ad:83:
bd:ab:a4:46:af:a9:ff:c5:41:79:c2:f9:f7:d0:77:
7a:4d:14:e7:4e:b0:b2:4e:ec:14:05:03:1e:c2:11:
bd:f9:31:4f:55:55:31:a4:50:5e:0d:8c:f6:16:a1:
3e:20:ae:4a:69:bf:31:cf:74:2d:4a:01:ca:ff:0e:
bd:7d:de:a1:a5:59:a3:b5:2d:d6:ca:dc:56:e8:94:
3b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AA:BE:6B:3F:20:31:8C:3C:2C:6E:96:7A:A2:21:F9:2D:BC:A3:42
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Eqq-az8gMYw8LG6WeqIh-S28o0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.48.0/24
91.247.166.0/24
91.247.173.0/24
194.105.60.0/24
194.107.92.0/24
Signature Algorithm: sha256WithRSAEncryption
99:28:27:12:9e:6c:75:21:4f:5a:d8:cd:9d:93:f8:36:2b:ce:
85:ae:a7:42:ca:1b:3c:46:f0:32:47:58:9c:87:d6:a5:6e:e2:
b7:5c:96:b6:e1:68:81:ab:41:89:90:94:0f:57:b7:a5:ca:a0:
40:43:cb:32:cf:85:93:8e:85:62:5c:45:7a:e4:6b:a4:77:28:
ed:e4:57:dc:4d:6c:12:94:b6:33:9b:0c:d0:b1:86:df:21:e0:
de:6a:89:1b:a2:64:a7:92:0a:d4:b9:a4:e4:d6:72:2b:f9:7a:
95:a6:d4:0a:27:20:d9:b7:d0:3c:89:40:8c:08:04:1e:55:a4:
c8:ab:06:39:da:5c:69:f9:2d:1c:60:54:c5:64:18:7a:63:80:
93:e2:2e:45:f7:ed:0e:d0:3d:71:4a:c0:64:7c:31:10:d6:5f:
3e:ae:be:3b:10:0f:fc:ec:9c:fb:f8:a7:a5:84:d9:48:98:33:
b1:6c:3c:82:c6:cd:7e:d8:bc:67:6c:c4:8f:98:e9:36:6b:a7:
d6:b7:ea:b6:f4:a5:8c:9c:37:06:ab:fb:8a:67:62:d4:5b:2f:
3d:9d:d8:d5:d0:71:cc:e1:36:4e:0a:08:29:b2:d5:ce:86:9c:
bc:52:7c:41:a2:d8:d7:72:f4:8d:cf:a9:71:02:d4:2c:96:98:
5d:44:38:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 21 19:42:57 2024 by rpki-client on console-fra.rpki-client.org