Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/PS9528pu9IQC4nyxelynKjvPLqc.roa
File: PS9528pu9IQC4nyxelynKjvPLqc.roa (raw, json)
Hash identifier: 7YoKLQZr+403ThwSLlyO20tIXGl2mnCmh/SBY5LBoBQ=
Subject key identifier: 3D:2F:79:DB:CA:6E:F4:84:02:E2:7C:B1:7A:5C:A7:2A:3B:CF:2E:A7
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018E65AAA18DA1A465F9A9AAE20E1A2446B7
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/PS9528pu9IQC4nyxelynKjvPLqc.roa
Signing time: Fri 22 Mar 2024 10:17:45 +0000
ROA not before: Fri 22 Mar 2024 10:17:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 93.186.69.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
178.253.235.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
188.255.128.0/24 maxlen: 24
188.255.200.0/24 maxlen: 24
194.28.128.0/24 maxlen: 24
212.69.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:65:aa:a1:8d:a1:a4:65:f9:a9:aa:e2:0e:1a:24:46:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 22 10:17:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d2f79dbca6ef48402e27cb17a5ca72a3bcf2ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2d:30:dd:06:ff:69:15:ea:4c:ae:81:70:b0:
f9:50:d6:aa:2d:b9:7f:7b:2a:ec:d8:67:7d:c1:77:
4d:9f:54:da:8e:1f:45:63:10:75:98:f1:ee:19:52:
f2:bc:cd:d4:3e:86:1c:e9:e7:c3:30:0b:5e:92:7f:
b6:fa:b3:89:73:e0:d2:d6:5a:61:7c:98:e9:f2:b7:
6e:f0:69:5a:6e:1f:a8:b5:c4:f9:e5:04:cd:01:a5:
0b:07:42:be:9d:35:93:e9:6d:d3:54:bd:7f:69:d2:
1b:ed:6d:95:13:06:4c:2e:9d:f9:a8:ae:45:e3:62:
80:e2:45:44:96:02:67:e4:5d:e0:bb:83:61:03:65:
6c:20:be:cd:27:8a:59:fe:6e:7f:6d:2a:12:ac:7e:
95:15:92:85:d9:b3:e6:66:9c:e2:1f:65:ae:01:fa:
a3:1c:1f:9c:94:b2:7f:4d:7a:ae:69:35:61:6d:e6:
5c:d6:d1:44:a7:01:c6:25:6f:0a:eb:36:c2:5f:df:
05:a3:67:c6:15:ed:62:d9:ea:3e:13:25:4d:b8:52:
ce:55:d7:d7:f6:96:03:97:ca:2c:9e:e4:74:ed:41:
cc:a2:fb:6e:22:8c:78:f1:77:05:bb:6a:76:20:96:
47:26:35:38:0f:36:29:65:cb:d9:81:83:ce:84:48:
dc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2F:79:DB:CA:6E:F4:84:02:E2:7C:B1:7A:5C:A7:2A:3B:CF:2E:A7
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/PS9528pu9IQC4nyxelynKjvPLqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.186.69.0/24
109.121.43.0/24
178.253.235.0/24
185.47.91.0/24
188.255.128.0/24
188.255.200.0/24
194.28.128.0/24
212.69.14.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:0c:1e:36:98:dc:d5:fd:6d:f4:59:5f:ab:bb:b9:63:6e:85:
01:18:c0:b9:ba:82:9b:12:be:a8:28:d4:13:b4:6f:fc:72:8a:
ba:eb:c7:e9:d5:2b:83:3f:71:52:6a:ff:72:55:6b:cb:f1:1a:
a4:89:16:24:49:0e:67:95:64:87:69:42:a6:a3:b0:a0:8a:2f:
f5:a2:66:ae:77:ff:15:14:9b:f0:b7:35:0e:37:ee:99:17:f2:
ff:04:b8:5f:9b:e6:97:c1:12:4c:67:60:d4:64:0c:ac:f3:1a:
7d:6d:f8:7c:2d:30:ec:1d:08:bb:d9:31:d6:21:1f:5e:e7:bb:
f0:2c:28:c1:81:b5:48:7f:cd:40:6a:ad:e0:74:27:0c:e7:58:
e2:b8:7f:cb:65:fb:10:5c:33:98:77:fa:7c:3f:c5:6d:63:a5:
85:0a:83:8f:f8:d2:ba:7d:df:0a:94:dc:b3:58:e7:ba:02:27:
cd:95:68:c6:f0:5a:c9:fa:98:f1:2c:41:9e:00:26:f5:12:91:
2f:e7:14:ac:77:bb:c5:3b:34:6a:e8:4d:fe:f4:18:e8:1a:33:
ae:44:7d:13:eb:01:eb:19:48:76:22:01:b6:fd:91:47:9c:31:
b0:ca:66:8a:64:ee:d7:b6:fb:05:61:a1:f4:fd:a4:e6:fc:70:
3e:4d:36:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org