Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/it4lpDpPDs_La4-7uk3HgjhgkNw.roa
File: it4lpDpPDs_La4-7uk3HgjhgkNw.roa (raw, json)
Hash identifier: OiuAqWsKWjZJcM1/ookmMGd8wpv6dr31oZ7BN8kY0ZY=
Subject key identifier: 8A:DE:25:A4:3A:4F:0E:CF:CB:6B:8F:BB:BA:4D:C7:82:38:60:90:DC
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018571D7DD331D0975122A949389690734D9
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/it4lpDpPDs_La4-7uk3HgjhgkNw.roa
Signing time: Mon 02 Jan 2023 09:37:30 +0000
ROA not before: Mon 02 Jan 2023 09:37:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200923
IP address blocks: 188.255.218.0/24 maxlen: 24
93.186.74.0/23 maxlen: 23
93.186.76.0/24 maxlen: 24
93.186.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:dd:33:1d:09:75:12:2a:94:93:89:69:07:34:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 09:37:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ade25a43a4f0ecfcb6b8fbbba4dc782386090dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1e:cb:ab:12:3f:43:b8:f8:47:46:b7:f2:d4:
e2:0b:93:a2:f5:a3:6f:56:95:42:68:97:84:4c:20:
88:2f:77:a1:bc:ee:ac:8c:cb:6e:31:35:9f:55:30:
00:bb:d9:61:ce:02:c9:57:bc:5d:14:66:a5:3e:b5:
7e:bd:b2:65:94:91:8e:33:76:e2:04:da:1c:d8:5a:
3a:4e:3d:b2:37:6a:a2:d5:1a:2c:35:bf:dc:e4:5a:
ed:a3:8a:05:ae:ab:2d:a6:c5:16:5f:40:cf:9e:db:
e1:a0:08:c5:0d:46:8f:66:dd:68:73:48:e1:16:3e:
c9:f4:ff:76:81:a8:4f:e9:82:c4:91:9e:db:ff:de:
cb:6b:b9:8e:d0:6d:bc:78:e7:43:c8:70:da:b4:e8:
8d:d2:e6:62:9d:3a:3f:98:e3:df:54:f3:d3:74:4f:
a4:38:e6:f0:bb:1f:b3:20:18:ac:55:5a:12:1f:f3:
9a:43:ee:54:64:d7:30:5d:64:f2:8a:37:49:08:9f:
8e:82:65:f0:e8:da:06:a0:a7:e5:a1:b2:5d:d2:c0:
75:52:0d:f5:00:68:c8:81:ec:58:fb:c1:90:fc:12:
f8:1e:8e:94:32:1d:ee:90:bc:d7:21:41:cb:36:94:
2f:88:26:25:39:4f:a5:78:f0:8a:e8:c5:59:32:4b:
fe:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DE:25:A4:3A:4F:0E:CF:CB:6B:8F:BB:BA:4D:C7:82:38:60:90:DC
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/it4lpDpPDs_La4-7uk3HgjhgkNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.186.74.0-93.186.76.255
93.186.78.0/24
188.255.218.0/24
Signature Algorithm: sha256WithRSAEncryption
69:07:43:52:9c:fa:db:51:3b:2f:bb:86:0b:00:e6:8b:43:97:
6b:57:3e:9b:8e:b3:39:57:25:66:fd:c7:35:ef:57:82:c8:b1:
79:d3:b5:4b:f5:48:8a:bf:4b:7c:89:77:71:d0:90:09:e5:78:
fa:39:f3:7f:8c:09:e1:72:ff:de:97:2f:91:ff:55:b2:a4:8f:
64:52:94:c0:b9:02:f2:98:ec:c5:84:25:c0:31:04:e7:f1:6e:
be:66:eb:70:05:9d:a5:d7:2a:b7:f5:ee:ba:12:e9:e1:62:7a:
5f:26:20:ea:12:dd:13:ec:57:4e:9c:5a:da:c5:b2:ba:e9:f3:
1a:00:d6:6f:db:b1:29:e5:ff:d4:1d:bd:d9:98:9a:08:7c:72:
d1:13:89:01:b3:b8:44:e1:70:bc:d9:17:3a:04:f2:2a:21:0e:
43:38:e7:49:67:2d:c5:28:f0:70:ac:33:dd:be:85:62:7a:8a:
46:18:26:82:a7:25:57:84:7a:d2:8f:2a:7c:52:40:ed:94:ae:
1f:62:14:b9:f7:ab:fb:9f:9f:dc:8d:08:de:80:fb:5d:65:00:
97:a0:ed:47:37:22:3a:63:e8:5b:11:9f:75:a9:7a:34:4f:4c:
ec:c7:dd:3d:f7:ef:8f:80:ed:da:35:76:a0:55:d7:6e:d6:b6:
27:c0:d6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org