Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/pFnn6bwg1ZSWPItG9HcnxSFO4WM.roa
File: pFnn6bwg1ZSWPItG9HcnxSFO4WM.roa (raw, json)
Hash identifier: Iol/kTqNxEmcDPVqx6dtTRkz065mJajuxSthjHyGclo=
Subject key identifier: A4:59:E7:E9:BC:20:D5:94:96:3C:8B:46:F4:77:27:C5:21:4E:E1:63
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018E7A1ADF48D42704FDE163D68B2CA794E5
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/pFnn6bwg1ZSWPItG9HcnxSFO4WM.roa
Signing time: Tue 26 Mar 2024 09:32:45 +0000
ROA not before: Tue 26 Mar 2024 09:32:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 93.186.69.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
188.255.128.0/24 maxlen: 24
188.255.200.0/24 maxlen: 24
212.69.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Apr 2024 17:58:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7a:1a:df:48:d4:27:04:fd:e1:63:d6:8b:2c:a7:94:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 26 09:32:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a459e7e9bc20d594963c8b46f47727c5214ee163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2c:0f:1a:94:c8:06:4d:df:85:73:27:02:63:
10:f7:dd:b4:b1:24:01:3f:66:af:e8:1d:38:78:76:
fa:95:e6:1e:32:18:e3:02:6a:b3:77:1a:8a:dd:52:
e0:aa:f7:31:0a:3f:d5:4e:51:6f:f5:6f:b5:5b:d1:
05:f4:92:7c:7b:b0:56:d4:b1:b0:52:4c:fa:4a:ea:
1e:8b:b6:2b:de:71:52:5b:ce:30:6b:7e:e0:2e:91:
de:b8:1e:6d:f0:32:ca:db:5e:d0:da:90:e5:b5:7a:
7e:58:d8:df:7a:a3:ae:ee:20:f5:b5:7d:93:1b:0a:
bb:b1:aa:23:12:10:a1:b6:13:8c:0d:8b:37:18:24:
3d:58:42:f8:aa:24:69:70:d9:2a:12:00:95:50:15:
c7:39:03:5b:3e:cc:cc:0c:7e:ea:94:0f:84:4f:aa:
f3:0d:6b:2b:88:ad:45:12:42:32:f2:fb:1d:35:81:
41:29:f5:9e:49:46:27:05:3f:bc:2b:ff:81:bc:05:
35:d1:6a:b3:08:67:cd:d2:5e:fc:2f:b1:fe:93:06:
a2:f0:08:af:21:18:fa:bd:79:69:c1:6b:98:f5:42:
16:a8:d3:84:5b:6d:f8:b1:4a:9e:34:f8:df:91:d4:
a3:b7:d4:91:75:3c:a7:f4:11:0b:de:14:7d:76:34:
1f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:59:E7:E9:BC:20:D5:94:96:3C:8B:46:F4:77:27:C5:21:4E:E1:63
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/pFnn6bwg1ZSWPItG9HcnxSFO4WM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.186.69.0/24
109.121.43.0/24
185.47.91.0/24
188.255.128.0/24
188.255.200.0/24
212.69.14.0/24
Signature Algorithm: sha256WithRSAEncryption
71:73:2d:f8:86:36:af:08:b6:76:8a:5c:b4:7c:37:0f:2a:b9:
e9:4c:26:34:70:a1:18:7b:e3:d9:aa:82:cd:a2:e0:eb:eb:f9:
4d:41:24:2b:29:12:cf:6c:45:73:90:3d:b3:41:fa:c5:33:4b:
1c:39:0d:0e:4d:87:2f:13:6a:68:e3:f7:9c:1f:a1:db:dd:03:
e5:bd:68:c8:d3:97:49:66:76:de:f9:50:c9:eb:22:50:83:a0:
35:4f:a9:f5:20:f9:e7:a1:b0:eb:ac:30:c3:1b:9c:c2:f0:4a:
04:03:39:d3:86:fc:43:c3:e9:49:21:fe:7c:8b:ae:60:a0:52:
c4:2d:31:96:3b:15:c2:98:db:38:63:10:22:21:5a:08:f6:d1:
f6:1b:94:2a:fa:9e:eb:85:af:4f:f1:ce:95:b5:94:de:51:a8:
cc:d0:64:5c:38:5e:1e:33:2f:84:f5:bb:90:eb:c2:15:3e:e4:
74:81:5b:cd:5e:1f:85:fa:58:32:47:c2:0b:8d:bb:37:86:f5:
55:e8:b9:65:60:ff:e1:11:8d:f7:a7:cc:97:30:35:1d:df:6c:
b7:28:b4:26:09:10:37:6d:1b:40:ad:ca:00:38:38:a4:7f:2a:
5a:3e:62:8b:15:ca:5f:0f:cb:a7:ca:d6:ae:c0:ed:07:c8:ba:
de:c9:0b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 1 18:52:49 2024 by rpki-client on console-fra.rpki-client.org