Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/qCbL-Y_UUm2jYotMJ7NUFoc-KBo.roa
File: qCbL-Y_UUm2jYotMJ7NUFoc-KBo.roa (raw, json)
Hash identifier: UZQC61q+9J//XYBOyAeUTniyCPsD/ljAlh2XPgOT1jQ=
Subject key identifier: A8:26:CB:F9:8F:D4:52:6D:A3:62:8B:4C:27:B3:54:16:87:3E:28:1A
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018E31DE22ACB12B2FD2C9A73A0F0A23E043
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/qCbL-Y_UUm2jYotMJ7NUFoc-KBo.roa
Signing time: Tue 12 Mar 2024 08:53:45 +0000
ROA not before: Tue 12 Mar 2024 08:53:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 93.186.69.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
188.255.128.0/24 maxlen: 24
188.255.200.0/24 maxlen: 24
212.69.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 09:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:31:de:22:ac:b1:2b:2f:d2:c9:a7:3a:0f:0a:23:e0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 12 08:53:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a826cbf98fd4526da3628b4c27b35416873e281a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:92:04:2c:21:dd:7f:b7:13:fd:e5:23:9f:b5:
80:0a:71:7a:6d:c0:67:29:ad:9f:23:0d:d4:1f:43:
c4:bd:59:04:10:22:9a:e5:d2:a9:8c:b2:83:e8:3d:
1d:86:dd:81:a8:82:2b:d3:54:f2:a7:fb:28:ab:19:
a5:12:94:92:42:29:e6:7e:6b:0c:1f:54:ec:a3:46:
ed:cc:21:af:a6:9a:41:77:8a:8f:03:11:0c:f5:af:
c9:bd:fa:0f:40:2a:3d:44:7a:3b:f5:ca:9d:83:87:
40:fd:82:aa:57:45:06:23:96:d7:e8:66:e5:db:ed:
ef:d6:de:64:86:2a:8a:60:13:a0:55:76:db:14:c7:
fa:82:3f:98:48:ee:91:b7:c0:82:0b:88:9a:ba:c3:
70:d6:80:53:32:9b:ea:4c:c6:fc:5c:2d:69:ab:75:
34:4a:15:1b:74:e7:7b:ef:df:40:9b:1e:9a:c7:b8:
78:59:ff:9f:c7:dc:c5:2d:70:d1:62:37:ce:8d:72:
6e:f7:62:6f:a0:7a:81:f0:20:ac:19:bf:29:ce:f8:
70:f4:d4:14:db:61:a4:a4:9b:08:6f:63:38:50:59:
b5:fd:54:55:d9:8c:cf:ad:5a:25:72:1b:3e:63:f3:
5a:26:10:d8:50:aa:5f:0d:98:40:92:a0:52:8c:17:
8c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:26:CB:F9:8F:D4:52:6D:A3:62:8B:4C:27:B3:54:16:87:3E:28:1A
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/qCbL-Y_UUm2jYotMJ7NUFoc-KBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.186.69.0/24
109.121.43.0/24
185.47.91.0/24
188.255.128.0/24
188.255.200.0/24
212.69.14.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:23:5d:ca:b4:ef:02:f7:39:ae:ab:ff:98:eb:69:73:80:2e:
5c:a8:7a:49:7f:f4:76:f8:ed:6b:ff:05:2c:64:00:ec:06:e7:
78:54:24:05:cf:0d:27:23:aa:86:16:72:f7:bf:ce:e3:db:3e:
70:b4:fb:83:50:25:cb:76:1e:1f:49:d5:33:0a:60:39:18:47:
bb:00:bf:33:33:13:10:21:fb:64:c0:6f:a5:6b:9a:dd:b7:77:
90:6c:d7:8a:95:fc:10:fd:df:be:8a:44:ab:37:4f:d9:b6:a5:
b9:46:4b:9a:90:19:2e:d2:82:3a:40:f2:81:15:bb:28:8f:60:
19:21:67:4e:3d:06:9a:d8:84:18:2e:ba:66:d8:c7:59:db:13:
d1:41:dd:ec:88:fc:75:07:03:06:ad:eb:03:0c:c3:a1:f1:ef:
95:c5:cd:74:e2:a2:7e:66:7f:93:c8:38:f4:3c:2c:ad:cc:02:
28:e7:2c:91:bf:e9:81:a5:1f:42:bd:3c:14:02:2f:9c:02:b9:
0c:e9:f2:6c:a9:db:8c:eb:75:47:bd:4d:e0:80:b9:c3:cc:cb:
ab:7c:41:e7:05:32:bb:cd:81:96:db:7e:8d:b2:e6:81:9d:96:
e8:4a:ce:ab:40:ff:f4:fa:64:da:33:4a:22:5a:3c:79:1e:f0:
4e:1f:1e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 11:20:15 2024 by rpki-client on console-fra.rpki-client.org