Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/e_DCC2kVNGXnQ971gzhFo5VGukA.roa
File: e_DCC2kVNGXnQ971gzhFo5VGukA.roa (raw, json)
Hash identifier: dm5sqcGH+xs1oeRo/5qz7YwFibsMvdq/1/EvsugdgGE=
Subject key identifier: 7B:F0:C2:0B:69:15:34:65:E7:43:DE:F5:83:38:45:A3:95:46:BA:40
Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2
Certificate serial: 01856FD539AFE996929D33FD5472A4BE4FF1
Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/e_DCC2kVNGXnQ971gzhFo5VGukA.roa
Signing time: Mon 02 Jan 2023 00:15:23 +0000
ROA not before: Mon 02 Jan 2023 00:15:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42708
IP address blocks: 194.76.224.0/24 maxlen: 24
91.242.219.0/24 maxlen: 24
109.230.199.0/24 maxlen: 24
2a0b:7140:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:39:af:e9:96:92:9d:33:fd:54:72:a4:be:4f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2
Validity
Not Before: Jan 2 00:15:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bf0c20b69153465e743def5833845a39546ba40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:12:73:32:84:f6:1a:e2:31:6a:ab:2c:1b:44:
75:cc:f7:85:d1:12:80:fe:b4:c6:5e:10:38:3f:cf:
9a:03:76:af:e5:d2:8f:ac:61:e4:fe:b8:db:ca:e8:
55:e2:b4:09:c8:3f:87:32:f6:5a:14:00:30:1e:dc:
50:32:b5:da:ad:c4:75:22:44:01:a3:d6:f1:1c:dc:
d9:d3:f3:bc:53:a4:e5:d5:53:0f:f7:ee:71:0c:d5:
13:dc:a3:06:b9:6a:ec:6a:bc:ec:86:3e:97:b4:16:
90:c2:bb:7c:65:5f:83:f8:12:0f:9d:29:d1:00:b3:
5d:e8:db:91:2a:e3:c2:83:1b:e5:77:f5:12:07:9f:
3b:96:98:c5:a8:6c:41:ce:22:ab:a3:b9:8e:96:fc:
f2:43:72:cc:43:fe:6f:a3:1d:a4:bf:ce:30:bd:67:
2a:29:a1:16:81:a9:37:5f:06:b8:bd:58:42:b1:f6:
4c:60:aa:75:ba:e9:e1:bb:68:9e:ad:4b:6b:e4:7b:
7c:87:c5:b4:d9:42:6d:9a:28:3a:ba:62:30:d6:a9:
76:1e:88:5b:ce:e9:77:80:bc:18:bb:a8:fd:dc:c8:
09:64:d7:1a:7d:b0:0c:4e:5c:d6:33:a4:a2:23:18:
6d:6a:2c:56:36:4f:07:72:0d:89:15:f9:dd:54:de:
d7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F0:C2:0B:69:15:34:65:E7:43:DE:F5:83:38:45:A3:95:46:BA:40
X509v3 Authority Key Identifier:
keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/e_DCC2kVNGXnQ971gzhFo5VGukA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.219.0/24
109.230.199.0/24
194.76.224.0/24
IPv6:
2a0b:7140:3::/48
Signature Algorithm: sha256WithRSAEncryption
6b:78:2c:ac:ba:e8:0d:85:17:68:92:02:7b:70:08:81:b9:2d:
08:2b:f9:b4:0c:9d:39:41:aa:4a:23:ea:7b:b7:af:8c:48:f6:
5b:93:57:0a:73:16:0d:db:6e:30:c2:f5:cb:5d:74:10:27:1d:
5a:00:d5:f8:ef:35:a4:38:6a:60:dc:c5:b8:90:80:10:f8:aa:
62:90:16:03:3d:a5:39:7f:f6:fc:c2:e2:ba:0c:23:cf:f0:67:
e2:3c:40:d2:91:40:8a:39:a8:4f:3a:aa:b1:85:1b:8b:c2:92:
7d:e1:90:f0:b8:be:6d:42:ee:da:88:26:06:02:62:0b:f6:62:
d6:78:10:49:f9:f8:88:5f:18:83:3d:60:88:d9:4f:37:f2:64:
3c:e5:2f:f1:ba:50:fd:dc:c4:a7:cb:cb:1f:98:ba:bb:c2:19:
df:c5:68:6a:c6:fa:af:89:a7:b1:39:1a:70:06:12:5d:3f:ea:
c6:2f:ec:d0:bc:c9:24:c2:4a:38:2d:d4:90:81:00:4f:de:43:
88:e2:7c:d5:20:fb:08:1d:98:2a:a7:27:8b:c0:a9:61:ca:ef:
4d:0d:7e:fb:5d:25:b4:5c:71:32:53:f0:9e:3a:03:09:15:ea:
ff:e3:47:37:f0:fc:96:34:43:24:95:fb:e0:32:83:ec:61:ab:
f8:7e:1d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:02 2024 by rpki-client on console-fra.rpki-client.org