Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/9nEiv7B70VuIXboQ0fhbbZFmvtM.roa
File: 9nEiv7B70VuIXboQ0fhbbZFmvtM.roa (raw, json)
Hash identifier: GMkYp5obXXaSRJ0SSRVzzhURyk2Uxsi9NBEJjsyv2TY=
Subject key identifier: F6:71:22:BF:B0:7B:D1:5B:88:5D:BA:10:D1:F8:5B:6D:91:66:BE:D3
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01856C53CD315041AFDFFA24D7945102274B
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/9nEiv7B70VuIXboQ0fhbbZFmvtM.roa
Signing time: Sun 01 Jan 2023 07:55:09 +0000
ROA not before: Sun 01 Jan 2023 07:55:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47952
IP address blocks: 194.127.118.0/24 maxlen: 24
194.127.117.0/24 maxlen: 24
194.127.116.0/24 maxlen: 24
194.127.119.0/24 maxlen: 24
185.185.235.0/24 maxlen: 24
91.106.219.0/24 maxlen: 24
91.106.218.0/24 maxlen: 24
91.106.217.0/24 maxlen: 24
91.106.216.0/24 maxlen: 24
193.35.206.0/24 maxlen: 24
193.35.205.0/24 maxlen: 24
193.35.204.0/24 maxlen: 24
193.35.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:cd:31:50:41:af:df:fa:24:d7:94:51:02:27:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 1 07:55:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f67122bfb07bd15b885dba10d1f85b6d9166bed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3b:1b:6a:9e:f6:2a:51:c4:e9:a2:1f:38:6c:
b5:47:f9:12:43:1f:ba:1a:fd:32:a5:c0:71:09:37:
ee:cf:bc:87:4e:df:2b:fa:c6:6b:07:bf:51:d4:cc:
34:42:28:10:15:ed:86:68:fb:67:a0:14:f5:68:ce:
f8:cc:89:dd:2b:74:a3:31:6e:c6:36:f1:40:a6:bb:
48:73:84:d4:cb:3c:e8:fc:b0:68:00:c2:93:87:b0:
15:41:11:57:2a:ed:91:95:22:11:6d:a4:61:3e:26:
bc:6a:66:16:b7:88:00:a5:66:5c:4c:db:8a:47:8f:
37:53:99:0d:91:3a:66:25:77:43:0d:fc:a0:bc:49:
67:31:a4:dc:e7:bd:cf:63:f2:15:16:5e:2a:fe:da:
54:be:0f:6c:2c:ef:98:9b:57:c4:78:a7:f7:73:05:
c8:96:ef:a2:a9:f7:cf:df:d9:dc:19:67:7e:5d:65:
84:94:2a:a6:92:80:f7:18:af:48:5b:af:40:e1:9a:
ba:63:1d:06:db:46:f7:97:ba:84:cf:5a:e5:d1:f9:
10:19:6a:70:2d:0c:b8:5f:cf:27:d6:27:67:0b:8a:
64:82:e2:00:5f:48:77:2d:0c:2a:a0:62:7d:1c:bc:
a5:dd:4a:33:f2:c6:99:0c:bb:66:31:90:93:12:1f:
95:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:71:22:BF:B0:7B:D1:5B:88:5D:BA:10:D1:F8:5B:6D:91:66:BE:D3
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/9nEiv7B70VuIXboQ0fhbbZFmvtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.106.216.0/22
185.185.235.0/24
193.35.204.0/22
194.127.116.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:93:2b:8d:02:8a:23:38:55:0a:e1:11:4e:e0:fb:f9:ba:07:
eb:8c:b1:9e:23:cd:6f:84:44:85:61:34:b1:4a:0a:1d:ed:81:
50:1e:e5:49:72:50:16:f5:90:1c:3b:fc:7c:ca:83:8b:a8:47:
49:39:df:55:ce:2f:75:49:77:62:a8:93:1a:a2:ca:98:11:04:
e3:86:6f:48:5e:d7:8a:36:55:6d:b9:e2:3a:e8:27:1c:3c:82:
f7:4f:fa:2e:7f:19:91:37:34:bd:cc:10:fc:15:14:3c:70:52:
94:84:05:49:9c:00:76:bd:9e:a8:b6:8e:b2:45:4b:c3:79:50:
21:b4:2d:3a:f3:c9:64:93:a3:d5:65:01:53:a9:4c:92:0e:02:
6d:14:ff:38:b0:37:c1:5a:16:2c:f5:38:ab:20:8d:af:be:d9:
02:26:9f:fe:59:62:78:31:80:97:b7:0a:03:05:d4:84:15:8d:
99:98:52:6d:ee:e5:ce:dd:13:21:74:09:62:3d:ae:ed:b5:2f:
e1:ed:1b:bd:13:30:b6:0a:d0:a3:39:c8:4b:4b:48:f9:52:29:
8f:5f:01:9e:c7:32:9b:3c:de:ec:10:27:ce:0a:90:f3:17:4a:
d5:f0:36:b2:90:75:12:25:85:06:8e:23:9b:d8:b2:b4:89:ca:
0a:55:84:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:24 2024 by rpki-client on console-ams.rpki-client.org