Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/6NE6d4gpYiGfDEFc1nMAY4QbNEE.roa
File: 6NE6d4gpYiGfDEFc1nMAY4QbNEE.roa (raw, json)
Hash identifier: Jq2OKHwLTQugrVyCJiWAO0d0LEEMO3zyTBS1gQuAGmA=
Subject key identifier: E8:D1:3A:77:88:29:62:21:9F:0C:41:5C:D6:73:00:63:84:1B:34:41
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0185700292F7EE5F6D862F0F61620F72E375
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/6NE6d4gpYiGfDEFc1nMAY4QbNEE.roa
Signing time: Mon 02 Jan 2023 01:04:54 +0000
ROA not before: Mon 02 Jan 2023 01:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206375
IP address blocks: 188.132.132.0/24 maxlen: 24
188.132.139.0/24 maxlen: 24
188.132.138.0/24 maxlen: 24
188.132.136.0/24 maxlen: 24
188.132.137.0/24 maxlen: 24
188.132.133.0/24 maxlen: 24
188.132.145.0/24 maxlen: 24
188.132.143.0/24 maxlen: 24
188.132.144.0/24 maxlen: 24
188.132.140.0/24 maxlen: 24
78.135.94.0/24 maxlen: 24
78.135.95.0/24 maxlen: 24
188.132.247.0/24 maxlen: 24
188.132.248.0/24 maxlen: 24
188.132.162.0/24 maxlen: 24
78.135.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:92:f7:ee:5f:6d:86:2f:0f:61:62:0f:72:e3:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 01:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8d13a77882962219f0c415cd6730063841b3441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c6:5f:93:5f:4c:9e:37:2a:8c:89:2c:6e:7b:
68:22:28:87:13:40:db:59:04:48:05:0c:e4:23:40:
d4:e9:e4:85:1a:8f:a1:e7:90:8b:5d:a2:5d:41:4a:
19:64:6a:cd:a5:d4:35:85:6e:5a:ab:f2:6d:21:82:
81:c0:6e:ed:c9:72:ca:42:e5:fa:1d:d2:01:a2:75:
35:ab:a3:35:98:5f:09:d0:a5:59:a4:1f:2f:5b:fc:
5b:3a:82:0c:c6:53:8a:31:ef:90:46:f7:2f:fb:84:
7a:a5:e8:7c:ad:33:b3:62:04:46:b2:22:c2:cf:4d:
ae:c7:2c:c1:40:7d:d2:ea:cc:d3:63:c5:4f:77:e5:
cb:fa:26:c0:11:8f:85:63:51:fc:3d:f0:7a:5b:22:
85:9b:00:72:75:a5:5a:15:51:31:66:34:80:2b:3c:
a9:81:6b:56:7b:2a:99:46:36:55:de:30:e3:7c:29:
44:71:eb:c8:f9:3f:a6:2b:b6:92:0a:05:42:e1:0a:
4f:87:32:46:cb:5c:42:25:4a:91:bc:ee:ac:9f:51:
66:af:f7:bc:25:69:b5:2a:1a:71:86:b9:48:8a:6e:
8a:d2:4a:41:32:be:e2:44:14:20:86:da:32:00:09:
88:fe:79:68:58:90:e3:01:4d:04:7f:b3:7b:91:ad:
34:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D1:3A:77:88:29:62:21:9F:0C:41:5C:D6:73:00:63:84:1B:34:41
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/6NE6d4gpYiGfDEFc1nMAY4QbNEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.91.0/24
78.135.94.0/23
188.132.132.0/23
188.132.136.0-188.132.140.255
188.132.143.0-188.132.145.255
188.132.162.0/24
188.132.247.0-188.132.248.255
Signature Algorithm: sha256WithRSAEncryption
80:ab:b1:26:06:df:ce:24:11:cd:ac:c6:f5:fa:1d:38:81:24:
3e:d1:60:e1:8b:8e:ff:bf:2f:c8:e0:1b:8f:c8:f9:a4:ad:95:
13:ea:d6:f0:5b:aa:9e:2c:6f:d0:2a:8f:0f:71:91:cc:dc:1d:
d9:7b:c1:31:c3:db:49:1c:f5:2f:7a:db:b3:41:b2:a2:47:89:
4b:06:33:64:5b:9a:b7:5f:04:4c:56:6f:c2:5b:aa:87:b7:d0:
33:9d:e0:12:2f:1e:f5:a4:08:51:7f:3b:37:c5:44:cd:22:5a:
a5:dc:99:20:a1:c6:ce:dd:e2:76:bf:bf:e9:5c:51:0d:ca:f7:
88:61:96:c7:5b:fa:1d:fd:aa:fb:e7:8f:fe:bb:3a:b6:92:f0:
61:3a:ad:ef:99:3a:f9:97:94:82:ed:42:a1:76:bc:50:e8:df:
0d:1b:e8:5b:b0:33:e1:2c:c4:74:71:f9:d9:02:1c:06:e7:4d:
74:b1:13:1a:bb:56:89:2c:9b:e2:5a:e0:1e:1c:e2:fd:e3:53:
70:2e:96:17:ca:92:89:2b:fe:40:99:5b:4e:2b:92:85:69:af:
48:49:93:4d:51:0b:42:4c:c1:ab:4a:a0:1a:0e:5a:ed:7a:6f:
36:d0:7a:a2:4d:a6:e5:36:3c:1b:7b:e9:33:39:60:d1:8a:a6:
ba:51:7b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:43 2024 by rpki-client on console-fra.rpki-client.org