Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/b5RllBUl6sgCBkcANpOzClxxrpU.roa
File: b5RllBUl6sgCBkcANpOzClxxrpU.roa (raw, json)
Hash identifier: uRr3XUO+ARmFiEK4pDI0rzyd2rbE9rFSJCaUtsoptf8=
Subject key identifier: 6F:94:65:94:15:25:EA:C8:02:06:47:00:36:93:B3:0A:5C:71:AE:95
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 01856C65F1CF6A569B811243EE4619114FA9
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/b5RllBUl6sgCBkcANpOzClxxrpU.roa
Signing time: Sun 01 Jan 2023 08:14:58 +0000
ROA not before: Sun 01 Jan 2023 08:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59793
IP address blocks: 95.85.80.0/23 maxlen: 23
93.179.70.0/23 maxlen: 23
93.179.72.0/21 maxlen: 21
79.133.106.0/23 maxlen: 23
93.179.80.0/21 maxlen: 21
79.133.112.0/21 maxlen: 21
95.181.136.0/21 maxlen: 21
95.181.240.0/21 maxlen: 21
93.179.122.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:f1:cf:6a:56:9b:81:12:43:ee:46:19:11:4f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 1 08:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f9465941525eac8020647003693b30a5c71ae95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:aa:27:1c:e6:d6:86:72:fa:62:c1:40:68:0b:
e0:44:76:6d:31:4a:f2:04:e2:1d:bb:18:6d:84:98:
45:3b:a5:92:cb:26:c3:59:84:f4:86:ed:1e:14:d1:
af:69:93:8c:31:57:9e:4e:5a:27:7f:21:7d:f3:23:
93:d5:26:2b:3e:5a:c2:4a:14:2f:10:ef:e4:9d:35:
22:82:20:83:02:65:e1:87:32:e3:55:45:52:44:0b:
91:7e:d7:4f:b2:73:ab:81:57:5c:1b:67:03:3c:cc:
c6:13:68:54:50:ea:9b:40:ce:ae:d3:c9:cc:98:aa:
74:b6:6c:85:f5:7a:72:9c:3c:7b:85:95:4e:4f:0b:
a1:33:48:1a:d9:de:9c:ce:44:de:93:9c:f5:c4:05:
37:ad:08:be:6d:84:54:15:c7:14:1b:25:7d:fc:19:
ab:27:ab:c9:a9:62:7e:d7:ee:11:a6:5c:71:c9:3d:
c5:c2:e6:a3:63:e8:e3:1b:76:f3:66:79:2b:65:36:
a1:27:cc:bf:fd:8f:4b:02:da:88:8c:df:d5:ed:ec:
7b:99:6e:1b:31:f8:5c:54:dc:1a:24:cf:61:69:a9:
01:91:b3:5f:b8:eb:d0:47:5c:a8:c3:69:b7:3e:e8:
b2:3c:20:7a:e7:d3:c7:7b:f4:d2:06:45:16:ca:94:
a1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:94:65:94:15:25:EA:C8:02:06:47:00:36:93:B3:0A:5C:71:AE:95
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/b5RllBUl6sgCBkcANpOzClxxrpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.133.106.0/23
79.133.112.0/21
93.179.70.0-93.179.87.255
93.179.122.0/23
95.85.80.0/23
95.181.136.0/21
95.181.240.0/21
Signature Algorithm: sha256WithRSAEncryption
70:ad:97:21:3e:20:21:80:34:8d:89:91:74:0a:e8:0c:23:88:
f0:05:1f:46:03:eb:80:a0:f4:3f:53:65:b0:ba:5b:a8:e1:fb:
5c:c7:63:ef:ee:4c:7e:6f:af:be:3c:05:ea:27:84:cc:0d:a6:
a4:2e:01:37:e4:95:d3:b1:66:75:b5:74:10:dd:44:45:66:2b:
a8:f5:ee:b3:a4:f2:bb:b1:f6:01:f1:ad:e1:03:0f:fb:0d:56:
fb:47:e2:a1:95:34:22:c4:be:ed:1a:e9:23:ae:74:a4:20:65:
de:bd:52:37:1e:a2:a6:dc:6a:f3:01:4f:a1:6b:4d:88:34:0e:
51:a9:d4:6e:f7:ea:9f:96:14:4e:f8:da:c4:95:9c:91:99:1d:
64:83:c1:1e:15:7c:06:a7:43:61:dd:47:c9:87:80:fe:67:43:
57:16:55:f3:78:c9:26:e0:90:9b:81:87:d4:73:d4:34:aa:16:
14:78:71:b3:e9:a2:f3:96:15:3d:30:4c:bb:fe:f5:f7:d9:42:
11:98:07:03:43:ed:05:1e:98:ef:8a:6d:b4:f0:23:18:82:52:
e3:7e:c8:7c:d4:41:f8:31:8f:cd:cc:87:b2:24:dd:24:76:f2:
e2:1a:25:aa:35:81:db:32:13:9b:b3:b8:1e:ee:d7:65:c0:c9:
77:d3:d3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:30 2024 by rpki-client on console-fra.rpki-client.org