Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9R-AkwpbVkFAv4lihGmN8WjjTP4.roa
File: 9R-AkwpbVkFAv4lihGmN8WjjTP4.roa (raw, json)
Hash identifier: dwbY0wzGHFMXUyJ3g8iBc+ddaS0IB/MkM9V1FlVthhQ=
Subject key identifier: F5:1F:80:93:0A:5B:56:41:40:BF:89:62:84:69:8D:F1:68:E3:4C:FE
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CC4933E27F04AF9A743E47577F84AC64A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9R-AkwpbVkFAv4lihGmN8WjjTP4.roa
Signing time: Mon 01 Jan 2024 10:30:33 +0000
ROA not before: Mon 01 Jan 2024 10:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203394
IP address blocks: 85.204.18.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
77.81.88.0/24 maxlen: 24
46.102.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Jan 2024 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:3e:27:f0:4a:f9:a7:43:e4:75:77:f8:4a:c6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 1 10:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f51f80930a5b564140bf896284698df168e34cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b2:de:02:78:de:84:bb:e0:26:fc:67:9e:8d:
c1:0b:32:6e:ad:45:30:ca:02:ab:fd:f5:24:89:d0:
f2:4a:be:c1:7e:d2:2d:9e:a5:8a:17:f4:17:36:19:
5d:c4:9f:2b:2f:2b:77:03:e7:aa:8a:a8:8f:c4:a9:
e6:53:bf:2a:01:42:44:6a:13:25:3b:c1:30:f1:f2:
55:83:27:9f:91:0c:3a:2e:85:1e:21:d9:76:fe:34:
57:e4:d0:f2:f5:70:f8:63:3c:ba:94:97:f6:54:86:
d0:d9:c9:bb:64:4f:31:b2:ea:15:6c:bf:97:cb:9f:
bc:67:19:70:9f:3a:b4:79:d4:0f:ff:88:6b:23:e9:
59:9d:41:9e:ac:1a:82:7e:e2:13:f0:51:d1:c5:1e:
2b:5f:50:ea:73:92:8e:19:f0:c1:bd:84:a3:9e:dc:
90:51:02:83:41:d2:0a:97:79:f3:6e:f8:15:c3:90:
6f:47:aa:90:6e:2b:58:72:3c:e2:15:2b:a1:b1:02:
33:b4:7c:76:b8:40:3c:e2:e5:b1:7e:50:5c:06:40:
e2:cd:50:11:75:60:6c:a7:17:4a:a4:7b:45:65:49:
80:3b:0c:f9:e1:d7:47:41:8f:6b:25:64:8b:46:30:
b4:93:47:ba:d4:57:c3:95:a4:f4:0c:e1:38:7d:69:
5a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1F:80:93:0A:5B:56:41:40:BF:89:62:84:69:8D:F1:68:E3:4C:FE
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9R-AkwpbVkFAv4lihGmN8WjjTP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.237.0/24
77.81.88.0/24
85.204.18.0/24
188.208.103.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:cc:3e:39:3a:40:97:06:73:db:80:7e:d1:92:f3:16:94:c3:
0b:30:60:dd:ea:14:b4:ad:cb:ea:ae:63:c9:e9:a5:e2:94:2f:
76:cc:45:f8:44:4c:91:8d:51:a3:cb:45:b2:2d:f7:3d:d4:20:
ca:5e:dd:64:93:14:5f:b0:ee:b4:77:b7:90:e8:71:c4:55:cd:
b4:db:78:a3:d9:78:59:b0:a2:91:43:88:9d:b6:9a:3b:9d:f4:
c1:45:76:2b:76:8f:5e:9b:0e:44:e6:f0:0d:00:85:e2:8b:11:
bc:d1:cd:51:02:6d:ba:e3:70:b6:e2:cc:7f:01:4e:09:0f:af:
4f:e9:6d:1a:93:8d:ac:50:a0:f7:2f:ab:38:79:71:a3:be:c8:
85:31:8c:ce:cb:09:91:cf:de:6c:97:b8:d4:87:15:8e:35:55:
fd:ee:de:0f:f6:51:09:1b:ed:c9:35:60:e2:26:31:fd:67:a5:
c8:ed:82:5c:ea:41:39:67:9f:b9:19:9a:d7:86:da:62:c0:c8:
69:63:86:4c:7d:bc:ed:aa:b8:14:7e:cd:a2:ff:41:2d:7e:99:
4e:7d:7b:ec:a7:14:09:48:8e:86:f9:bd:62:f3:a9:6b:d9:80:
8b:30:70:75:6a:6a:a7:c4:a8:8e:41:b0:a3:b1:1b:76:78:63:
d0:65:96:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org