Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/K_qrUwSsp2ubSOS66xToz-34R4g.roa
File: K_qrUwSsp2ubSOS66xToz-34R4g.roa (raw, json)
Hash identifier: 3j9DS4yyB7dpTgomtKgp89zV3RIh9HNBoENp4HE8Hs0=
Subject key identifier: 2B:FA:AB:53:04:AC:A7:6B:9B:48:E4:BA:EB:14:E8:CF:ED:F8:47:88
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0186076D0D9A6CC749CFDCB3FCE6659F434E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/K_qrUwSsp2ubSOS66xToz-34R4g.roa
Signing time: Tue 31 Jan 2023 10:43:52 +0000
ROA not before: Tue 31 Jan 2023 10:43:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 188.241.136.0/24 maxlen: 24
188.241.137.0/24 maxlen: 24
89.34.219.0/24 maxlen: 24
93.114.244.0/24 maxlen: 24
185.112.249.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Feb 2023 08:49:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:07:6d:0d:9a:6c:c7:49:cf:dc:b3:fc:e6:65:9f:43:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 31 10:43:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2bfaab5304aca76b9b48e4baeb14e8cfedf84788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:55:60:13:5a:8e:37:f8:1a:aa:5d:6a:9a:a9:
e5:da:17:ea:0a:0e:68:31:89:7b:6c:c8:ce:f0:f4:
87:fa:b7:1b:0a:da:a2:f6:b3:06:de:fa:c8:42:8f:
99:4b:13:00:6d:bf:d3:2e:21:e3:10:45:f6:a3:d4:
53:b8:f7:2d:af:88:dd:ee:e6:06:06:15:a4:49:da:
8b:c8:67:71:93:8c:2f:91:7d:70:3b:fa:68:a8:27:
cb:9d:2c:f1:83:7f:72:b1:ca:07:d9:4f:e9:29:25:
e9:9f:1c:b9:df:7a:70:1a:42:8a:a0:81:d1:5e:93:
c7:46:1e:94:4b:3c:a4:d7:41:82:da:45:72:48:2a:
f2:7e:08:5c:bc:23:69:23:de:40:7f:1f:84:86:71:
f1:07:fb:15:b8:62:30:fb:de:82:b6:61:0e:dd:6a:
ec:62:e4:41:ae:28:e1:b4:07:75:20:24:94:01:cb:
ca:cf:b9:f4:28:2b:af:26:9a:18:97:d9:67:da:45:
7b:cf:f9:03:eb:a0:7f:17:7c:91:f3:14:41:a7:d6:
68:14:66:fc:98:37:e6:15:3e:2c:5b:1a:ab:07:e8:
96:64:a5:74:4f:01:c1:3a:a3:c8:19:ff:c5:8f:4a:
af:ce:c8:2b:68:90:32:ee:71:21:d3:1c:be:31:ca:
bc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FA:AB:53:04:AC:A7:6B:9B:48:E4:BA:EB:14:E8:CF:ED:F8:47:88
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/K_qrUwSsp2ubSOS66xToz-34R4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
89.34.219.0/24
93.114.244.0/24
185.112.249.0/24
188.241.136.0/23
Signature Algorithm: sha256WithRSAEncryption
19:52:7d:44:32:69:e8:20:f7:dd:04:5a:af:7f:ba:c8:1b:3c:
90:20:e3:67:55:c6:aa:49:a9:4c:ae:2f:e0:2c:cb:f9:69:8e:
56:ee:23:5e:8b:39:cd:e4:2d:2e:32:57:19:98:65:20:21:be:
8e:cf:dd:75:22:78:5f:de:11:54:b5:db:80:56:f7:7c:88:d8:
ab:c4:2c:4b:e6:f0:42:c8:0d:ab:cb:b3:3f:89:4e:ec:a0:2d:
b6:bb:8d:bd:92:34:b5:66:04:1e:ad:ee:42:5c:b3:de:96:7f:
a5:7e:27:f1:f8:3b:a3:27:15:78:c4:a6:0d:01:0d:ea:e2:3f:
b2:5e:49:3b:75:75:a0:b2:bf:14:72:91:41:df:48:36:6c:7d:
de:65:14:5f:44:64:f6:b1:e9:2d:38:1f:a7:d2:12:de:49:c6:
a8:05:74:82:41:76:c3:6f:8a:b5:fb:b9:b4:0c:5b:d7:e5:fe:
86:23:eb:38:e1:d6:8e:16:bc:b9:c7:bc:11:db:9d:60:ce:b8:
f3:11:20:93:4d:95:24:6f:5a:29:c4:cf:71:7c:99:c2:e7:de:
9d:f2:07:2e:be:c8:bb:86:42:70:a0:98:53:5b:cd:59:13:65:
17:aa:42:8e:26:08:8a:80:54:30:d5:7c:c0:ec:b5:30:9e:2e:
c5:24:4d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org