Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/7AkrU5MRzUF6T1S24NdyXG4TKMM.roa
File: 7AkrU5MRzUF6T1S24NdyXG4TKMM.roa (raw, json)
Hash identifier: 1QObXepGERDEcTJFkPynLqIUD5N3qzxNBzmX5fmSWfk=
Subject key identifier: EC:09:2B:53:93:11:CD:41:7A:4F:54:B6:E0:D7:72:5C:6E:13:28:C3
Certificate issuer: /CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Certificate serial: 0186EE625592F818C0560F5EAE530E8ACF4D
Authority key identifier: 6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/7AkrU5MRzUF6T1S24NdyXG4TKMM.roa
Signing time: Fri 17 Mar 2023 07:04:27 +0000
ROA not before: Fri 17 Mar 2023 07:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199046
IP address blocks: 193.7.220.0/24 maxlen: 24
193.7.220.0/22 maxlen: 22
193.7.222.0/24 maxlen: 24
193.7.221.0/24 maxlen: 24
193.7.223.0/24 maxlen: 24
45.146.14.0/24 maxlen: 24
45.146.13.0/24 maxlen: 24
45.146.15.0/24 maxlen: 24
45.146.12.0/24 maxlen: 24
45.146.12.0/22 maxlen: 22
5.133.24.0/21 maxlen: 24
5.253.68.0/24 maxlen: 24
5.253.68.0/22 maxlen: 22
5.253.70.0/24 maxlen: 24
5.253.69.0/24 maxlen: 24
5.253.71.0/24 maxlen: 24
185.132.249.0/24 maxlen: 24
185.132.251.0/24 maxlen: 24
185.132.250.0/24 maxlen: 24
185.132.248.0/24 maxlen: 24
185.132.248.0/22 maxlen: 22
2a09:9900::/32 maxlen: 64
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ee:62:55:92:f8:18:c0:56:0f:5e:ae:53:0e:8a:cf:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Validity
Not Before: Mar 17 07:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec092b539311cd417a4f54b6e0d7725c6e1328c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5e:92:b1:26:a6:36:af:1e:07:0f:c7:3f:23:
9a:ae:b9:b0:e3:d1:16:2c:02:bc:4b:a6:43:06:f9:
dd:5e:4f:d6:17:48:e3:82:b6:86:48:e9:ba:d9:32:
e4:ce:c7:ac:06:75:7f:1b:66:eb:2a:58:e9:9f:66:
47:db:33:3b:7d:c2:9a:d5:ed:65:54:1b:4b:7d:a9:
97:ef:cb:ee:00:2b:a1:e3:76:0a:25:d6:a4:79:ca:
d4:2f:32:5e:eb:d5:c5:ed:2b:62:c3:29:a1:55:ee:
df:de:45:d7:91:52:32:df:b6:d3:77:ca:47:44:16:
42:62:42:aa:0d:84:e7:99:7a:99:25:8c:b6:d3:4c:
45:8a:86:d1:50:e2:30:c3:f6:96:b6:46:7e:eb:97:
aa:fa:f0:92:cd:8b:d9:88:d7:a2:3c:a4:24:00:ed:
7d:6f:69:1d:cf:33:18:f7:c2:1f:65:70:4c:7f:9f:
7f:72:b0:b3:ab:31:de:50:89:1a:08:24:92:a5:93:
e9:24:14:5a:2d:fb:13:e0:dd:42:98:ce:92:dd:06:
83:f2:e4:ba:27:01:4a:84:7a:73:ca:63:fd:f0:c0:
ef:43:31:9e:7e:5c:e4:af:f9:db:07:af:52:95:77:
ae:74:08:82:50:76:18:a9:3a:5e:56:dd:b7:e3:08:
12:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:09:2B:53:93:11:CD:41:7A:4F:54:B6:E0:D7:72:5C:6E:13:28:C3
X509v3 Authority Key Identifier:
keyid:6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/7AkrU5MRzUF6T1S24NdyXG4TKMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.24.0/21
5.253.68.0/22
45.146.12.0/22
185.132.248.0/22
193.7.220.0/22
IPv6:
2a09:9900::/32
Signature Algorithm: sha256WithRSAEncryption
56:78:24:90:d7:5d:be:52:93:b6:a5:df:43:17:2f:0a:28:e6:
29:a8:1b:c5:a4:c3:60:4e:a1:2b:9a:ac:a8:02:5d:ed:ce:e8:
66:d1:21:82:8a:2e:d6:64:e6:5a:79:28:ea:92:e3:25:4c:9f:
c0:84:83:10:34:e7:a9:ed:74:13:ee:06:d1:1f:28:4c:16:9a:
9e:7d:3b:df:c0:36:39:ac:7d:7b:f0:27:12:cb:ba:ab:7d:8c:
30:8f:99:1e:fe:8e:76:70:ff:55:98:a4:36:a8:3a:cd:4e:36:
d4:d0:47:90:d9:f4:41:3d:a1:3c:10:34:d7:04:74:69:8f:bb:
41:d5:4b:86:ea:33:44:29:ed:a8:cf:a3:fe:82:04:50:9c:89:
e4:02:50:48:52:cf:7e:2f:d3:d1:ce:03:51:00:e8:4b:67:d4:
7c:10:50:f5:77:2f:11:d5:8a:73:97:ac:a9:75:96:e1:6a:44:
d0:ed:43:6d:d0:71:88:4d:b5:93:a4:24:24:c0:f1:48:c7:af:
30:ed:c3:8d:93:80:f1:46:a5:74:09:ee:d2:97:63:bd:c3:16:
60:7a:65:d7:83:17:c4:45:6f:8e:14:38:3d:71:1c:fe:9b:eb:
1a:42:7f:17:5e:ea:ba:79:fb:bd:7e:5b:30:0b:83:3c:2c:15:
49:f7:22:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:25 2024 by rpki-client on console-fra.rpki-client.org