Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/4uzIXuyIG2sMRokVyx0C6GYr4dE.roa
File: 4uzIXuyIG2sMRokVyx0C6GYr4dE.roa (raw, json)
Hash identifier: eg1utTJI1Qsfu1cMtnYpKxrT87Pv/KA69zZ6UKhnL8c=
Subject key identifier: E2:EC:C8:5E:EC:88:1B:6B:0C:46:89:15:CB:1D:02:E8:66:2B:E1:D1
Certificate issuer: /CN=b79220a805e4378547e43bac731ce86fe01145c7
Certificate serial: 018572A7FA2FEAFECE9DEE36CE0C6112B88F
Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/4uzIXuyIG2sMRokVyx0C6GYr4dE.roa
Signing time: Mon 02 Jan 2023 13:24:49 +0000
ROA not before: Mon 02 Jan 2023 13:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9121
IP address blocks: 83.66.0.0/16 maxlen: 24
62.29.0.0/17 maxlen: 24
31.200.0.0/17 maxlen: 24
213.243.0.0/18 maxlen: 24
94.120.0.0/14 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:a7:fa:2f:ea:fe:ce:9d:ee:36:ce:0c:61:12:b8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7
Validity
Not Before: Jan 2 13:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2ecc85eec881b6b0c468915cb1d02e8662be1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:67:48:0f:47:7a:8b:80:8d:6b:7b:52:2c:a9:
97:39:38:62:22:e7:de:98:81:1f:e4:e8:4c:72:78:
04:00:91:f2:3b:5a:05:09:d1:3f:2d:f1:b1:5a:47:
bd:0f:a0:d9:1a:0a:af:41:1c:e9:62:22:00:8e:43:
80:68:2d:70:35:bd:9b:a4:6c:7f:21:a8:38:01:c4:
5e:ad:00:fb:0f:0c:d1:0b:27:c1:a1:8f:f2:7f:df:
6e:4c:4d:f7:69:9e:44:83:25:03:c3:14:c8:eb:e7:
0d:1e:b2:54:3e:09:9c:33:f9:38:8f:4b:d5:2a:67:
7f:4b:c2:6e:5c:82:a9:6f:51:c7:0a:40:f0:bd:95:
2b:bc:04:de:e3:e1:6d:25:92:8c:a1:ac:40:53:be:
2c:1c:42:5f:6f:5f:8f:92:fc:25:fe:d7:6c:b3:b9:
3f:1c:7d:9c:89:bc:b0:c0:2f:cf:dc:e0:5b:16:61:
63:c2:a8:c6:b8:18:f5:49:71:70:13:87:0d:1f:a8:
bc:57:c4:dd:2e:9b:bc:bf:39:bc:2a:40:38:f2:41:
90:62:20:52:0b:1a:e8:59:6d:47:22:68:ea:a4:43:
87:27:ee:47:ee:21:d0:f8:4c:00:b2:e3:cf:77:66:
7e:ab:24:91:c4:45:e9:4e:bc:1b:1b:93:e5:9a:66:
d3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EC:C8:5E:EC:88:1B:6B:0C:46:89:15:CB:1D:02:E8:66:2B:E1:D1
X509v3 Authority Key Identifier:
keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/4uzIXuyIG2sMRokVyx0C6GYr4dE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.200.0.0/17
62.29.0.0/17
83.66.0.0/16
94.120.0.0/14
213.243.0.0/18
Signature Algorithm: sha256WithRSAEncryption
82:13:52:13:89:d0:0d:5f:c0:41:86:75:86:b0:27:87:d7:20:
f7:2b:f2:0a:69:18:2e:36:f8:03:ca:76:d1:ed:c7:8c:ac:6e:
4d:f2:1e:47:4b:b5:31:4d:a8:b9:0a:15:95:64:34:29:1c:1a:
cc:34:81:e2:9f:0c:bf:e0:bc:55:a0:88:00:47:b5:4d:e6:8e:
bd:1c:10:a8:32:f6:56:c7:44:23:d7:a0:bf:d6:af:16:7f:3c:
9c:54:0f:66:bf:9e:ed:91:fb:31:89:d6:ee:f1:05:65:d2:aa:
1f:b4:08:ae:f9:a8:65:56:61:90:63:89:91:60:47:a0:9e:c0:
85:ba:0f:3c:8e:d0:de:ce:53:02:81:00:eb:b3:0d:61:b3:d8:
bb:b7:9b:ef:5a:40:aa:6b:fd:d1:f8:3a:11:bd:4c:83:88:b6:
5a:8c:43:b0:00:c9:90:c6:89:82:c8:5e:bf:ab:d1:b2:18:4a:
e7:36:d8:8f:79:e9:9b:db:d2:b7:e1:50:da:93:da:cb:17:84:
a4:28:f3:b2:74:80:fb:e8:85:e3:eb:8c:b6:39:c1:48:93:1e:
e6:be:29:d3:60:86:4e:c5:cd:2d:fa:0e:28:82:9b:13:0b:4a:
5f:72:35:59:fa:72:2c:d6:26:e8:67:cd:87:6e:36:f1:a7:f2:
67:ec:ab:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:49 2024 by rpki-client on console-fra.rpki-client.org