Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/7iELbHh5BE98GTuMf7QoYVB-wQM.roa
File: 7iELbHh5BE98GTuMf7QoYVB-wQM.roa (raw, json)
Hash identifier: nDeDheCtytUKX9DGh9jEaFg2EiiJbW6KI8aNhD7XLIU=
Subject key identifier: EE:21:0B:6C:78:79:04:4F:7C:19:3B:8C:7F:B4:28:61:50:7E:C1:03
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 018CC6B88E109FF6EF3409C2F1A4C80B6D12
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/7iELbHh5BE98GTuMf7QoYVB-wQM.roa
Signing time: Mon 01 Jan 2024 20:30:32 +0000
ROA not before: Mon 01 Jan 2024 20:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31376
IP address blocks: 217.119.16.0/20 maxlen: 28
195.93.206.0/23 maxlen: 23
213.108.32.0/21 maxlen: 21
91.215.252.0/23 maxlen: 23
94.125.8.0/21 maxlen: 21
91.190.80.0/21 maxlen: 21
93.92.192.0/21 maxlen: 28
109.71.176.0/21 maxlen: 28
185.42.60.0/22 maxlen: 28
91.219.180.0/22 maxlen: 22
80.79.240.0/21 maxlen: 21
80.79.248.0/22 maxlen: 22
80.79.252.0/23 maxlen: 23
91.215.254.0/24 maxlen: 24
195.191.146.0/23 maxlen: 23
80.249.176.0/20 maxlen: 28
185.155.112.0/22 maxlen: 22
80.73.192.0/20 maxlen: 20
188.93.240.0/21 maxlen: 28
93.190.224.0/21 maxlen: 28
193.110.237.0/24 maxlen: 24
193.110.236.0/22 maxlen: 22
2a02:16e8::/32 maxlen: 64
Validation: Failed, certificate revoked on Mon 22 Jan 2024 12:29:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:8e:10:9f:f6:ef:34:09:c2:f1:a4:c8:0b:6d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 1 20:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee210b6c7879044f7c193b8c7fb42861507ec103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:71:34:e5:30:56:bc:69:59:8f:8e:bc:39:32:
61:c2:b1:44:34:93:35:cc:d6:71:3b:82:ba:ae:79:
e6:e8:2d:fb:76:37:84:5b:73:03:8c:7b:11:28:81:
19:a5:46:46:73:58:48:2e:ca:ef:bc:d5:29:24:8e:
ca:4a:93:15:35:31:bf:9d:13:46:93:9a:b7:30:de:
b2:ae:36:6c:43:9d:41:f6:42:1b:48:c9:0b:a4:4c:
16:fc:12:85:7d:ae:b6:74:19:a9:c2:89:82:dd:c7:
4d:c4:de:38:b2:30:98:e0:66:d9:3a:85:df:01:2e:
cd:7d:d6:6c:9f:bb:a9:75:1e:9c:1b:a0:45:ab:30:
91:e4:c8:9b:a0:12:5a:f2:f6:50:50:2e:db:84:36:
23:e1:3f:6c:67:9f:6d:ad:e2:e8:90:b7:85:cd:5f:
60:59:71:54:02:2f:bd:31:3b:c3:60:b6:c3:52:71:
15:d2:1f:57:99:4d:25:a6:d8:c2:29:cc:b3:7b:1b:
e0:8a:0a:fd:3d:b2:6b:00:05:20:e6:5c:b1:7a:f1:
00:88:84:0c:0f:96:d1:02:e1:93:c9:2d:74:52:57:
f6:49:39:15:c1:b8:32:ba:24:05:5f:bd:d0:13:ea:
eb:50:d9:2b:b9:2e:e5:5a:d8:16:58:90:d7:e6:48:
62:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:21:0B:6C:78:79:04:4F:7C:19:3B:8C:7F:B4:28:61:50:7E:C1:03
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/7iELbHh5BE98GTuMf7QoYVB-wQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.192.0/20
80.79.240.0-80.79.253.255
80.249.176.0/20
91.190.80.0/21
91.215.252.0-91.215.254.255
91.219.180.0/22
93.92.192.0/21
93.190.224.0/21
94.125.8.0/21
109.71.176.0/21
185.42.60.0/22
185.155.112.0/22
188.93.240.0/21
193.110.236.0/22
195.93.206.0/23
195.191.146.0/23
213.108.32.0/21
217.119.16.0/20
IPv6:
2a02:16e8::/32
Signature Algorithm: sha256WithRSAEncryption
64:f1:05:d4:b3:62:2f:94:8f:0b:32:69:ab:04:63:93:1e:32:
29:29:86:8e:d4:fb:20:bb:3c:f7:48:8f:3a:b0:80:56:a5:68:
0b:81:52:97:62:b0:3a:52:41:b7:f7:c2:e2:c4:88:02:0e:14:
4b:56:b2:31:fd:eb:be:7c:e7:4b:d5:e0:51:db:d7:b8:f2:8b:
ab:64:fa:98:3d:6f:64:42:4d:af:59:9d:2f:bf:ab:08:84:b0:
52:8f:a3:0d:d8:65:7e:09:63:10:54:b0:99:23:3b:59:05:ff:
ff:11:9c:8f:47:fe:16:c2:a2:58:a4:f0:b8:14:36:ee:60:ab:
e9:75:38:c0:f1:b8:93:97:2b:12:27:57:68:ad:ec:9d:fd:e2:
1a:15:10:7a:64:18:52:ac:6e:7a:c7:d7:93:8b:b4:40:e8:7a:
ae:a7:69:2b:6c:df:e3:f3:61:38:a6:81:94:1c:2e:e9:6f:ec:
46:e2:ad:bd:e0:b9:23:11:5b:db:22:62:f7:81:2c:8f:31:e8:
1f:a8:2b:3d:1c:f8:d9:c5:cb:e1:cc:b8:a3:e9:e1:df:a3:60:
fd:b3:fa:d4:8c:13:2f:32:1a:44:bc:a5:ed:fb:a8:fb:da:37:
58:b8:0b:0e:23:a6:26:24:40:90:f6:53:81:99:5f:83:08:8b:
4d:5f:29:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:06 2024 by rpki-client on console-fra.rpki-client.org