Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/Upim1bpB8ZDxpAFpY0qWt4OcADo.roa
File: Upim1bpB8ZDxpAFpY0qWt4OcADo.roa (raw, json)
Hash identifier: gBgq2YAlDx3NkWIVSFPlbwNh/RRJHMOUA+9sQ0bvzNc=
Subject key identifier: 52:98:A6:D5:BA:41:F1:90:F1:A4:01:69:63:4A:96:B7:83:9C:00:3A
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 018EE657A37909259C4798BDDCA358C430BB
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/Upim1bpB8ZDxpAFpY0qWt4OcADo.roa
Signing time: Tue 16 Apr 2024 09:58:06 +0000
ROA not before: Tue 16 Apr 2024 09:58:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215179
IP address blocks: 93.92.199.0/24 maxlen: 24
94.125.14.0/24 maxlen: 24
109.71.177.0/24 maxlen: 24
185.42.61.0/24 maxlen: 24
213.108.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Apr 2024 14:50:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e6:57:a3:79:09:25:9c:47:98:bd:dc:a3:58:c4:30:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Apr 16 09:58:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5298a6d5ba41f190f1a40169634a96b7839c003a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b5:fb:1c:f1:c3:00:da:f9:29:9a:e7:38:c8:
1d:4e:c5:db:a6:a5:4b:fa:09:54:be:72:85:0f:8d:
55:e5:e0:e6:37:1c:ad:df:4b:35:5f:c8:fa:b0:b7:
86:b1:7a:a4:46:1c:89:a5:55:91:91:2e:d4:86:7e:
8c:0e:d5:3c:c1:dd:44:35:79:83:90:85:4a:ed:66:
de:cd:2c:29:3b:81:d8:ab:a7:ab:49:0c:4d:dd:d7:
12:7e:7d:f8:b1:6a:a4:10:28:aa:c8:82:3c:bd:41:
bc:da:ac:d7:7c:c4:2a:55:26:db:bf:da:01:c0:59:
4d:f8:8a:88:07:c1:b7:36:59:6c:f6:c8:59:3a:e1:
05:d2:6e:ff:ac:62:a7:05:e9:fc:09:33:1a:0d:27:
12:ef:23:33:38:45:17:e1:c2:93:b7:72:06:35:d6:
78:28:5a:f4:92:f5:f9:ce:1c:b4:b5:48:58:58:9a:
24:0b:c9:2f:fc:50:63:9c:ed:26:19:88:cf:05:a3:
d2:a6:68:42:37:41:d4:da:2b:5b:e1:48:3f:da:59:
22:8a:be:fb:3d:41:40:c4:56:77:78:1b:1b:5a:36:
6b:ad:7b:dd:bd:44:70:53:7d:14:d0:34:6d:72:e0:
0e:ee:a2:a1:20:d4:b2:29:6d:18:50:97:b5:cb:e4:
b1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:98:A6:D5:BA:41:F1:90:F1:A4:01:69:63:4A:96:B7:83:9C:00:3A
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/Upim1bpB8ZDxpAFpY0qWt4OcADo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.199.0/24
94.125.14.0/24
109.71.177.0/24
185.42.61.0/24
213.108.39.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:a1:2d:0d:09:de:4b:eb:25:f6:6a:c7:92:8c:15:1d:d5:15:
96:7f:db:e8:d0:82:7e:a2:28:ca:34:44:8d:9e:55:e8:a7:14:
70:3e:2a:21:8a:4d:94:8b:c6:62:d1:f6:4b:81:5a:2c:82:81:
07:38:5c:81:8d:bc:d8:91:17:78:9f:1d:23:1e:f5:bc:b0:e6:
21:ee:05:91:8d:74:91:66:05:d3:10:4b:6d:56:62:7a:a9:36:
0c:08:b3:d9:82:fe:42:27:a6:42:27:b6:9d:34:01:62:16:36:
25:9d:cd:4a:f9:31:c0:e4:d3:63:04:1b:7d:fc:58:61:2a:f3:
5b:93:b5:38:d7:fc:18:25:d4:91:ab:91:43:28:f9:1a:c2:e5:
30:49:d2:02:72:4c:4f:8b:63:30:49:ef:5f:54:40:68:5b:21:
65:0d:01:38:60:d9:80:9f:8b:3e:e7:4b:57:57:70:92:64:a2:
04:ae:c2:72:05:1b:c6:26:a2:c8:f8:9f:49:26:aa:25:fa:b6:
da:57:80:ed:69:02:dd:05:0d:a4:aa:45:f2:c3:9d:51:84:01:
4c:23:29:52:6a:02:23:1c:9e:b9:e5:72:80:88:84:6e:ff:30:
61:98:80:66:d9:d5:0a:a2:11:65:74:f3:7f:ef:bb:c7:63:4d:
b1:f8:6e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:40 2024 by rpki-client on console-ams.rpki-client.org