Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/sTK5Q1FSka_qtR8K_ytaWDloWBo.roa
File: sTK5Q1FSka_qtR8K_ytaWDloWBo.roa (raw, json)
Hash identifier: bp2cu2SDihWYyKT6rATD2wwMtZYRlMNpPdJG01hLKd0=
Subject key identifier: B1:32:B9:43:51:52:91:AF:EA:B5:1F:0A:FF:2B:5A:58:39:68:58:1A
Certificate issuer: /CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Certificate serial: 01924378479A4717A5DC1DA4F37EC76DEDCA
Authority key identifier: D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/sTK5Q1FSka_qtR8K_ytaWDloWBo.roa
Signing time: Mon 30 Sep 2024 15:06:48 +0000
ROA not before: Mon 30 Sep 2024 15:06:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59811
IP address blocks: 185.66.206.0/24 maxlen: 24
185.149.208.0/24 maxlen: 24
185.149.210.0/23 maxlen: 24
194.0.116.0/22 maxlen: 24
2a04:1840::/29 maxlen: 32
2a0b:8640::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 03 Oct 2024 11:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:43:78:47:9a:47:17:a5:dc:1d:a4:f3:7e:c7:6d:ed:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Validity
Not Before: Sep 30 15:06:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b132b943515291afeab51f0aff2b5a583968581a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:72:9e:8f:e8:b3:8a:e5:7b:d7:40:c0:8f:eb:
1a:92:24:78:6e:ab:fe:8d:b6:65:d0:11:94:5f:3a:
11:fc:d5:b7:9b:d8:2b:0b:52:fb:32:a0:3b:5e:b1:
33:2b:21:76:f7:40:ad:43:dc:16:94:b2:77:40:54:
e2:c7:21:8c:08:a8:b5:87:36:05:3e:e1:7c:f8:ba:
ec:0e:70:7a:e1:70:fa:3a:0d:fd:d2:6d:18:0c:96:
48:a8:ba:d9:1d:fa:9d:d5:eb:32:e5:68:6a:8d:f7:
d6:a9:62:c8:68:80:0a:4b:34:4c:ba:fb:78:0a:3b:
8f:c3:a0:1f:f2:d3:cb:b8:46:16:fb:b3:4a:fe:04:
24:72:0c:70:1b:c9:c5:5d:4a:3c:10:f4:ec:5a:38:
ad:14:f6:81:a7:dc:7f:48:8f:96:64:81:32:3c:86:
82:38:e8:8b:15:c7:9b:8b:18:75:ea:0e:79:8c:07:
9c:17:3b:d9:52:04:dc:72:bb:46:54:f6:b8:bc:06:
28:80:9e:42:6b:db:f1:fa:22:87:11:d8:78:f0:44:
4b:89:9f:ba:7b:aa:6a:ab:e4:2e:55:34:ad:88:fc:
f1:fd:a4:dd:22:89:23:97:af:23:b4:af:6e:fb:45:
01:9d:b1:b8:20:a9:bc:5b:3f:91:39:0e:26:a3:9e:
9b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:32:B9:43:51:52:91:AF:EA:B5:1F:0A:FF:2B:5A:58:39:68:58:1A
X509v3 Authority Key Identifier:
keyid:D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/sTK5Q1FSka_qtR8K_ytaWDloWBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.206.0/24
185.149.208.0/24
185.149.210.0/23
194.0.116.0/22
IPv6:
2a04:1840::/29
2a0b:8640::/29
Signature Algorithm: sha256WithRSAEncryption
a0:f3:31:13:d4:ec:0f:10:c3:65:46:a0:41:e0:c5:eb:55:d3:
da:f8:bc:c7:be:8e:e3:ee:ee:95:f6:9c:71:ab:96:dc:56:56:
85:c5:aa:66:f5:6c:27:d4:06:8b:c4:9f:1c:f4:7d:36:5d:1e:
0f:cc:10:5f:47:51:62:f3:ba:ac:64:e4:a0:af:66:0b:8b:51:
fa:19:fa:dd:53:e7:f1:5b:ef:b2:00:55:3d:30:fb:c6:b7:f6:
e1:a5:4c:fd:8e:19:7f:9a:f3:3e:47:53:6d:aa:7e:57:95:0d:
34:78:a7:ba:14:36:1b:92:eb:d5:15:72:2c:4f:0a:28:61:2e:
b4:b7:37:6b:e4:98:10:65:6a:e7:a9:e4:14:87:78:e1:f8:96:
34:7a:30:8c:9c:f7:93:49:6f:4a:fb:03:72:c2:df:46:d5:60:
9a:8c:a1:b7:6c:f2:cb:a9:bb:6c:11:0b:1c:c5:e5:b2:65:3f:
6e:88:80:b4:fd:65:6c:9a:5b:49:c5:d6:a1:fc:dd:ae:7a:6d:
2e:76:03:4e:a9:a0:cd:6f:39:a6:a8:90:3e:22:09:8b:19:9a:
c1:bf:36:c8:7f:4e:10:b5:ea:87:5f:f2:67:f5:8a:8e:ba:ea:
2d:ba:82:73:0a:19:3c:be:a7:4e:a6:f2:82:4a:83:a1:06:8e:
37:15:10:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 15:33:11 2024 by rpki-client on console-fra.rpki-client.org