Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/6GCq0b0E5imRHG-Uvc4P3RqTs7k.roa
File: 6GCq0b0E5imRHG-Uvc4P3RqTs7k.roa (raw, json)
Hash identifier: vqqe0A2fyNGrvybha6yiQ4kBR+SCD3paxMr+lFgBwyQ=
Subject key identifier: E8:60:AA:D1:BD:04:E6:29:91:1C:6F:94:BD:CE:0F:DD:1A:93:B3:B9
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 0192470F77072990CB4914F0CDE308E8D59D
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/6GCq0b0E5imRHG-Uvc4P3RqTs7k.roa
Signing time: Tue 01 Oct 2024 07:50:48 +0000
ROA not before: Tue 01 Oct 2024 07:50:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31520
IP address blocks: 93.183.220.0/22 maxlen: 22
93.183.232.0/22 maxlen: 22
176.241.148.0/22 maxlen: 22
188.247.96.0/20 maxlen: 20
188.247.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 13:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:47:0f:77:07:29:90:cb:49:14:f0:cd:e3:08:e8:d5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Oct 1 07:50:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e860aad1bd04e629911c6f94bdce0fdd1a93b3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9c:e5:f2:03:c6:95:52:cf:46:75:42:37:23:
0b:50:64:17:6b:01:a9:72:d6:c6:43:0e:15:86:ab:
2b:a0:07:6e:93:e5:cd:45:00:3d:ef:58:92:99:75:
07:33:0f:7c:94:28:ac:31:f4:53:16:77:70:7a:64:
70:21:e4:e3:29:1f:9c:c3:f1:05:e3:44:c6:42:24:
9d:e8:26:89:5a:c6:54:97:6e:0e:6f:05:99:7e:ca:
06:9b:a3:42:0e:41:d8:1f:4c:cf:96:8f:1a:67:3e:
48:91:6c:b2:a4:81:9c:87:c5:99:24:b0:16:09:d4:
dc:9d:51:14:78:78:d1:77:ba:35:f7:ea:f4:04:2f:
0d:36:1e:25:a1:de:ea:b6:7b:85:f7:76:4b:36:a7:
b9:05:6f:34:0b:16:32:ae:b9:dc:a5:26:a5:c9:f8:
df:98:d2:a1:d9:f5:fd:93:de:b1:a3:4f:93:a7:41:
0f:de:7e:1a:5a:a9:9e:a4:fc:42:21:f5:1e:b8:a0:
91:fe:3e:64:e7:9e:94:c8:aa:4d:9c:50:0c:26:ae:
c3:2b:27:a6:cb:71:f6:6f:21:98:f3:93:cc:4c:22:
45:f2:12:bb:a9:46:39:d7:bc:12:5c:7f:a5:1b:7c:
0b:77:c0:06:b6:b8:a8:78:0e:90:71:9d:16:37:2c:
ec:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:60:AA:D1:BD:04:E6:29:91:1C:6F:94:BD:CE:0F:DD:1A:93:B3:B9
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/6GCq0b0E5imRHG-Uvc4P3RqTs7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.183.220.0/22
93.183.232.0/22
176.241.148.0/22
188.247.96.0/20
188.247.116.0/24
Signature Algorithm: sha256WithRSAEncryption
07:0e:f0:9f:c6:a2:e8:65:48:38:13:a2:03:96:81:2f:3b:65:
9c:06:66:45:e7:2e:d6:c0:14:81:ac:0b:a2:e7:ed:38:8c:8e:
88:a8:e7:05:ce:72:1a:4d:2f:69:a3:79:fc:de:2d:d9:df:0f:
cd:c0:5b:a8:b3:99:23:a3:06:90:06:20:4c:1d:37:be:d1:b5:
fd:98:b0:34:b5:a5:ea:e0:28:4c:3b:91:73:90:62:06:f2:06:
09:a0:f5:9b:4d:05:38:53:56:85:4d:e6:d5:a1:ad:bd:dd:50:
75:c0:78:70:31:e2:50:69:f0:77:3b:de:9e:e9:cd:a9:29:52:
19:a6:95:ae:d4:7e:62:c5:d4:1f:dc:f3:4a:66:af:6e:de:2d:
0c:22:77:26:df:60:17:03:5b:2f:ea:0c:64:a0:6b:e6:bc:4d:
61:49:73:51:49:23:1a:dd:3a:39:eb:36:3b:cb:1a:38:5f:e5:
34:c4:7e:64:19:ed:98:5a:7c:e8:ba:e2:95:1a:4c:7e:75:dc:
bc:02:c0:51:d5:09:1d:0a:c2:32:f5:7b:fb:17:85:2e:58:2b:
20:24:21:bb:66:44:73:aa:a7:39:d6:06:bb:55:09:1e:90:ab:
45:18:a2:14:60:32:1b:4e:f5:21:29:eb:4c:57:87:5f:0c:aa:
26:80:25:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 15:59:21 2024 by rpki-client on console-fra.rpki-client.org