Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/6nEMNaZ-TsJe_NqutAMO65cuMjQ.roa
File: 6nEMNaZ-TsJe_NqutAMO65cuMjQ.roa (raw, json)
Hash identifier: c4mYeSV15M+yAWG7BplvLrOiEbvfpyfCeCytEtAFgXM=
Subject key identifier: EA:71:0C:35:A6:7E:4E:C2:5E:FC:DA:AE:B4:03:0E:EB:97:2E:32:34
Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46
Certificate serial: 01856D93ECB8230B08565CB6A5372923C5F2
Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/6nEMNaZ-TsJe_NqutAMO65cuMjQ.roa
Signing time: Sun 01 Jan 2023 13:44:49 +0000
ROA not before: Sun 01 Jan 2023 13:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205250
IP address blocks: 192.103.92.0/24 maxlen: 24
192.103.105.0/24 maxlen: 24
192.103.111.0/24 maxlen: 24
192.103.110.0/24 maxlen: 24
192.103.106.0/24 maxlen: 24
192.103.116.0/24 maxlen: 24
192.103.85.0/24 maxlen: 24
192.103.86.0/24 maxlen: 24
192.103.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:ec:b8:23:0b:08:56:5c:b6:a5:37:29:23:c5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46
Validity
Not Before: Jan 1 13:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea710c35a67e4ec25efcdaaeb4030eeb972e3234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ff:ec:f5:ff:1d:11:b3:9d:25:66:ec:c4:6d:
7e:61:3e:67:da:3b:f4:56:d5:57:b7:6a:e3:a4:bf:
9f:dc:b1:d4:e6:d5:e3:7a:54:b3:fa:e6:e0:e5:79:
21:a5:b5:af:25:c6:06:cb:9c:b9:1b:65:80:c2:e6:
77:4b:f8:c1:ee:46:7b:fd:f5:c8:e6:62:c9:30:b4:
98:a4:a0:1a:72:a0:00:74:c3:c2:c1:75:a4:7f:18:
a3:d6:d0:12:f8:49:49:bc:30:d6:19:df:1e:c9:93:
bd:2a:96:09:85:dd:55:5f:eb:01:81:61:35:de:2c:
61:c4:46:78:38:f9:98:87:f7:6f:43:bb:2a:57:4d:
ee:1b:80:ab:3d:54:99:4a:2d:3d:8a:14:19:c8:6a:
23:60:74:2d:0d:8d:c3:80:1c:bb:95:b5:78:84:73:
38:91:ce:50:99:d6:ee:5d:7e:41:ca:d4:bc:2f:f7:
f8:bd:73:bf:b2:57:51:ed:4f:30:c1:f0:0b:13:11:
82:3f:35:2c:1b:33:8c:82:0d:c5:2f:f6:c0:c6:0e:
f4:f7:0b:d3:0e:62:5e:df:8f:8f:61:fa:b5:05:50:
4a:6f:be:7c:13:e6:23:0b:ab:81:d4:88:68:e2:f0:
15:36:36:d9:25:d3:71:c7:80:39:9b:0c:4f:8c:fc:
99:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:71:0C:35:A6:7E:4E:C2:5E:FC:DA:AE:B4:03:0E:EB:97:2E:32:34
X509v3 Authority Key Identifier:
keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/6nEMNaZ-TsJe_NqutAMO65cuMjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.103.85.0-192.103.86.255
192.103.91.0-192.103.92.255
192.103.105.0-192.103.106.255
192.103.110.0/23
192.103.116.0/24
Signature Algorithm: sha256WithRSAEncryption
67:dd:c7:31:6c:10:98:8d:78:14:d5:9a:81:de:b5:ad:63:23:
00:d6:af:aa:8d:10:d9:f1:aa:d5:0e:3b:47:ce:b0:97:b5:74:
8c:c2:c7:46:a2:7d:64:02:13:3b:13:3d:80:ed:b4:29:be:08:
cf:dc:45:b9:ef:7a:9a:ef:45:3f:00:8a:db:83:4e:6c:7f:7c:
56:e0:e5:55:f5:57:70:6f:08:08:60:f4:fa:3a:38:8d:59:53:
59:37:dd:2b:56:11:bb:87:32:4d:7f:e5:c7:bb:55:2f:7c:48:
51:77:41:97:93:d7:e0:7b:b4:ab:9c:7f:0e:3a:6e:ff:d1:52:
99:97:2f:b9:d8:c1:98:b4:5d:08:40:1f:0d:e6:c1:56:20:e6:
9c:34:e5:93:2e:a6:52:42:b4:d1:6b:ef:db:a2:81:9b:97:6a:
3e:ab:af:20:54:ee:59:a7:3d:b4:ba:b6:80:01:c1:5f:9b:a1:
8d:31:8f:89:14:4f:24:e7:13:de:c8:87:4a:1b:96:0b:34:e2:
bb:58:49:9d:09:71:d6:27:0d:fc:20:d9:8f:f7:64:7e:a2:d3:
b4:8d:a8:1a:e2:91:36:92:3e:2e:08:5d:9e:8e:69:16:ff:94:
fd:6b:49:0f:a5:37:4b:1d:25:06:ef:1e:51:d0:08:7d:9d:d3:
ef:b4:7d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:12 2024 by rpki-client on console-fra.rpki-client.org