Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/tE22vshZFdPtCpJ3GYI2Z70tLzU.roa
File: tE22vshZFdPtCpJ3GYI2Z70tLzU.roa (raw, json)
Hash identifier: VkdljXzchGfAIzINNftd83P1NWUAVru1GKZTRDsUf9M=
Subject key identifier: B4:4D:B6:BE:C8:59:15:D3:ED:0A:92:77:19:82:36:67:BD:2D:2F:35
Certificate issuer: /CN=6ff9ca5c76bb35a9353e9b13e3fce80f36316180
Certificate serial: 01856C6F28779955328A1DA73113EE45B7EA
Authority key identifier: 6F:F9:CA:5C:76:BB:35:A9:35:3E:9B:13:E3:FC:E8:0F:36:31:61:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/tE22vshZFdPtCpJ3GYI2Z70tLzU.roa
Signing time: Sun 01 Jan 2023 08:25:02 +0000
ROA not before: Sun 01 Jan 2023 08:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197750
IP address blocks: 91.229.93.0/24 maxlen: 24
185.6.103.0/24 maxlen: 24
185.6.100.0/24 maxlen: 24
185.6.102.0/24 maxlen: 24
185.6.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:28:77:99:55:32:8a:1d:a7:31:13:ee:45:b7:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ff9ca5c76bb35a9353e9b13e3fce80f36316180
Validity
Not Before: Jan 1 08:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b44db6bec85915d3ed0a927719823667bd2d2f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5e:15:30:8a:95:5a:5a:a0:59:aa:65:e7:36:
7f:4f:a3:d4:3b:87:4a:dc:e9:5f:7e:5b:94:57:8a:
ff:67:91:08:1c:bb:5b:e8:c7:7e:49:e6:0c:0c:04:
38:a1:27:0c:8e:41:0f:48:fc:93:ab:80:3b:19:c6:
f3:e7:e8:01:f8:51:bb:95:f1:da:49:95:f3:39:79:
67:d1:cb:8c:d8:65:47:b6:13:68:e0:29:78:91:6c:
bb:87:a1:7d:81:ef:ea:a5:dd:d1:45:83:5c:90:d8:
17:1a:c3:df:db:fe:79:dc:40:43:b9:99:bd:62:17:
1e:ce:81:61:c9:9a:1b:82:9c:6e:2f:a8:60:1b:9c:
cc:46:5d:43:93:17:dd:9f:34:8a:c7:45:1c:cf:04:
9a:9c:ba:49:67:8f:ec:81:9c:b5:38:99:df:4e:69:
d4:a9:37:f7:a1:a7:49:be:a0:82:01:ce:98:27:68:
69:21:be:8b:49:9f:08:b1:dc:22:a3:c3:af:4e:59:
30:67:da:a9:94:49:03:f3:2e:02:c4:d2:cf:19:c2:
58:e9:55:68:2f:3a:c7:49:96:80:c3:48:92:cb:b8:
a7:2a:80:4a:08:50:75:65:e6:40:f3:4c:5b:ca:82:
ff:53:ac:f8:99:aa:42:38:01:45:74:24:01:f0:a0:
fc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4D:B6:BE:C8:59:15:D3:ED:0A:92:77:19:82:36:67:BD:2D:2F:35
X509v3 Authority Key Identifier:
keyid:6F:F9:CA:5C:76:BB:35:A9:35:3E:9B:13:E3:FC:E8:0F:36:31:61:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/tE22vshZFdPtCpJ3GYI2Z70tLzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.93.0/24
185.6.100.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:e4:6f:90:e9:f4:34:79:e1:70:c6:c8:82:e8:57:27:1e:c1:
7c:98:6f:5f:eb:43:b5:4d:d7:bd:1f:4c:d7:a4:eb:c9:d9:55:
e4:7b:aa:90:75:a5:1c:df:20:73:e9:ab:bb:d9:7b:78:32:ea:
e2:9b:4b:e8:4f:1f:74:23:fa:99:8c:99:61:5d:c1:8f:12:57:
86:ac:9e:8f:41:4d:e4:be:64:fe:cd:64:ba:e5:3e:6d:ce:a7:
a4:4f:50:f5:c6:a7:45:68:c5:55:15:dc:5a:79:0f:2f:34:8e:
2a:72:3c:58:86:58:79:1e:c9:7e:b8:e2:b7:eb:06:7e:53:77:
b4:63:4a:8d:98:04:b4:66:8a:cb:2c:da:2b:2d:c8:3c:0a:b8:
a9:1a:d5:1f:01:0d:03:07:2e:4f:22:12:01:b5:de:a6:e8:74:
3e:48:b8:02:a8:b6:77:c1:01:cf:9b:df:91:4c:5c:40:02:a6:
22:74:4c:73:8d:07:ef:4c:e4:5f:45:dc:cb:33:be:39:f8:00:
90:a8:6f:49:51:a8:54:a2:95:5a:86:57:75:ee:36:86:c3:cd:
ff:8f:5a:53:cd:ce:86:df:cd:02:83:78:80:d4:b2:d3:1e:f0:
61:a2:b6:1b:f3:9e:21:8c:ea:ea:99:09:48:c1:f9:dd:46:50:
77:92:63:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:29 2024 by rpki-client on console-fra.rpki-client.org