Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/X6DvghIwf7fDxqAtucm112E4lz8.roa
File: X6DvghIwf7fDxqAtucm112E4lz8.roa (raw, json)
Hash identifier: zyOSn6DzRsEArKyBPCjTUmfBBdf7TceevtzCCj5zcIo=
Subject key identifier: 5F:A0:EF:82:12:30:7F:B7:C3:C6:A0:2D:B9:C9:B5:D7:61:38:97:3F
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01892AD6BE37F5A18D477E5CBDBBC72F79DC
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/X6DvghIwf7fDxqAtucm112E4lz8.roa
Signing time: Thu 06 Jul 2023 10:54:23 +0000
ROA not before: Thu 06 Jul 2023 10:54:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210392
IP address blocks: 178.239.151.0/24 maxlen: 24
178.239.152.0/24 maxlen: 24
185.26.32.0/24 maxlen: 24
185.26.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Oct 2023 11:31:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2a:d6:be:37:f5:a1:8d:47:7e:5c:bd:bb:c7:2f:79:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jul 6 10:54:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fa0ef8212307fb7c3c6a02db9c9b5d76138973f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:17:b4:1c:18:3e:e9:cd:b8:8d:49:28:a2:76:
d0:e7:1b:58:4a:c9:f1:47:29:90:ef:9c:cb:97:b8:
0f:84:22:d8:03:ad:31:62:04:98:0c:c3:e5:1a:75:
e8:28:fc:3a:9c:47:6f:59:46:c8:b2:14:f9:40:ed:
4d:cb:a2:fb:2a:0a:71:70:39:4c:d7:1c:47:44:f8:
95:f6:49:17:9e:68:63:33:79:13:d4:7e:d8:72:60:
63:7d:19:df:8f:03:45:04:83:3a:79:31:36:58:f7:
8f:ee:b7:0d:bd:99:b1:32:5b:13:7d:c1:e3:6f:81:
7c:58:9c:03:de:6d:16:46:bb:94:24:c5:78:42:6e:
35:4a:f7:09:ae:7f:5b:66:df:ef:b4:f4:f2:a9:45:
b4:7d:9d:19:ef:fd:a3:1d:52:65:93:02:40:9d:7f:
19:10:a3:18:f9:ee:e5:be:0a:e8:d3:93:1c:25:d3:
01:a3:45:c6:41:57:b8:ad:33:70:32:1e:4d:0d:12:
7d:00:fe:5e:9d:6a:cc:af:ad:76:b2:d7:33:29:c1:
82:49:84:7d:d2:bc:6a:1d:4b:17:f5:52:f8:13:bc:
a4:2d:5a:c1:ae:06:3b:e4:bb:6e:28:4e:e6:d8:f6:
33:3b:b9:8e:56:44:a4:f2:d7:8c:45:b7:85:b9:90:
0f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A0:EF:82:12:30:7F:B7:C3:C6:A0:2D:B9:C9:B5:D7:61:38:97:3F
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/X6DvghIwf7fDxqAtucm112E4lz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.151.0-178.239.152.255
185.26.32.0/23
Signature Algorithm: sha256WithRSAEncryption
09:ff:78:88:ca:ab:06:f5:9f:82:14:3b:64:5c:b1:9e:c2:60:
02:a9:87:56:09:44:b2:fb:7f:95:d5:ca:81:6a:fa:c5:f1:b1:
ee:30:b5:88:d6:4d:72:3a:63:bc:8d:f6:59:d9:bd:bf:37:65:
72:cd:79:c8:ef:3b:ef:81:08:98:12:48:72:d0:dd:c2:10:ff:
80:3e:2c:db:2f:83:b6:8f:44:06:dd:90:53:ae:c7:46:91:07:
8e:86:01:02:5c:14:3f:cf:a2:83:ae:61:71:1c:f7:40:a5:01:
22:a6:58:38:bf:2b:14:43:b6:c9:67:a9:e9:bc:bd:52:54:ed:
cc:44:5e:cc:b5:e9:93:c8:ae:1a:f3:7f:06:69:94:0b:b8:ae:
d8:39:f9:12:35:97:3f:44:c1:30:ec:50:04:71:1e:0b:d7:43:
78:e0:8b:31:25:8f:7a:9a:92:15:36:e0:ae:19:f2:8f:c3:20:
c1:18:66:43:46:d7:3d:d7:cc:c8:9f:48:d2:1b:50:6d:4d:c1:
6a:ad:85:54:57:c5:5a:96:a0:3e:73:e0:24:cb:61:3b:5b:17:
de:82:5f:c6:33:6b:c1:48:b2:e9:ce:e6:bc:bf:95:37:ac:75:
2a:43:21:9c:9d:32:53:9a:80:0c:7b:e3:81:50:8a:3a:a4:61:
40:5b:73:53
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:29 2024 by rpki-client on console-fra.rpki-client.org