Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/1-ISDBvA9Zo1yc8DkSTlgFGHnu5w.roa
File: 1-ISDBvA9Zo1yc8DkSTlgFGHnu5w.roa (raw, json)
Hash identifier: CC18iq+wAfbjKOREvNfNIip7tqqlyx9oHokyWrA8yvA=
Subject key identifier: F8:84:83:06:F0:3D:66:8D:72:73:C0:E4:49:39:60:14:61:E7:BB:9C
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 0189D07D951EE6E255829C4E70E5D424B278
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/1-ISDBvA9Zo1yc8DkSTlgFGHnu5w.roa
Signing time: Mon 07 Aug 2023 14:53:58 +0000
ROA not before: Mon 07 Aug 2023 14:53:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 193.164.4.0/24 maxlen: 24
185.93.70.0/24 maxlen: 24
185.93.68.0/24 maxlen: 24
193.164.6.0/24 maxlen: 24
193.164.7.0/24 maxlen: 24
93.177.102.0/24 maxlen: 24
2a05:f7c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d0:7d:95:1e:e6:e2:55:82:9c:4e:70:e5:d4:24:b2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: Aug 7 14:53:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8848306f03d668d7273c0e44939601461e7bb9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:89:e5:74:d2:66:51:d5:dd:99:28:0e:4e:18:
a6:e3:0b:c3:c4:b6:13:68:c3:3e:90:97:12:9a:a7:
6a:cd:a0:51:4c:ef:b0:1a:62:a0:08:ba:70:63:28:
44:a0:d5:43:3f:84:85:e3:5e:73:d2:16:3a:0d:dc:
33:ec:86:84:0e:c8:4b:0a:c1:11:13:76:57:d2:e6:
98:a7:bc:54:07:68:25:71:6e:5f:f4:87:09:99:34:
42:f4:9d:c0:2e:bc:61:a5:d1:3d:da:b5:48:42:6e:
4e:5e:37:fe:b2:63:39:57:05:2d:eb:13:2a:ec:28:
65:b6:04:43:8a:23:cd:ff:66:9e:ed:54:48:95:20:
f7:1a:c4:42:b8:06:29:96:07:f2:20:e5:f2:4c:3b:
b1:61:82:c0:20:6b:ac:60:b7:df:8b:3c:01:36:b7:
17:04:56:ff:56:d8:56:f7:09:4f:36:ff:20:ff:f5:
b7:7d:a0:c6:8c:b6:15:77:7a:a0:f5:4b:5a:7a:19:
c5:b2:48:43:76:15:2d:77:e5:49:0d:1a:bf:a8:29:
53:68:4e:e6:0d:1a:64:f8:a0:4e:70:5b:38:cc:e5:
ce:17:d2:0d:d8:fd:ed:d7:9f:d2:41:03:c3:fa:6e:
5f:8d:04:79:50:04:1c:ec:4b:67:47:62:b8:64:db:
3a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:84:83:06:F0:3D:66:8D:72:73:C0:E4:49:39:60:14:61:E7:BB:9C
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/1-ISDBvA9Zo1yc8DkSTlgFGHnu5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.102.0/24
185.93.68.0/24
185.93.70.0/24
193.164.4.0/24
193.164.6.0/23
IPv6:
2a05:f7c0::/29
Signature Algorithm: sha256WithRSAEncryption
80:a5:83:a0:cf:6c:1c:ce:0b:ab:ee:d4:99:a3:d3:29:bf:91:
99:60:ca:bd:81:21:14:e5:c9:be:f6:5a:7a:5c:c7:f4:3c:ee:
55:63:b9:73:7d:8d:25:1a:da:a1:f6:6e:11:63:84:82:6e:b6:
c0:c9:b8:9a:fe:bb:92:b7:5f:d8:20:64:32:33:82:b5:47:2d:
c0:56:f0:a1:29:e7:e8:b1:03:38:30:07:5e:b0:df:93:17:9f:
ed:e9:07:24:1c:e4:98:b7:7c:e8:4a:81:4b:eb:75:21:1a:93:
ae:01:67:35:cb:74:25:2b:9c:63:2c:ec:4e:5c:93:3c:11:ea:
eb:2a:de:39:74:7a:69:ca:e2:cc:eb:30:b9:21:31:a0:c4:6d:
e8:96:fd:eb:68:cd:48:ff:08:b0:e1:27:ff:01:7f:47:5f:0b:
7c:4a:a2:38:40:85:62:59:f8:6d:9e:f9:1a:97:89:46:65:a2:
c0:9f:53:df:0c:4f:d3:40:85:db:06:e2:95:df:68:22:52:ec:
5f:7c:75:09:06:b8:8f:4f:33:e3:8a:5c:c5:c5:e4:c6:66:6f:
cb:c4:08:d5:d9:18:48:3e:2a:39:9a:ba:74:e5:f8:fd:3e:11:
a7:05:bc:6c:d4:63:ab:0d:93:c9:20:7d:d5:4b:7e:39:cf:d2:
2e:4e:51:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-fra.rpki-client.org