Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/796vgQnIYZB2ejGunJMWQa6beAc.roa
File: 796vgQnIYZB2ejGunJMWQa6beAc.roa (raw, json)
Hash identifier: aRGNFpqkLZJ3t5/f5BsvlrYBQorFaKh9JdTQX/gZMXQ=
Subject key identifier: EF:DE:AF:81:09:C8:61:90:76:7A:31:AE:9C:93:16:41:AE:9B:78:07
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 01866429F8DC78D601085B351E821F2832B4
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/796vgQnIYZB2ejGunJMWQa6beAc.roa
Signing time: Sat 18 Feb 2023 10:55:17 +0000
ROA not before: Sat 18 Feb 2023 10:55:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209604
IP address blocks: 185.255.92.0/24 maxlen: 24
185.255.93.0/24 maxlen: 24
185.93.70.0/24 maxlen: 24
185.93.68.0/24 maxlen: 24
185.93.69.0/24 maxlen: 24
185.255.94.0/24 maxlen: 24
185.255.95.0/24 maxlen: 24
185.132.126.0/24 maxlen: 24
93.115.10.0/24 maxlen: 24
93.177.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:64:29:f8:dc:78:d6:01:08:5b:35:1e:82:1f:28:32:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: Feb 18 10:55:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efdeaf8109c86190767a31ae9c931641ae9b7807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:57:53:60:87:a8:9e:a1:9b:1d:b7:39:d7:28:
38:0d:ae:ce:ba:54:fc:91:98:42:d3:1b:1b:de:33:
86:72:0d:35:d7:6f:6f:ee:de:ef:80:ff:73:65:33:
92:2a:a6:26:a6:70:f2:89:ca:db:cf:1b:3b:e8:d2:
96:a1:ed:e6:29:08:29:77:4c:8a:da:01:a3:10:b5:
e8:4a:2f:80:53:22:23:06:55:74:c2:5f:6b:8f:31:
bd:7b:1d:19:bf:82:57:05:d7:a9:3d:dd:3f:f7:01:
65:b6:ab:5c:61:bd:a4:33:38:a5:3e:56:4f:6e:8b:
02:04:74:91:73:88:eb:4e:da:cd:be:5f:d7:9d:25:
0f:5c:3a:50:98:ca:f3:21:ef:66:68:7f:4d:1a:06:
c3:21:56:98:ce:f9:9a:6c:7e:7e:52:0a:18:e7:83:
be:81:6c:ff:0c:e1:4c:ae:1d:a7:16:d5:5f:96:d0:
37:00:5d:6c:74:d9:fa:3a:68:08:ad:80:29:5d:81:
ae:ec:31:f5:b3:3c:90:00:6d:05:b4:7b:92:b8:a1:
79:bf:ed:d1:9e:34:93:40:14:39:2c:09:ed:5d:30:
28:93:2d:fa:37:ca:59:5a:57:39:11:9a:e9:09:eb:
bd:db:91:47:39:c4:cf:14:7a:e3:bb:ab:6c:b4:18:
41:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DE:AF:81:09:C8:61:90:76:7A:31:AE:9C:93:16:41:AE:9B:78:07
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/796vgQnIYZB2ejGunJMWQa6beAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.10.0/24
93.177.101.0/24
185.93.68.0-185.93.70.255
185.132.126.0/24
185.255.92.0/22
Signature Algorithm: sha256WithRSAEncryption
25:2e:bb:2f:64:6b:67:da:9a:2d:b3:5f:fe:59:09:37:e1:5a:
b1:64:ca:c7:51:ac:b4:1e:fe:33:5a:54:7e:07:73:93:6f:c8:
3c:fe:e4:1b:38:27:7a:86:43:b5:ca:11:00:0d:07:1d:0c:49:
8e:a8:ff:fa:5c:b3:e5:7f:b4:78:f8:a7:a7:9b:78:84:0d:70:
2b:0d:e3:c7:95:f3:77:3f:33:2e:d6:53:90:20:a1:37:dc:75:
54:5e:0f:27:f4:2d:75:69:33:63:6b:48:4f:33:a8:ed:d6:0c:
b7:f4:40:fe:c4:4c:17:d5:8e:70:44:b8:8f:f8:ff:46:ab:55:
98:26:ca:eb:fb:f5:b2:6d:44:36:1b:76:2a:7b:16:ee:ea:80:
d5:67:90:7b:1f:3d:9b:8a:f8:f7:5b:ba:4e:af:5e:18:eb:f2:
8e:3a:8b:7c:8c:d7:d6:1a:1e:b5:ce:81:65:8f:fa:66:a3:23:
c5:24:8b:02:1f:45:b6:21:e0:de:4e:da:25:6c:b1:6f:84:48:
f0:30:81:f1:ac:4c:f7:d2:84:5b:b6:ad:52:1e:a6:4e:da:6b:
c8:c0:b9:1f:8b:22:ad:a6:f5:e4:ff:c7:e2:7c:68:cf:be:60:
ea:d0:3c:a9:0d:14:71:fd:0f:a4:14:91:84:ff:ad:38:5d:25:
12:19:fe:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-fra.rpki-client.org