Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/Ilq3RYT0kQLHt7-CemrHHpsLOyU.roa
File: Ilq3RYT0kQLHt7-CemrHHpsLOyU.roa (raw, json)
Hash identifier: /9fTaA+VMrhb8fH6fE2RwzLQTNskdhoaoXmCyTmEXCw=
Subject key identifier: 22:5A:B7:45:84:F4:91:02:C7:B7:BF:82:7A:6A:C7:1E:9B:0B:3B:25
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 01857130A39BC6D71DF5E95553C09830BFCC
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/Ilq3RYT0kQLHt7-CemrHHpsLOyU.roa
Signing time: Mon 02 Jan 2023 06:34:51 +0000
ROA not before: Mon 02 Jan 2023 06:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 193.164.4.0/24 maxlen: 24
185.93.70.0/24 maxlen: 24
185.93.71.0/24 maxlen: 24
185.93.68.0/24 maxlen: 24
193.164.6.0/24 maxlen: 24
193.164.7.0/24 maxlen: 24
93.177.102.0/24 maxlen: 24
2a05:f7c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 09 Feb 2023 09:48:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:a3:9b:c6:d7:1d:f5:e9:55:53:c0:98:30:bf:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: Jan 2 06:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=225ab74584f49102c7b7bf827a6ac71e9b0b3b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fe:ee:43:0f:12:44:03:94:11:6f:5a:09:a7:
a9:ae:c1:47:81:2e:aa:f7:18:70:f2:ec:be:1f:c3:
1c:3f:71:01:3a:9e:75:d0:68:fa:72:1f:1e:71:a2:
8b:e4:a4:cc:d1:c8:fa:c4:7c:02:69:f2:b6:6d:07:
97:88:fa:5a:e1:08:e5:93:0e:a1:85:4e:70:0b:d1:
de:59:85:b0:a0:ca:f5:21:53:32:53:60:85:71:dc:
f9:8a:12:3a:b8:1f:a7:5a:2f:cc:a7:bd:5d:64:42:
99:13:86:36:29:77:9e:28:4d:89:55:9f:14:b4:7f:
cd:ee:9c:bb:52:59:14:7f:55:a9:12:ee:0d:c7:5c:
63:1a:39:68:54:e6:45:04:95:50:03:df:9a:13:ab:
bb:eb:b8:6a:64:b5:47:7c:12:0d:95:8c:56:11:16:
b1:95:03:6e:c2:bf:fa:fa:0a:52:fe:1e:20:aa:ef:
8a:9a:52:37:e7:e1:03:46:fc:a0:87:14:39:8a:b3:
6a:42:ff:e5:3a:d8:57:5e:32:94:8a:09:c2:2b:e2:
9b:4a:a2:98:a1:bd:29:1a:45:8f:71:64:fc:ae:f2:
82:b5:1d:b6:38:48:91:cc:b2:ae:ac:05:07:ae:21:
5a:b4:58:e6:8d:17:5b:68:3b:01:aa:4e:f8:05:67:
9b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5A:B7:45:84:F4:91:02:C7:B7:BF:82:7A:6A:C7:1E:9B:0B:3B:25
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/Ilq3RYT0kQLHt7-CemrHHpsLOyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.102.0/24
185.93.68.0/24
185.93.70.0/23
193.164.4.0/24
193.164.6.0/23
IPv6:
2a05:f7c0::/29
Signature Algorithm: sha256WithRSAEncryption
7a:28:dc:fe:82:ad:0d:01:b9:c0:10:22:45:5f:c2:11:cc:cb:
3e:60:de:d5:44:e3:ac:69:67:fb:dd:ac:44:6a:2b:ee:db:ec:
58:76:ae:38:3c:94:8a:2d:bf:f7:94:63:46:e2:bf:21:39:8b:
1f:d0:e3:bd:f5:34:ff:c4:22:5b:aa:46:89:02:17:26:fd:a2:
e6:ad:49:e9:f9:01:fa:28:70:a5:c3:0f:60:b7:91:eb:c0:4b:
da:b5:84:00:b3:60:ea:64:b6:49:c3:68:04:e0:48:70:94:31:
c8:81:dc:84:a7:f9:40:cd:80:0d:e0:28:01:a1:a7:3d:34:67:
3e:ad:a3:51:65:52:47:0c:a3:d2:da:25:7c:04:d3:9c:d8:d5:
47:57:9b:40:36:05:de:df:49:95:26:7b:bd:ad:4d:9a:a5:e5:
6e:b5:2f:72:69:9b:6e:55:de:c8:d4:4f:d1:e7:12:38:13:11:
bc:e1:7e:43:39:14:24:ab:f4:ca:3b:ab:2a:dd:b5:8c:13:c2:
a1:68:13:b2:38:ba:0f:46:2b:d4:64:ad:d6:9a:f5:40:c5:0b:
f8:06:e3:0e:85:d1:eb:f8:3d:a8:37:11:c5:e5:9c:20:69:29:
8f:d2:bb:72:ac:0b:b1:60:05:71:91:8b:eb:f2:60:5f:b9:0c:
dd:d8:e7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:12 2024 by rpki-client on console-ams.rpki-client.org