Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/1-89ip32kijlhTqafFAFJydbI3h8.roa
File: 1-89ip32kijlhTqafFAFJydbI3h8.roa (raw, json)
Hash identifier: iyYRSL+tcqETR80y3CpF0PCn8NqEOdkpb7UfsUuZCZc=
Subject key identifier: FB:CF:62:A7:7D:A4:8A:39:61:4E:A6:9F:14:01:49:C9:D6:C8:DE:1F
Certificate issuer: /CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Certificate serial: 01856D2F3EC1B93C5D250AF3BDBAFD3D1E3F
Authority key identifier: 4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/1-89ip32kijlhTqafFAFJydbI3h8.roa
Signing time: Sun 01 Jan 2023 11:54:50 +0000
ROA not before: Sun 01 Jan 2023 11:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206873
IP address blocks: 185.173.178.0/24 maxlen: 24
185.173.179.0/24 maxlen: 24
185.173.176.0/24 maxlen: 24
185.173.177.0/24 maxlen: 24
194.150.214.0/24 maxlen: 24
194.150.215.0/24 maxlen: 24
194.150.214.0/23 maxlen: 23
194.150.235.0/24 maxlen: 24
194.150.234.0/24 maxlen: 24
2a0b:6900:7::/48 maxlen: 48
2a0b:6903:fdb::/48 maxlen: 48
2a0b:6900:2::/48 maxlen: 48
2a0b:6903::/48 maxlen: 48
2a0b:6900:185d::/48 maxlen: 48
2a0b:6900::/48 maxlen: 48
2a0b:6900:1::/48 maxlen: 48
2a0b:6900:4::/48 maxlen: 48
2a0b:6900:daf::/48 maxlen: 48
2a0b:6900:5::/48 maxlen: 48
2a0b:6900:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 22 Aug 2023 12:32:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:3e:c1:b9:3c:5d:25:0a:f3:bd:ba:fd:3d:1e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Validity
Not Before: Jan 1 11:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbcf62a77da48a39614ea69f140149c9d6c8de1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3d:c4:d9:d1:55:39:39:57:f3:af:a7:4f:64:
2b:14:1c:f1:91:33:df:51:a0:bb:3e:54:2c:bd:0f:
a0:7e:f0:1b:6e:d2:ba:77:f1:f0:09:03:ce:be:ce:
36:4a:c7:f2:92:84:22:03:8f:03:b9:ba:61:4c:4a:
aa:cf:77:5e:85:71:59:3c:ad:e5:00:92:24:64:de:
02:a4:bf:6e:4f:c7:f0:a0:9f:e9:35:17:16:3e:1c:
a2:d9:40:11:c0:58:c5:8a:13:f5:d5:16:ef:4a:2e:
56:84:e2:c9:e8:ad:4a:20:23:f5:47:33:8b:9e:26:
54:02:4c:79:1b:c8:f4:ca:e7:be:f0:43:a4:6c:70:
08:e0:e3:26:06:a4:fd:e5:d6:e1:3a:a1:8b:a6:1d:
ab:71:85:7e:d4:bc:df:63:0c:a3:19:50:ea:41:24:
9f:ca:87:50:b9:20:4b:28:68:fc:ff:d0:b5:ce:b5:
0e:51:20:67:73:af:e4:a6:31:f6:97:e5:5b:9c:4b:
ab:08:f4:36:b9:59:38:a1:95:51:ff:3f:31:3e:3b:
4c:1b:cd:82:00:06:e8:1d:b5:61:9b:f6:04:40:75:
8b:da:92:22:a3:3c:a4:bc:14:b3:ea:e8:1a:22:b5:
a4:2c:4b:22:e2:cb:27:d5:54:7a:29:87:18:7d:5d:
1e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CF:62:A7:7D:A4:8A:39:61:4E:A6:9F:14:01:49:C9:D6:C8:DE:1F
X509v3 Authority Key Identifier:
keyid:4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/1-89ip32kijlhTqafFAFJydbI3h8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.176.0/22
194.150.214.0/23
194.150.234.0/23
IPv6:
2a0b:6900::-2a0b:6900:5:ffff:ffff:ffff:ffff:ffff
2a0b:6900:7::/48
2a0b:6900:daf::/48
2a0b:6900:185d::/48
2a0b:6903::/48
2a0b:6903:fdb::/48
Signature Algorithm: sha256WithRSAEncryption
3e:87:2b:7f:8c:f2:b8:59:de:60:4d:5c:53:e6:58:c8:2d:49:
73:9d:0e:6c:35:51:1c:2e:0a:85:4a:90:9b:f2:44:ae:74:24:
16:90:33:96:1b:a6:53:2a:b0:a1:be:8f:f7:3b:13:ec:23:a7:
de:40:04:32:8f:8b:64:fe:1c:42:5d:1d:4a:0d:24:94:f6:c8:
85:5c:eb:8a:a2:e1:f7:14:5d:f8:2e:0d:24:92:ce:1b:84:9f:
ce:d2:ed:9e:a4:bd:43:0e:70:5d:18:6b:bc:24:ec:d8:e8:97:
54:ce:4e:b3:cf:5f:ff:27:23:41:30:32:7b:29:63:be:95:32:
4c:8c:e2:56:52:1c:b4:c6:54:68:15:45:c0:72:72:7f:d2:19:
49:1b:af:88:d2:6c:7b:55:39:8f:1c:e4:6e:c0:c9:5c:60:3e:
2e:34:44:d7:ae:cf:e0:28:fe:01:aa:43:6d:a6:1c:39:df:d0:
23:33:90:f8:e3:f1:45:be:48:59:a7:86:a0:0c:15:97:20:13:
5d:6f:d1:a5:5a:fd:d6:0d:4d:72:17:0c:02:d1:3b:d0:ac:0a:
d2:21:2c:15:80:fb:54:eb:bc:52:06:96:af:c3:80:3f:09:69:
61:84:b3:08:22:ed:a7:72:e1:94:84:f8:b8:57:61:2c:43:53:
d0:fd:0b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:51 2024 by rpki-client on console-fra.rpki-client.org