Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/kBC8aKlR9zgwAcpl-x-RErnUHkQ.roa
File: kBC8aKlR9zgwAcpl-x-RErnUHkQ.roa (raw, json)
Hash identifier: Rv8cFB1o/yPGlpMaa0N93cBgpn4cXajbwtsTWUXqJLU=
Subject key identifier: 90:10:BC:68:A9:51:F7:38:30:01:CA:65:FB:1F:91:12:B9:D4:1E:44
Certificate issuer: /CN=087aac674e4e57960201a34c2c0424861a7fb077
Certificate serial: 01918DEDE0F58CFBA0DA589943A5CD31E512
Authority key identifier: 08:7A:AC:67:4E:4E:57:96:02:01:A3:4C:2C:04:24:86:1A:7F:B0:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/kBC8aKlR9zgwAcpl-x-RErnUHkQ.roa
Signing time: Mon 26 Aug 2024 09:04:22 +0000
ROA not before: Mon 26 Aug 2024 09:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51960
IP address blocks: 64.190.141.0/24 maxlen: 24
91.222.24.0/22 maxlen: 22
185.78.72.0/24 maxlen: 24
185.78.73.0/24 maxlen: 24
185.78.74.0/24 maxlen: 24
185.78.75.0/24 maxlen: 24
193.9.123.0/24 maxlen: 24
193.84.1.0/24 maxlen: 24
193.84.6.0/24 maxlen: 24
193.84.11.0/24 maxlen: 24
193.84.16.0/24 maxlen: 24
193.104.5.0/24 maxlen: 24
195.206.116.0/22 maxlen: 22
195.242.108.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 02 Sep 2024 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8d:ed:e0:f5:8c:fb:a0:da:58:99:43:a5:cd:31:e5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087aac674e4e57960201a34c2c0424861a7fb077
Validity
Not Before: Aug 26 09:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9010bc68a951f7383001ca65fb1f9112b9d41e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f1:7a:a4:16:7d:d6:7e:03:38:26:2c:57:52:
18:ba:a8:f7:de:aa:46:18:30:d7:ed:ae:38:4b:48:
e7:e2:d3:a9:6f:eb:6b:0c:9a:00:ba:ea:59:ca:8c:
3a:35:f6:b3:62:4c:0d:5b:98:11:2d:1c:f7:92:1c:
f5:44:47:a5:bf:02:56:09:02:78:b9:5b:b2:b1:1a:
3b:cd:af:21:8b:f0:c8:d4:12:8e:6d:25:17:29:ce:
00:60:82:84:94:41:e4:1f:b7:76:d0:ac:c7:73:e9:
f5:84:9f:3b:b7:8d:01:3b:63:e1:b2:0c:da:5e:e8:
b5:0b:ae:64:f1:d7:e3:30:9f:19:f6:eb:5c:be:48:
e2:30:5b:a3:26:b8:aa:70:73:00:77:91:5e:70:47:
8e:50:7d:95:fd:25:e4:ee:96:7a:56:77:dd:ac:f2:
d2:53:29:0d:f2:1c:c0:d2:11:52:f9:29:fb:97:c5:
4c:f9:22:e6:46:68:6e:45:66:2f:d5:ad:c9:c1:9d:
34:71:01:19:eb:84:f5:a3:4e:19:e4:7d:83:27:ee:
6a:f7:9b:6d:b0:ae:ea:36:4f:91:d3:5b:de:08:1c:
ae:53:7a:b2:ae:f4:50:63:8b:30:fd:31:b8:66:9e:
54:9e:e0:56:e0:46:c5:ce:01:46:a2:83:c1:c7:49:
f6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:10:BC:68:A9:51:F7:38:30:01:CA:65:FB:1F:91:12:B9:D4:1E:44
X509v3 Authority Key Identifier:
keyid:08:7A:AC:67:4E:4E:57:96:02:01:A3:4C:2C:04:24:86:1A:7F:B0:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/kBC8aKlR9zgwAcpl-x-RErnUHkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.190.141.0/24
91.222.24.0/22
185.78.72.0/22
193.9.123.0/24
193.84.1.0/24
193.84.6.0/24
193.84.11.0/24
193.84.16.0/24
193.104.5.0/24
195.206.116.0/22
195.242.108.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:07:55:e0:88:be:67:8b:65:6d:f2:b2:cb:6a:e8:a6:1d:af:
57:15:fd:42:ea:e3:99:f8:9b:1d:d3:3c:27:4c:46:a3:4e:96:
94:d6:13:a4:6b:cf:e3:e9:27:0f:c0:f5:2d:9b:7d:64:b1:b9:
37:bc:9e:ec:a3:83:8f:d8:be:cf:18:2c:f1:33:5f:7c:89:5f:
9c:90:19:66:2c:b0:e5:83:16:81:42:e9:7c:99:40:32:45:a6:
3f:a4:04:2b:ad:2e:d3:30:c5:11:9d:f1:d3:7f:d7:d7:d9:8f:
25:c8:80:bf:63:2f:64:09:64:d4:fb:d4:1f:1b:76:80:92:ec:
9a:13:b5:1a:99:2d:3c:48:3c:4a:fa:80:cd:26:88:f6:6d:38:
cd:9f:ba:50:ce:d8:c4:de:9d:3f:0a:9b:96:e2:6b:a8:bd:7f:
1f:ec:28:20:46:9e:2b:7e:f1:95:d5:8d:d1:2d:35:10:5c:62:
7b:13:4d:f7:bd:77:7f:f6:39:d7:a5:62:d6:62:19:19:59:fe:
c9:45:a5:08:5c:74:6e:81:c1:a2:4d:a3:a0:69:bb:8d:f1:31:
a0:e5:bf:b3:45:7a:72:5a:64:d5:a7:60:77:f2:be:ea:32:22:
4c:af:b1:b4:3f:82:53:89:30:b8:5e:f7:d0:1a:ed:ff:4b:5d:
c3:85:62:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 15:00:47 2024 by rpki-client on console-fra.rpki-client.org