Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/1nk1mUw8eu-9imtq84OM4_CE-JA.roa
File: 1nk1mUw8eu-9imtq84OM4_CE-JA.roa (raw, json)
Hash identifier: 47Xkcx0RcVCDHNSs8YjnnSWeH2hadkFDblIHR+7WB9U=
Subject key identifier: D6:79:35:99:4C:3C:7A:EF:BD:8A:6B:6A:F3:83:8C:E3:F0:84:F8:90
Certificate issuer: /CN=484855e70193968635ac4492ad702a8248e033e8
Certificate serial: 018573684EB72AFE464390F0B895FAF1BA3F
Authority key identifier: 48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/1nk1mUw8eu-9imtq84OM4_CE-JA.roa
Signing time: Mon 02 Jan 2023 16:54:53 +0000
ROA not before: Mon 02 Jan 2023 16:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44527
IP address blocks: 93.92.110.0/24 maxlen: 24
93.92.109.0/24 maxlen: 24
93.92.108.0/24 maxlen: 24
185.62.221.0/24 maxlen: 24
185.62.220.0/22 maxlen: 22
185.62.220.0/24 maxlen: 24
185.62.222.0/24 maxlen: 24
93.92.104.0/22 maxlen: 22
93.92.104.0/21 maxlen: 21
2a04:8040::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:68:4e:b7:2a:fe:46:43:90:f0:b8:95:fa:f1:ba:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=484855e70193968635ac4492ad702a8248e033e8
Validity
Not Before: Jan 2 16:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d67935994c3c7aefbd8a6b6af3838ce3f084f890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5d:0f:7f:3c:a2:10:4c:30:57:29:6d:4b:97:
d8:2c:65:c5:84:14:01:db:82:d4:70:43:06:11:c3:
d6:bf:74:8b:60:17:55:23:38:42:ea:a5:93:98:99:
67:bb:19:9a:55:b2:dc:4d:57:d8:6c:54:09:08:f9:
b8:58:50:7d:8c:f6:0c:96:4b:92:76:46:cd:46:51:
bb:e7:d3:70:32:54:6c:29:b0:13:bf:d7:f2:85:a0:
6e:75:45:a3:51:75:f7:40:02:01:85:2b:57:57:bc:
82:a8:9b:0f:e8:c9:37:7e:bf:91:ec:21:eb:7b:29:
65:df:ab:5a:e0:63:38:28:e1:68:62:e0:65:5e:af:
ef:dc:69:37:0a:84:82:fe:84:22:f7:ea:e0:ef:44:
11:17:b0:98:69:14:3a:ae:98:de:06:eb:ec:23:4e:
50:88:76:b6:27:e3:9d:c2:f5:9f:db:c5:ed:b9:ae:
e1:bf:46:86:6e:20:06:73:76:2d:f8:d5:bb:a2:6d:
72:37:99:cd:49:dd:fc:b8:3e:af:06:0f:b7:6e:76:
7b:a9:09:9f:69:66:c6:98:88:27:cd:6f:ba:dc:bc:
12:84:de:0d:ab:f1:dd:be:23:40:4c:a1:0f:47:87:
7f:58:bb:28:00:82:71:11:51:af:6d:af:28:94:db:
f0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:79:35:99:4C:3C:7A:EF:BD:8A:6B:6A:F3:83:8C:E3:F0:84:F8:90
X509v3 Authority Key Identifier:
keyid:48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/1nk1mUw8eu-9imtq84OM4_CE-JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.104.0/21
185.62.220.0/22
IPv6:
2a04:8040::/29
Signature Algorithm: sha256WithRSAEncryption
7e:cb:98:f4:eb:ec:be:f2:88:67:9f:d1:f6:81:6d:4f:d8:8e:
ea:e1:dd:15:ae:87:ec:3c:95:ea:d0:6f:05:14:a2:75:45:90:
37:b7:bf:6f:99:b7:c1:af:3c:92:75:ce:3c:97:2e:26:dd:3b:
d5:fa:b6:43:2f:c8:2a:7d:43:9d:93:0b:e3:0e:44:0f:5e:23:
b1:7e:68:75:d2:ab:89:3c:01:56:63:79:46:58:e9:35:8a:72:
62:a2:7f:c8:53:f3:5b:50:3c:7a:da:bb:91:96:09:e9:22:da:
78:fc:17:9a:4e:ac:da:9d:5c:7e:bf:2f:9b:fb:c4:08:b1:05:
df:38:dd:40:4e:ed:8c:39:1c:cb:de:1c:18:e8:9c:66:ec:73:
05:02:4f:a6:cf:53:79:30:62:52:f4:e6:5f:45:90:70:94:84:
18:36:d7:4c:08:a7:aa:bd:93:78:33:fb:b8:c5:5c:0a:4b:54:
f6:cf:66:85:18:bb:07:81:9f:76:7e:c7:03:53:77:d3:8f:5a:
3e:02:37:27:d7:a5:71:88:ad:88:33:e8:d4:25:f2:f7:2d:04:
1c:f9:bd:d4:3d:11:45:8c:7e:09:16:7d:5f:cd:5d:ba:39:ce:
12:67:7e:42:39:c2:75:29:47:f1:6b:a9:a2:cd:26:5c:2e:8b:
b1:32:43:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:13 2024 by rpki-client on console-fra.rpki-client.org