Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/vN_OoKNZhwbkvTnMsAPL9EcQE7c.roa
File: vN_OoKNZhwbkvTnMsAPL9EcQE7c.roa (raw, json)
Hash identifier: j/tsZQrtCqj1/8Q53h9T+PfCTmAZLGpvxVMlhyE0oqY=
Subject key identifier: BC:DF:CE:A0:A3:59:87:06:E4:BD:39:CC:B0:03:CB:F4:47:10:13:B7
Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Certificate serial: 01856DCAFB9AE42A4C43B72D2FE533CDB554
Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/vN_OoKNZhwbkvTnMsAPL9EcQE7c.roa
Signing time: Sun 01 Jan 2023 14:44:57 +0000
ROA not before: Sun 01 Jan 2023 14:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209281
IP address blocks: 137.59.56.0/23 maxlen: 23
185.216.188.0/23 maxlen: 23
93.115.196.0/22 maxlen: 22
185.107.0.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:fb:9a:e4:2a:4c:43:b7:2d:2f:e5:33:cd:b5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Validity
Not Before: Jan 1 14:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcdfcea0a3598706e4bd39ccb003cbf4471013b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d9:83:45:b1:35:c9:c9:8f:79:e2:a4:26:94:
ad:d1:3f:f3:0b:76:de:80:d7:87:7a:bb:e0:eb:e5:
45:47:29:0a:a9:e4:c0:32:3d:a1:dc:49:d4:22:b9:
2d:d9:14:d3:ab:d3:3a:28:95:20:33:2b:d9:6a:b3:
b1:0e:e6:7f:95:cc:0b:a1:7b:29:78:f4:7e:fb:99:
a4:86:f9:d8:7e:55:fa:d8:37:14:62:14:c7:88:32:
4f:71:27:21:06:6c:96:7f:e6:ea:d2:e6:45:f0:60:
06:cf:87:43:63:1c:43:e6:fe:42:07:8f:a9:38:f0:
d7:e3:a9:22:e1:6f:bd:c7:05:76:b0:9e:ce:4b:53:
54:c1:8f:26:4d:8b:d4:0c:51:a1:0b:fa:de:fc:10:
7b:f6:b1:20:15:52:e2:7a:e5:96:3b:00:88:62:67:
4b:63:27:a2:cd:67:24:10:6f:cd:6b:4a:31:02:6c:
2b:9d:d6:c9:e5:81:90:5d:20:67:81:d1:42:50:b1:
46:c3:95:a8:76:3f:3c:fd:9f:21:f4:a7:89:7c:30:
88:3d:ef:ca:47:fb:c4:7c:2e:ad:cd:92:18:b1:cc:
71:67:eb:62:cb:fe:a4:8b:86:c0:b0:a6:9c:7c:2e:
88:c0:61:78:56:88:16:f1:b7:3f:b1:a2:c8:92:7e:
b8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DF:CE:A0:A3:59:87:06:E4:BD:39:CC:B0:03:CB:F4:47:10:13:B7
X509v3 Authority Key Identifier:
keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/vN_OoKNZhwbkvTnMsAPL9EcQE7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.196.0/22
137.59.56.0/23
185.107.0.0/22
185.216.188.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:7a:0e:0a:88:d6:d9:50:00:59:e9:a1:26:c2:32:cd:4a:66:
d1:ab:d2:38:fc:70:66:d1:a4:76:0f:05:61:e8:a0:4e:aa:6a:
51:fd:d8:fb:e5:06:1c:14:32:3d:41:17:01:b4:6b:81:5c:4c:
b5:08:63:c9:19:25:25:73:e5:00:4a:bf:ab:73:58:02:80:5d:
19:aa:cf:b2:41:d2:de:32:10:11:a9:6a:68:8c:2b:6f:2c:ba:
b6:c9:89:c8:ce:4e:36:3b:a9:4c:3e:29:ea:b5:1f:58:14:94:
a7:9f:23:16:cc:bf:48:54:33:eb:0f:ea:2f:a0:71:b8:32:be:
27:40:67:fb:a2:2e:0d:65:0b:d9:f1:59:58:bf:f1:53:23:e3:
df:ea:2a:b4:fa:d3:78:29:5c:fc:d4:fe:6b:6b:98:11:72:f3:
01:4e:07:ed:ef:9a:18:56:db:83:dd:a3:10:4c:96:aa:69:fb:
44:47:92:e8:3a:5f:b3:9f:13:e1:ed:fa:10:19:2b:40:99:a5:
3c:da:d8:50:e1:38:d3:a6:1f:fa:04:3b:93:f6:ee:fd:aa:21:
97:57:86:ee:e2:16:c6:5b:df:f0:a3:db:54:2f:35:e0:ae:e5:
02:7b:65:b0:c8:b8:c2:b5:e1:d9:44:2c:bc:e7:e8:4f:94:64:
98:41:92:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:27 2024 by rpki-client on console-fra.rpki-client.org