Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/7s6zmv3ksyv9Uv00QlhZDfd6vGI.roa
File: 7s6zmv3ksyv9Uv00QlhZDfd6vGI.roa (raw, json)
Hash identifier: E9SxuGvmircKjqk6zo7h3WuG/eXFGDVnInyVZ2UPJQM=
Subject key identifier: EE:CE:B3:9A:FD:E4:B3:2B:FD:52:FD:34:42:58:59:0D:F7:7A:BC:62
Certificate issuer: /CN=66d9758b8c8c373583c0575166d62343600c7f01
Certificate serial: 01856E2F88D69EE6B61AB3164FAFEC70C370
Authority key identifier: 66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/7s6zmv3ksyv9Uv00QlhZDfd6vGI.roa
Signing time: Sun 01 Jan 2023 16:34:46 +0000
ROA not before: Sun 01 Jan 2023 16:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47302
IP address blocks: 194.126.200.0/24 maxlen: 24
149.126.0.0/21 maxlen: 21
185.174.216.0/22 maxlen: 22
91.206.24.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:88:d6:9e:e6:b6:1a:b3:16:4f:af:ec:70:c3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d9758b8c8c373583c0575166d62343600c7f01
Validity
Not Before: Jan 1 16:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eeceb39afde4b32bfd52fd344258590df77abc62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:76:bf:7d:7c:df:2e:c2:fa:2f:e7:59:15:c6:
93:f6:b0:52:15:d0:28:0f:5a:66:46:46:d6:2e:9e:
23:80:b7:83:37:6e:63:7e:c2:5b:b7:4f:9a:26:01:
75:84:04:b6:05:bf:5d:fb:22:e7:49:9c:64:19:a5:
ba:69:2e:a4:d3:3b:1f:59:d5:7e:11:c1:fa:a4:59:
86:21:ed:27:9b:fa:25:84:d5:06:65:ee:3f:03:fe:
b6:b8:83:d2:e6:70:de:93:ad:aa:76:f8:30:3b:85:
aa:87:5d:b1:8b:99:47:33:86:16:89:27:1a:c1:8f:
89:f7:b0:9b:38:13:25:3f:b6:81:dc:7a:c1:72:a3:
6c:5c:18:ed:fa:20:6a:bc:18:68:a2:ec:13:69:fc:
04:f7:1b:5c:a6:44:be:bc:35:bf:23:d0:13:7a:86:
69:b4:80:78:c4:9b:2c:ec:77:51:77:0d:24:4d:15:
e0:a2:98:3e:40:2d:96:1e:6f:8b:8f:3b:9f:c4:bf:
96:0a:0c:ae:ed:b3:6c:0e:76:e3:35:30:55:16:0a:
97:0a:35:59:96:c5:e1:70:36:41:2a:03:93:4c:5f:
a4:68:c5:25:06:49:f5:fc:72:f0:00:5f:78:8f:b3:
c4:9e:87:6c:1f:7f:6d:35:4d:e2:09:9e:98:fa:6d:
a8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CE:B3:9A:FD:E4:B3:2B:FD:52:FD:34:42:58:59:0D:F7:7A:BC:62
X509v3 Authority Key Identifier:
keyid:66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/7s6zmv3ksyv9Uv00QlhZDfd6vGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.24.0/23
149.126.0.0/21
185.174.216.0/22
194.126.200.0/24
Signature Algorithm: sha256WithRSAEncryption
36:84:25:e7:72:49:9c:e6:15:bb:ed:0d:9a:2f:7e:fb:77:1e:
27:db:69:38:6b:1c:2b:81:c3:88:40:d9:2b:26:9a:1c:69:5f:
72:6d:fd:ae:6f:80:d3:4a:d6:32:99:bd:78:d4:c7:2b:7b:cc:
09:9b:68:9a:82:c4:e6:fe:b4:e4:71:2e:11:72:6a:34:68:ac:
02:18:95:08:d4:6e:f7:f5:fe:27:cc:23:42:30:30:e2:9d:4b:
82:5c:0d:68:d2:60:26:e4:34:4f:06:87:5a:a9:d2:40:1b:93:
b3:6f:2c:e4:3a:17:d3:a3:a7:9e:8d:21:22:3b:95:7a:a1:43:
81:f7:1d:db:71:34:36:d2:2d:d4:6c:7d:25:e8:5f:30:21:9f:
19:57:44:64:17:d3:b2:88:3f:1a:2a:52:ea:30:e1:db:cb:c0:
e8:2a:07:ab:f0:9d:81:b9:43:bf:4c:1e:14:93:9d:5c:8f:fa:
33:ef:58:29:73:d8:b3:e1:58:7a:0f:75:55:85:96:f3:e1:52:
d4:79:ed:65:e2:f8:03:49:a1:0d:44:26:49:8a:47:ee:83:5d:
eb:a1:2d:f6:4e:ef:0d:ab:19:d9:f9:05:51:38:c6:89:9d:72:
f2:fb:0f:50:a5:a6:7a:2b:21:59:20:cf:64:20:82:af:e1:13:
6c:d5:9b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:50 2024 by rpki-client on console-ams.rpki-client.org