Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ss9hbHqpHwczaQsihZjYLK9Oh9s.roa
File: ss9hbHqpHwczaQsihZjYLK9Oh9s.roa (raw, json)
Hash identifier: LzoqzWCv+FowjcWTJi+3iQWnYsRFaT7hZ+kShqGM9c8=
Subject key identifier: B2:CF:61:6C:7A:A9:1F:07:33:69:0B:22:85:98:D8:2C:AF:4E:87:DB
Certificate issuer: /CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Certificate serial: 0186C678F67198FDE61417380235ACF60115
Authority key identifier: 64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ss9hbHqpHwczaQsihZjYLK9Oh9s.roa
Signing time: Thu 09 Mar 2023 13:04:21 +0000
ROA not before: Thu 09 Mar 2023 13:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57473
IP address blocks: 194.60.250.0/24 maxlen: 24
185.115.136.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c6:78:f6:71:98:fd:e6:14:17:38:02:35:ac:f6:01:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Validity
Not Before: Mar 9 13:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2cf616c7aa91f0733690b228598d82caf4e87db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8f:8a:53:53:f4:12:a0:eb:0d:8c:b9:1f:02:
ad:7f:a2:6e:5f:99:d1:fa:81:26:5e:a3:13:24:11:
7c:fa:7f:8c:52:8c:0f:96:36:51:83:72:e4:7e:f6:
69:e9:b4:cd:fd:66:a7:e1:13:92:20:4d:0b:b0:09:
b9:ce:80:e8:f8:77:ec:52:63:79:29:98:ec:1d:27:
70:c2:e5:f8:9a:19:76:4d:2c:05:9d:f7:a6:68:e0:
71:9b:a3:f2:33:d1:cb:1d:73:1b:a8:d4:70:17:99:
4c:ab:7d:be:8c:00:0b:60:4f:0b:f2:17:30:4d:9f:
de:26:56:b0:52:13:9c:06:ad:9d:f9:44:66:70:62:
17:a1:82:de:74:bc:bb:41:63:a4:e0:dc:89:58:75:
b0:e7:df:70:7b:83:18:7e:bc:d4:19:38:41:fe:30:
30:25:70:d5:54:5b:ce:2d:14:42:a5:5a:e9:5e:61:
f9:13:27:1a:e3:ff:b5:f3:ec:bd:b3:74:b7:cf:09:
a3:60:61:18:14:70:27:7a:47:10:13:9b:8c:38:f2:
16:d9:e3:ec:d8:23:25:5d:2e:5e:87:a7:26:0a:cf:
c4:d8:60:83:d2:2c:12:eb:84:f3:46:2d:2d:83:9e:
ea:14:fa:04:ba:90:5e:c1:51:43:73:27:2b:42:5d:
48:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CF:61:6C:7A:A9:1F:07:33:69:0B:22:85:98:D8:2C:AF:4E:87:DB
X509v3 Authority Key Identifier:
keyid:64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ss9hbHqpHwczaQsihZjYLK9Oh9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.136.0/22
194.60.250.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:14:65:12:d6:bb:4b:0a:79:8c:59:f0:29:ec:e4:fc:21:1c:
c4:03:79:7b:ec:16:28:9d:fc:db:c4:c6:9c:45:95:c3:5b:37:
e1:e6:10:55:67:5a:ca:b4:1f:bc:f4:10:a4:91:5c:08:6f:c0:
a7:40:e3:81:61:c4:89:f3:58:f1:15:d1:37:e9:7a:40:f2:73:
32:e6:f8:71:6e:3f:dd:f0:27:61:5b:e9:18:9f:3a:ae:a6:8a:
c2:c9:10:47:f7:00:cb:eb:20:cd:cf:62:49:13:ae:2b:1e:3f:
ca:22:2b:81:63:cd:35:c6:b7:ed:6e:8c:f5:d9:a5:e1:60:ea:
13:72:a7:21:08:6d:25:c2:af:95:5a:2b:1e:1b:e9:2f:ad:c3:
8b:ac:d1:d8:de:ed:bc:44:37:f6:55:94:a2:81:48:0b:b3:4a:
09:ae:d2:ba:2d:2e:a4:d7:60:8e:42:22:33:0f:43:7b:4a:17:
9d:2f:c2:bb:87:15:a8:de:b2:ae:9b:3f:84:08:89:3f:0e:e2:
71:b0:2c:e5:d4:d9:af:eb:ad:41:6a:e5:46:5b:2e:f6:cb:f9:
64:f6:b9:8b:20:2c:40:a0:fa:ad:6f:fd:97:89:a2:6f:20:57:
60:a1:cd:4e:89:0b:44:36:09:3e:91:6c:44:6d:65:e8:5a:99:
86:f0:23:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:47 2024 by rpki-client on console-fra.rpki-client.org