Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/a1V1QnpL-XsDiXK-M3yA3Ajdpzk.roa
File: a1V1QnpL-XsDiXK-M3yA3Ajdpzk.roa (raw, json)
Hash identifier: Thulz7luKUPk40rQRP2TR6CeQ1DOQhwnaou7s+forz8=
Subject key identifier: 6B:55:75:42:7A:4B:F9:7B:03:89:72:BE:33:7C:80:DC:08:DD:A7:39
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01856ECB7E5FFC4E9445AD3499687CB0304A
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/a1V1QnpL-XsDiXK-M3yA3Ajdpzk.roa
Signing time: Sun 01 Jan 2023 19:25:08 +0000
ROA not before: Sun 01 Jan 2023 19:25:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61412
IP address blocks: 93.119.104.0/24 maxlen: 24
93.119.107.0/24 maxlen: 24
188.240.210.0/24 maxlen: 24
188.240.221.0/24 maxlen: 24
89.33.192.0/22 maxlen: 22
89.33.192.0/24 maxlen: 24
89.33.193.0/24 maxlen: 24
89.33.194.0/24 maxlen: 24
89.33.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Mar 2023 12:04:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:7e:5f:fc:4e:94:45:ad:34:99:68:7c:b0:30:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 19:25:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b5575427a4bf97b038972be337c80dc08dda739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f1:cd:a8:80:e9:35:32:33:55:9d:bf:db:6b:
5f:4e:1f:89:44:d6:29:da:c7:b2:a9:7d:fd:ae:3d:
48:79:6c:2c:45:52:51:eb:63:9b:09:a8:5d:20:8a:
df:64:60:e5:35:27:1c:6f:39:2d:ab:8a:0e:41:17:
44:e6:52:90:d5:e0:99:9e:d1:7a:5a:0c:df:f2:90:
23:fd:10:a3:b3:6d:13:dc:d4:bd:de:05:31:83:85:
2b:88:9c:13:74:40:a2:dd:e9:a8:0a:f8:3d:35:e0:
df:23:62:51:8c:59:9c:e5:75:4c:7f:7a:4f:22:18:
a5:2a:a9:e2:3d:21:1f:31:58:10:95:7a:43:b4:e8:
8a:88:1e:9f:0c:3f:10:7e:be:20:85:c6:c6:2b:72:
cf:48:ff:16:6b:69:02:f9:2e:78:88:33:46:43:14:
1a:27:99:ed:a8:8e:5f:ee:36:58:70:b9:7e:9e:3a:
85:3f:d8:72:83:8e:10:30:13:e0:a5:cd:47:1e:b3:
87:6c:b6:1a:d1:78:9c:d9:34:63:b7:88:0b:e4:59:
67:33:de:bf:ef:fc:34:a3:d6:5b:2d:6d:8f:66:e2:
7c:17:20:a9:47:a2:dd:9e:c7:9d:84:a8:5e:a8:0d:
ff:36:a9:4f:07:51:dd:6c:57:14:0a:83:fd:8b:fe:
86:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:55:75:42:7A:4B:F9:7B:03:89:72:BE:33:7C:80:DC:08:DD:A7:39
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/a1V1QnpL-XsDiXK-M3yA3Ajdpzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.192.0/22
93.119.104.0/24
93.119.107.0/24
188.240.210.0/24
188.240.221.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:b5:cd:3a:14:00:82:70:17:67:fa:ce:4b:36:24:6f:a1:29:
65:3f:a6:c5:13:01:1e:37:48:c3:b3:84:9d:50:df:65:16:e2:
29:00:64:7a:3f:31:06:7e:ce:85:fe:27:4a:a3:50:33:18:25:
1d:6b:91:55:dd:8d:bd:80:6b:5a:ec:86:0c:7f:24:06:43:96:
0f:46:47:b6:9e:23:ce:cf:81:6c:2a:24:b1:d2:87:a1:9b:05:
d8:72:5b:da:3f:7b:c3:05:e0:89:33:78:be:0b:61:8b:c6:7e:
9c:cc:5e:94:af:96:b0:57:e1:e2:96:8a:d3:b5:06:9f:23:37:
51:73:2e:56:9a:9f:3e:4a:71:a7:82:4a:4c:f6:3c:2c:fa:4a:
b0:05:0d:68:b7:83:d5:09:6c:40:56:2c:c9:49:2f:08:ad:b1:
05:d3:f5:f8:4f:8f:cf:a5:9b:73:9d:bb:c3:74:26:dc:69:38:
82:1d:6f:47:5b:14:f8:44:3f:7d:04:36:f8:32:76:ec:f7:4f:
f2:1c:61:bf:b3:4c:40:1a:d1:6e:3a:d2:9c:3d:ca:73:df:1e:
0f:6f:55:fc:53:64:0c:92:c8:52:37:10:ad:54:91:ae:04:4c:
fb:5b:87:85:67:5e:e5:ad:6f:a7:88:2e:8d:6f:98:12:f1:c8:
a4:f2:3c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org