Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/_CoEL7Yu1DylzLck1-Gf-sSbdsY.roa
File: _CoEL7Yu1DylzLck1-Gf-sSbdsY.roa (raw, json)
Hash identifier: 2JrfgQyGeA5jhmyQ2WYgTPj9lsiIIlfgbL6EDpVJdHc=
Subject key identifier: FC:2A:04:2F:B6:2E:D4:3C:A5:CC:B7:24:D7:E1:9F:FA:C4:9B:76:C6
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018BD54C6DBBB81DC1A9B7271B622C93BFC0
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/_CoEL7Yu1DylzLck1-Gf-sSbdsY.roa
Signing time: Wed 15 Nov 2023 23:23:57 +0000
ROA not before: Wed 15 Nov 2023 23:23:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 185.177.24.0/24 maxlen: 24
95.214.176.0/24 maxlen: 24
91.238.93.0/24 maxlen: 24
212.115.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Dec 2023 22:27:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d5:4c:6d:bb:b8:1d:c1:a9:b7:27:1b:62:2c:93:bf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Nov 15 23:23:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc2a042fb62ed43ca5ccb724d7e19ffac49b76c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:20:23:01:f7:64:2c:a6:36:6d:a6:f4:02:59:
ae:89:da:a7:19:3f:52:d1:f8:ec:1b:87:d0:5d:2f:
b6:5d:05:ea:8a:66:49:a2:ec:55:ed:98:e9:f0:56:
fe:67:bb:7e:ae:97:94:cb:76:5c:a8:8b:9c:02:76:
0a:fd:5f:e0:c0:8e:30:94:35:cc:ff:73:44:c8:0c:
bf:da:5b:3d:13:be:8e:f4:ac:a0:89:99:3e:6b:74:
b2:ab:f5:d6:14:e3:e6:e8:24:d3:62:cf:88:eb:da:
32:18:33:cf:ad:37:ee:e7:08:a3:7a:38:ff:40:94:
f6:72:8c:cb:76:f7:ad:96:8a:52:d8:82:e8:ac:f2:
a5:09:87:1b:6b:43:54:9d:fe:e8:73:34:e7:29:27:
2e:52:81:29:87:70:e8:37:73:10:ae:1c:8e:80:20:
3f:49:8c:b3:ec:f9:be:34:62:28:19:a7:61:9d:cb:
07:27:0d:db:e9:cb:b2:f2:6b:91:12:bc:78:98:68:
7d:6b:fb:7d:47:00:74:63:b6:fd:d7:d2:df:ff:88:
df:28:d5:6c:ee:1c:5f:4e:f9:8e:13:31:a1:75:f4:
4e:fa:f6:3a:aa:55:92:19:c3:8c:7a:5b:a1:e3:2f:
99:3e:fd:ab:63:af:41:c5:f5:9d:cb:b7:8b:37:6d:
28:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2A:04:2F:B6:2E:D4:3C:A5:CC:B7:24:D7:E1:9F:FA:C4:9B:76:C6
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/_CoEL7Yu1DylzLck1-Gf-sSbdsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.93.0/24
95.214.176.0/24
185.177.24.0/24
212.115.126.0/24
Signature Algorithm: sha256WithRSAEncryption
76:0a:6e:f5:e6:46:65:f9:97:ae:6c:98:1e:15:07:b3:90:4d:
11:6a:41:58:97:81:9d:41:71:94:ad:ef:fc:07:e1:f3:bb:12:
41:6d:7d:34:3f:8d:74:c3:a1:26:af:9b:1d:f6:c9:43:41:46:
5e:37:6d:d1:60:fc:2b:c8:94:1a:41:f0:9a:67:74:05:57:24:
f5:ee:28:e2:ee:09:e5:a4:48:e0:ef:2c:29:58:df:73:74:10:
88:a3:bf:2d:16:24:9a:be:23:7b:58:9b:7e:ae:66:45:d8:f6:
7e:6d:cc:97:0a:0f:64:d0:22:de:5e:65:08:65:1d:eb:63:a6:
e6:90:31:4f:15:6a:09:da:94:2d:d4:92:28:a0:cf:51:01:f8:
f7:fd:e2:fb:32:24:56:f3:a6:8b:50:01:08:eb:9e:0c:da:64:
74:04:e1:d0:8e:03:a4:dc:56:28:29:c1:f8:58:ac:57:e6:78:
5a:b7:e4:8a:07:e6:73:ae:da:74:2c:5f:59:e3:c9:2c:45:89:
8e:ef:4d:57:86:47:d7:d5:3d:a6:59:bc:75:e6:18:c8:4a:8b:
86:a0:f0:01:f1:3d:79:d6:3b:19:07:2e:de:9a:3e:e4:51:94:
8d:7c:90:52:d5:53:d9:45:1b:06:d9:0a:b4:a6:eb:af:8b:9d:
08:6b:25:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:43 2024 by rpki-client on console-ams.rpki-client.org