Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/nZLGnf8tBrgECsjveyUEYrDl1pE.roa
File: nZLGnf8tBrgECsjveyUEYrDl1pE.roa (raw, json)
Hash identifier: TIJs0Rb+P3hWLjF6eXoeSZ1oYx3Er/IJyUW/qi35ypA=
Subject key identifier: 9D:92:C6:9D:FF:2D:06:B8:04:0A:C8:EF:7B:25:04:62:B0:E5:D6:91
Certificate issuer: /CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Certificate serial: 018C8642AF2C996A7A0747C4BDEAEC610DA0
Authority key identifier: 69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/nZLGnf8tBrgECsjveyUEYrDl1pE.roa
Signing time: Wed 20 Dec 2023 08:06:06 +0000
ROA not before: Wed 20 Dec 2023 08:06:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50187
IP address blocks: 91.240.102.0/23 maxlen: 23
91.240.102.0/24 maxlen: 24
91.240.103.0/24 maxlen: 24
195.93.149.0/24 maxlen: 24
195.93.148.0/24 maxlen: 24
195.93.148.0/23 maxlen: 23
185.234.230.0/24 maxlen: 24
185.234.231.0/24 maxlen: 24
185.234.228.0/22 maxlen: 22
185.234.228.0/24 maxlen: 24
185.234.229.0/24 maxlen: 24
212.67.28.0/24 maxlen: 24
212.67.28.0/22 maxlen: 22
212.67.29.0/24 maxlen: 24
212.67.31.0/24 maxlen: 24
212.67.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:86:42:af:2c:99:6a:7a:07:47:c4:bd:ea:ec:61:0d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Validity
Not Before: Dec 20 08:06:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d92c69dff2d06b8040ac8ef7b250462b0e5d691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:95:2e:7c:65:38:01:e7:4c:de:45:7c:fd:33:
df:72:67:32:90:89:2e:fb:19:40:f6:de:a4:45:55:
62:91:c1:c3:19:5d:c4:5e:b0:5f:c0:9d:d3:88:96:
d2:2c:a5:a3:8e:0f:35:ec:79:8e:69:a4:a9:0a:bc:
5f:ef:55:de:83:eb:fb:69:8d:8f:2c:ab:a1:4a:c8:
74:93:94:98:c5:2d:d0:d4:f2:65:e6:d3:88:3a:9e:
6a:07:48:6e:63:c8:9c:a9:e6:71:2b:63:3f:7d:8b:
09:2b:c6:7f:e6:85:e2:67:cd:61:ad:75:2a:ce:62:
5d:e1:78:9f:78:a9:e1:de:05:f3:17:e3:eb:22:06:
33:96:fd:dd:4b:de:b3:a3:2c:66:64:d9:90:30:21:
e7:4c:22:64:9f:59:2e:45:05:51:42:2a:e3:83:56:
72:1a:de:8f:1f:fb:f8:dd:af:5b:a8:08:8d:11:17:
0c:b3:1f:7e:7b:49:66:4c:4f:14:bd:a2:94:26:de:
cd:a8:84:df:d8:99:bf:ac:7d:ed:7d:fb:d9:87:9a:
b2:e3:b9:0d:d1:54:5f:0f:bc:5a:18:72:97:49:bb:
05:a4:79:68:9d:0c:f1:46:ef:f6:07:7a:72:50:50:
c3:1c:f2:68:7e:81:98:a1:2a:fc:35:38:62:f6:c1:
dc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:92:C6:9D:FF:2D:06:B8:04:0A:C8:EF:7B:25:04:62:B0:E5:D6:91
X509v3 Authority Key Identifier:
keyid:69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/nZLGnf8tBrgECsjveyUEYrDl1pE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.102.0/23
185.234.228.0/22
195.93.148.0/23
212.67.28.0/22
Signature Algorithm: sha256WithRSAEncryption
80:ef:e7:d3:50:73:96:4d:54:f2:a9:29:56:2e:5c:b1:eb:65:
14:f4:f8:a9:51:15:0e:6d:0c:f2:25:e7:4c:40:e3:94:0a:08:
6f:70:ed:d3:16:04:b8:00:03:94:cf:3f:79:5b:98:80:70:79:
4e:2c:ca:29:52:02:2e:12:00:01:16:95:af:b1:b2:df:98:7b:
c0:c0:87:a9:12:3a:86:50:2b:33:b0:ef:9e:a9:8d:b8:23:4d:
35:93:da:6f:dd:85:54:a1:df:0f:d7:54:68:30:42:11:b3:ee:
2f:1c:72:46:bf:85:64:97:f7:c2:75:52:41:7c:c1:f0:2a:e3:
3d:4a:c3:97:de:96:e4:12:43:35:cf:6b:76:23:84:44:ad:12:
21:0f:87:e4:10:96:63:dd:76:cd:0c:45:70:77:7b:c8:e6:1a:
0a:da:7f:e5:67:1f:30:fd:bb:1c:68:d4:43:59:7a:b6:da:78:
f0:48:b5:79:e1:ad:24:14:6a:0b:84:05:65:bb:01:67:7f:2d:
5f:e0:ab:79:32:d1:28:f6:fe:c6:a9:4a:79:92:f8:f5:07:83:
c6:eb:c5:19:32:d8:ae:2f:5d:66:dc:d6:7e:15:c8:bd:16:d6:
70:b2:ea:c0:b7:d2:82:92:a0:89:b5:02:cb:ae:08:24:d0:46:
2b:9c:bc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:24 2024 by rpki-client on console-ams.rpki-client.org