Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/2df6Jp7EwLIEfAyR9rovJLwuFqY.roa
File: 2df6Jp7EwLIEfAyR9rovJLwuFqY.roa (raw, json)
Hash identifier: spRJ2ZLDrB//QILQAo34LJZaddOoMP4UIejtp3MI/3M=
Subject key identifier: D9:D7:FA:26:9E:C4:C0:B2:04:7C:0C:91:F6:BA:2F:24:BC:2E:16:A6
Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial: 0188F8076D99D3BFC48642C2C154ED1C8320
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/2df6Jp7EwLIEfAyR9rovJLwuFqY.roa
Signing time: Mon 26 Jun 2023 14:06:56 +0000
ROA not before: Mon 26 Jun 2023 14:06:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210848
IP address blocks: 185.193.88.0/24 maxlen: 24
185.156.74.0/24 maxlen: 24
185.156.73.0/24 maxlen: 24
92.63.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f8:07:6d:99:d3:bf:c4:86:42:c2:c1:54:ed:1c:83:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Validity
Not Before: Jun 26 14:06:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9d7fa269ec4c0b2047c0c91f6ba2f24bc2e16a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:24:87:23:3d:1c:24:d5:58:b6:db:fa:3b:51:
d8:08:80:c2:a7:4f:e0:06:b3:ad:82:c5:20:3c:9d:
15:d8:a0:23:62:bb:3e:52:c7:41:f5:9c:d7:38:38:
85:9a:99:4d:eb:3c:8b:db:b3:8c:60:83:ba:ae:ad:
dd:47:6b:8d:a8:06:cd:23:82:60:22:88:ce:28:0e:
1a:f8:04:66:95:df:37:29:83:24:b5:28:e0:36:ec:
e6:e3:99:c5:22:53:e6:a1:3c:79:4f:1b:f0:a1:cf:
9e:db:d0:f3:5d:ed:59:80:f6:54:9f:ee:3f:15:f2:
8a:4f:24:db:3b:ad:95:f5:81:e4:89:21:32:70:ae:
89:d5:57:76:b9:78:64:3a:f2:0b:cc:e8:dc:2d:ce:
9c:51:be:b7:40:5f:ce:72:54:25:b8:cb:10:0a:d0:
89:65:04:b1:46:49:48:4c:49:e5:03:dd:e2:a4:f8:
a2:55:f3:24:51:9d:4d:16:6f:54:70:37:45:26:ef:
67:af:bb:09:c4:d2:5d:86:91:4b:7a:32:b9:b9:ec:
30:8a:65:d1:83:3d:58:7d:6e:0d:34:37:c8:55:dd:
a6:c9:4a:33:7b:32:9c:00:04:0f:ae:b8:ed:02:1a:
07:5e:b2:7d:5d:94:7b:f6:d4:a3:66:00:08:3e:ef:
7e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D7:FA:26:9E:C4:C0:B2:04:7C:0C:91:F6:BA:2F:24:BC:2E:16:A6
X509v3 Authority Key Identifier:
keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/2df6Jp7EwLIEfAyR9rovJLwuFqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.197.0/24
185.156.73.0-185.156.74.255
185.193.88.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:ad:fe:49:6a:dc:94:24:02:3e:78:b4:f3:61:66:c6:dc:77:
c4:d0:49:14:11:09:e8:2e:96:f5:79:ee:08:60:b3:15:f4:ff:
d6:9e:40:d5:86:19:17:e8:f7:c6:61:f5:71:7e:d7:56:44:eb:
77:89:0a:66:31:bd:9a:b6:9e:21:e2:88:89:4f:c8:63:a9:bc:
0b:81:e6:b1:d5:c9:c1:ee:32:bc:25:c8:02:b8:b3:e6:7f:c5:
b4:29:ad:b8:3f:5a:8e:8d:b3:c5:c8:7b:39:39:32:df:c1:be:
9c:12:68:d3:f2:a1:16:69:d7:39:8d:c7:7a:48:3d:45:c8:6e:
24:2f:a9:69:cd:52:95:b6:55:68:aa:01:dc:6e:a1:0e:6e:3e:
19:8d:dc:07:e6:e0:f7:f5:9a:7e:3c:06:45:2b:c7:d0:25:d2:
96:46:d8:f1:b0:fb:e6:00:3b:7c:c8:90:7e:a4:a3:4c:5c:7e:
6a:4b:5d:c8:0b:57:75:85:72:3b:a2:8f:f9:d9:66:05:4d:3e:
93:52:7d:9f:8d:fd:2d:62:97:7e:ed:4d:31:44:35:84:aa:a7:
7b:97:70:79:7a:6a:ee:1a:bb:7c:5e:8d:62:f2:2a:ab:b3:bf:
cb:22:51:fc:1f:7e:cc:35:03:da:7d:bf:84:ff:80:b3:bc:62:
2a:c6:2f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:29 2024 by rpki-client on console-ams.rpki-client.org