Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/N7q2Vz1tgH2PCcLRuZmtru46BWY.roa
File: N7q2Vz1tgH2PCcLRuZmtru46BWY.roa (raw, json)
Hash identifier: LKkJaCsXYPGePlSkPpiILl5VRPa2xVMTDDwyT0ybMjQ=
Subject key identifier: 37:BA:B6:57:3D:6D:80:7D:8F:09:C2:D1:B9:99:AD:AE:EE:3A:05:66
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018920DC6095A5750163F2E38FF5EB2E8B15
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/N7q2Vz1tgH2PCcLRuZmtru46BWY.roa
Signing time: Tue 04 Jul 2023 12:24:20 +0000
ROA not before: Tue 04 Jul 2023 12:24:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202973
IP address blocks: 185.106.92.0/24 maxlen: 24
45.9.74.0/24 maxlen: 24
194.36.177.0/24 maxlen: 24
82.115.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Nov 2023 12:10:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:20:dc:60:95:a5:75:01:63:f2:e3:8f:f5:eb:2e:8b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jul 4 12:24:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37bab6573d6d807d8f09c2d1b999adaeee3a0566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:35:6c:a8:f6:36:b9:41:30:05:27:9f:13:02:
41:33:07:6d:d9:f8:ce:8c:81:a2:33:4d:ba:d6:3c:
c4:05:7b:95:cc:a7:87:31:ab:0a:61:c4:bf:84:9c:
6e:f2:36:f7:d1:3b:f8:90:4a:a8:10:e2:f4:33:13:
3a:bf:a1:c4:9e:49:20:44:20:ed:6d:5a:a1:c1:68:
7c:55:ea:94:18:68:5c:db:a4:10:90:26:1b:e6:08:
fa:db:20:44:21:15:f3:8d:88:da:1f:26:56:72:c6:
f3:fb:6d:be:79:56:b6:73:ad:2e:20:5c:d8:39:10:
fa:bf:7f:9a:ea:29:09:51:ca:6e:30:95:6d:e2:0b:
d4:53:4a:24:16:26:ae:3c:40:82:96:11:d2:4b:ea:
28:ef:ea:bc:ef:28:79:fd:d5:8d:17:d9:34:7a:1d:
a1:c5:e5:e4:ad:06:2b:65:e7:27:f3:f8:e7:41:86:
d8:96:2b:46:eb:23:c8:af:e1:37:70:77:23:21:7d:
84:8d:95:2e:54:39:1e:95:f3:04:e7:e9:92:15:44:
22:d2:09:f5:63:72:e1:68:47:1b:76:7d:0f:19:e7:
0b:b3:12:b1:b5:36:a2:69:14:b7:f6:c9:19:ae:c7:
87:5d:06:b7:94:20:a4:c5:5d:e0:88:62:9e:6c:14:
1e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BA:B6:57:3D:6D:80:7D:8F:09:C2:D1:B9:99:AD:AE:EE:3A:05:66
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/N7q2Vz1tgH2PCcLRuZmtru46BWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.74.0/24
82.115.223.0/24
185.106.92.0/24
194.36.177.0/24
Signature Algorithm: sha256WithRSAEncryption
27:ef:38:8e:33:be:72:c8:1d:8b:2b:1e:22:a6:89:08:40:9e:
bb:bd:30:66:3b:54:e8:d3:ee:c4:58:f0:f5:57:9b:e7:92:62:
0a:87:c1:48:75:c6:27:0d:b3:65:74:df:68:cc:26:a8:38:63:
6c:23:5c:06:63:31:f2:af:d9:b6:96:13:c1:46:4a:06:8d:cd:
f6:0d:b0:e9:f8:74:51:e0:70:35:2d:08:4b:04:3d:e9:67:e3:
8f:85:d6:dd:33:35:8a:d4:ba:72:bc:7a:94:52:7c:0a:e4:f2:
6d:6a:31:3e:fd:16:8d:9a:44:26:a5:a2:c5:4f:18:9d:95:8f:
93:48:3e:9a:0e:89:b1:07:f5:72:b8:7e:1d:c3:c7:12:70:2d:
26:92:af:03:49:b0:6f:2f:f3:61:ea:0d:cb:89:27:69:73:49:
6a:c4:c1:ae:78:9a:9b:fa:44:dd:5c:53:23:57:07:c8:2c:45:
1c:5f:ee:83:35:4b:1e:7a:dc:ab:ed:81:ab:8d:46:95:c4:df:
71:f9:d6:81:40:c8:b6:6f:6c:68:0e:11:24:40:99:5e:e6:c6:
7b:dc:62:0c:bf:ca:f7:bd:3f:06:ee:74:97:3e:f1:6a:bf:3a:
c9:56:2e:4a:9a:67:03:22:f7:83:78:5d:3a:1c:76:95:dd:f7:
2e:22:37:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org