Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/b5nAzf1-Bbb_AQtHr-IkpFW66-c.roa
File: b5nAzf1-Bbb_AQtHr-IkpFW66-c.roa (raw, json)
Hash identifier: FWCvi3vqTHcKgLZIffWTFpH64rJJym8jkGKGeJJ2+8I=
Subject key identifier: 6F:99:C0:CD:FD:7E:05:B6:FF:01:0B:47:AF:E2:24:A4:55:BA:EB:E7
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C42E4CCCB91C1E3902C182D35DFCD
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/b5nAzf1-Bbb_AQtHr-IkpFW66-c.roa
Signing time: Mon 02 Jan 2023 05:55:06 +0000
ROA not before: Mon 02 Jan 2023 05:55:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211443
IP address blocks: 192.162.100.0/24 maxlen: 24
192.162.102.0/24 maxlen: 24
192.162.101.0/24 maxlen: 24
192.162.103.0/24 maxlen: 24
193.0.203.0/24 maxlen: 24
193.0.200.0/24 maxlen: 24
194.63.141.0/24 maxlen: 24
194.63.143.0/24 maxlen: 24
194.63.140.0/24 maxlen: 24
194.63.142.0/24 maxlen: 24
193.168.226.0/24 maxlen: 24
91.217.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:42:e4:cc:cb:91:c1:e3:90:2c:18:2d:35:df:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:55:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f99c0cdfd7e05b6ff010b47afe224a455baebe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:da:e1:57:af:c8:0b:49:47:6d:4e:7b:64:4e:
2a:13:1a:53:33:52:bc:e2:5d:8e:33:3a:c3:dc:76:
ec:9c:43:d8:49:c1:c8:57:05:f4:fd:c7:eb:77:44:
14:9b:d4:e1:09:71:44:aa:54:47:69:95:f3:ff:d7:
19:0a:68:cf:0d:8d:2c:0f:41:4c:03:b8:8f:e3:6d:
a5:8b:8b:18:dc:9f:1f:f3:0f:67:a6:3c:c2:3c:82:
9e:4f:93:c6:a7:a8:6c:bb:ce:4f:a1:2d:1e:9f:15:
4d:f3:70:4a:44:7f:fc:6f:a6:39:4e:1f:20:9d:6f:
56:eb:31:2c:77:1b:fd:2b:af:c7:10:fa:7e:7a:4c:
60:61:0b:b8:b9:02:b0:90:9a:b7:3f:d6:39:6e:e9:
66:a4:10:c2:13:d3:93:22:00:2c:67:12:a5:12:18:
b7:37:80:dc:3c:14:e4:1a:a1:a2:b4:91:fa:c8:a9:
45:75:3a:ac:20:9b:b4:7f:b2:36:6a:55:aa:16:2a:
bb:cc:2e:a8:83:aa:3a:36:2a:be:18:5f:bb:be:ad:
72:ae:76:9a:a7:c8:b4:87:bc:88:72:9e:df:8f:99:
71:17:d3:b6:fd:bf:11:a8:63:33:50:78:06:7e:45:
a2:1f:66:ea:8d:b2:d6:7c:fc:ca:be:cb:fe:96:fb:
a8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:99:C0:CD:FD:7E:05:B6:FF:01:0B:47:AF:E2:24:A4:55:BA:EB:E7
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/b5nAzf1-Bbb_AQtHr-IkpFW66-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.77.0/24
192.162.100.0/22
193.0.200.0/24
193.0.203.0/24
193.168.226.0/24
194.63.140.0/22
Signature Algorithm: sha256WithRSAEncryption
57:9e:b6:a5:80:40:17:4a:89:08:08:98:e4:80:1f:8f:77:73:
c0:82:97:39:54:aa:46:3b:6e:0c:3f:4a:62:03:1b:50:3b:b0:
7e:50:82:57:74:8f:d2:38:1a:31:aa:d0:98:c3:50:5b:20:5a:
ec:90:7c:01:06:a8:08:26:f5:79:d4:7f:86:5b:d1:65:7b:a4:
90:a0:96:a4:46:7a:5a:8d:47:73:70:40:e3:18:98:d5:5d:ff:
a1:fb:bb:aa:ad:73:e1:22:bf:24:44:00:3f:c7:61:81:d4:92:
36:78:94:6a:99:28:5e:04:b1:7a:d0:61:29:64:83:21:60:bf:
3a:d6:e2:d1:b2:12:ad:d1:8f:50:ea:44:a3:ad:d3:6b:fa:57:
60:22:12:ab:af:41:cc:5c:50:b7:c8:2b:79:fc:95:76:b0:33:
b3:0b:63:fd:4e:06:13:d6:dd:fa:bd:d5:38:52:f7:32:d9:51:
f9:3a:2f:f1:67:56:55:e2:1d:44:07:dc:85:36:99:0b:70:b5:
97:fb:9c:59:a1:35:3b:8a:6f:57:ed:14:4b:d2:f4:77:26:79:
d1:37:5f:fe:24:1c:b4:7c:0d:be:32:46:b6:04:db:71:be:ef:
62:28:6c:80:d4:32:df:70:bb:b3:42:4d:90:32:e9:58:8b:a0:
ad:38:2c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org