Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1r5sdJ38fslXeeqwOD5cWwdeZkg.roa
File: 1r5sdJ38fslXeeqwOD5cWwdeZkg.roa (raw, json)
Hash identifier: WDJXQdcVfBefVCT813DXl3lUqfD76kTMU5I5QL+5lvQ=
Subject key identifier: D6:BE:6C:74:9D:FC:7E:C9:57:79:EA:B0:38:3E:5C:5B:07:5E:66:48
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4DF120CC67C238A68E904451F53D3
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1r5sdJ38fslXeeqwOD5cWwdeZkg.roa
Signing time: Sun 01 Jan 2023 19:35:22 +0000
ROA not before: Sun 01 Jan 2023 19:35:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12714
IP address blocks: 109.106.213.0/24 maxlen: 24
109.106.214.0/24 maxlen: 24
217.19.104.0/23 maxlen: 23
178.211.1.0/24 maxlen: 24
93.91.224.0/24 maxlen: 24
95.129.92.0/23 maxlen: 23
93.91.232.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 27 Jan 2023 10:43:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:df:12:0c:c6:7c:23:8a:68:e9:04:45:1f:53:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6be6c749dfc7ec95779eab0383e5c5b075e6648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6d:0b:16:bd:eb:dd:ef:b2:bf:4d:cf:74:09:
8e:35:f2:48:62:26:59:74:03:6b:20:ab:62:47:6c:
05:6b:0b:89:85:bd:b7:07:f9:3c:36:6a:53:ea:e5:
01:f1:bd:2a:3c:2b:49:98:d6:5f:27:d7:e8:e8:ed:
20:81:5a:c9:83:d9:25:b5:4c:dc:29:c3:87:9a:17:
5f:d9:6f:1c:52:86:32:fc:62:ac:02:bd:4b:94:ca:
3e:10:73:5e:bd:a2:9f:4e:cd:7a:f7:9e:75:f6:bb:
51:32:d4:2d:2f:50:2d:16:b5:e8:d9:98:f3:37:d0:
e2:f3:11:90:4c:5b:6f:0a:28:dc:e6:51:20:c3:7f:
36:c7:b0:56:7d:07:4d:20:78:bf:b9:c0:ba:49:06:
6b:96:44:94:84:45:f5:6f:1c:a6:9f:b5:79:0e:e4:
36:e0:98:eb:1f:7a:5d:c9:60:61:aa:e3:10:27:f7:
aa:32:33:27:0d:c5:ca:42:56:10:19:c2:02:12:48:
6c:8d:d5:e5:bf:67:34:29:09:c8:6a:64:a8:99:fd:
0d:6e:57:c4:8c:d8:a8:ed:ab:51:85:d9:ee:cd:eb:
88:5f:97:b7:e6:3d:61:27:ce:d0:24:84:a4:f1:57:
8a:e2:e8:2d:ec:0b:d5:e7:42:d7:57:c9:a8:38:ad:
b8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BE:6C:74:9D:FC:7E:C9:57:79:EA:B0:38:3E:5C:5B:07:5E:66:48
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1r5sdJ38fslXeeqwOD5cWwdeZkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.91.224.0/24
93.91.232.0/23
95.129.92.0/23
109.106.213.0-109.106.214.255
178.211.1.0/24
217.19.104.0/23
Signature Algorithm: sha256WithRSAEncryption
46:2c:a6:12:bc:21:b3:5c:a2:33:43:b5:43:69:f5:5c:0f:88:
19:5d:69:d3:d2:5e:08:97:82:d0:2b:cb:7e:cb:29:de:05:e1:
f3:a8:8d:68:da:15:14:3d:cc:69:7f:9d:23:5a:1d:2e:de:ba:
ec:0f:e0:17:79:46:0d:8c:30:97:70:50:8e:72:24:e6:57:68:
cc:0f:ac:57:ed:09:29:56:c2:81:20:19:63:45:57:2b:24:40:
b9:71:47:ac:f6:f0:36:03:ac:50:09:42:9f:62:95:1e:5b:13:
c6:fb:ca:72:26:fc:cd:bd:a6:9e:74:95:a2:e6:81:64:01:00:
b3:83:a0:2f:31:91:71:78:76:69:c1:9d:51:77:c1:1f:ed:7b:
56:a7:a2:d4:e3:22:72:89:4c:51:5a:05:e3:61:93:89:cf:b1:
0a:e3:01:3a:c5:78:62:e7:e0:db:2b:58:b9:bb:91:2b:d3:57:
c0:86:fb:46:72:b1:1f:b0:b4:2d:0d:06:8d:a5:fb:fb:e7:a7:
b6:de:db:dc:8b:b8:89:2d:b1:ab:9c:fc:37:fb:21:c7:04:93:
11:ce:f3:88:20:91:53:dc:6a:4a:b0:51:c8:53:5b:ad:ec:7e:
22:e2:c2:66:c2:b5:38:bb:33:ee:9a:cb:c9:06:76:a6:de:60:
f6:b8:b8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:33 2024 by rpki-client on console-ams.rpki-client.org