Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/6evDMuQk7LAZzoru5jwfcZ2NYnY.roa
File: 6evDMuQk7LAZzoru5jwfcZ2NYnY.roa (raw, json)
Hash identifier: 03TCSmTl0va+OwxhoNgDxvFz3L5UsEJMXI7URWX4Wtw=
Subject key identifier: E9:EB:C3:32:E4:24:EC:B0:19:CE:8A:EE:E6:3C:1F:71:9D:8D:62:76
Certificate issuer: /CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Certificate serial: 018CAFC16E2EFAB3036E8BC1E9E7B7F09F4D
Authority key identifier: 79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/6evDMuQk7LAZzoru5jwfcZ2NYnY.roa
Signing time: Thu 28 Dec 2023 09:28:58 +0000
ROA not before: Thu 28 Dec 2023 09:28:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57567
IP address blocks: 185.86.44.0/24 maxlen: 24
185.86.44.0/23 maxlen: 23
185.86.47.0/24 maxlen: 24
185.86.46.0/24 maxlen: 24
185.86.46.0/23 maxlen: 23
185.86.45.0/24 maxlen: 24
103.39.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:af:c1:6e:2e:fa:b3:03:6e:8b:c1:e9:e7:b7:f0:9f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Validity
Not Before: Dec 28 09:28:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9ebc332e424ecb019ce8aeee63c1f719d8d6276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6a:0b:22:25:1a:b8:12:b7:da:63:13:8d:95:
5c:50:a4:56:16:fc:ae:f9:b5:82:ac:89:eb:ee:2c:
20:34:1f:b7:e5:e8:b1:7e:dc:97:3c:e3:6b:35:f7:
27:11:86:75:d9:27:a6:f9:c8:a4:b1:4f:db:9c:15:
25:60:a1:c1:b0:6f:88:5f:e6:f6:cc:cd:68:a5:6e:
64:f4:76:98:46:09:6d:1e:e3:90:a5:43:23:3f:b4:
f0:9c:d5:1c:27:9f:34:b8:97:bd:e9:13:16:0b:16:
f6:3b:46:a7:39:b8:6b:05:d3:ba:b8:4a:e5:00:37:
6a:c3:ea:8c:ff:74:cc:96:ee:eb:90:2f:68:90:f1:
26:76:b0:3b:7a:79:28:76:b2:ec:7a:79:9a:f9:12:
03:cd:2b:d6:be:23:bd:4a:ab:3e:ff:fa:5a:df:a2:
b3:3e:d2:17:23:20:55:9f:67:b8:98:71:d5:a2:6b:
43:2d:43:f9:17:d1:ef:65:ab:a2:a8:fc:33:76:fd:
bb:c7:2c:4c:28:97:66:30:10:19:3f:39:fa:4b:56:
88:67:69:74:d9:f7:17:16:20:d9:63:17:8c:05:91:
53:91:62:5e:d3:38:38:47:48:e7:d1:c7:5e:2f:4f:
6a:7e:fd:0e:60:f0:3a:9b:af:23:f9:a2:a9:12:a0:
0e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EB:C3:32:E4:24:EC:B0:19:CE:8A:EE:E6:3C:1F:71:9D:8D:62:76
X509v3 Authority Key Identifier:
keyid:79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/6evDMuQk7LAZzoru5jwfcZ2NYnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.41.0/24
185.86.44.0/22
Signature Algorithm: sha256WithRSAEncryption
12:f9:ba:8a:e2:c5:4c:85:09:78:92:5f:e2:60:1c:93:ab:10:
56:b6:c3:ca:b1:ea:79:32:1c:8b:68:e1:ff:63:5e:7c:aa:37:
50:fe:8c:67:b8:04:69:c6:a0:c7:11:84:b4:ef:34:fc:86:7f:
30:59:b2:bd:0f:1a:9b:aa:c3:c9:6f:34:28:dd:87:48:db:cc:
85:4c:ae:15:c2:6a:5a:c2:11:07:99:1c:b3:cc:74:c5:16:bd:
c3:34:b3:21:33:12:1d:e1:70:ef:e4:76:db:ed:a7:ee:bd:01:
f6:38:a5:de:4d:63:e6:32:76:7b:af:f9:0d:5b:3b:2b:10:25:
ac:26:85:83:77:d7:a3:95:a8:ef:be:d0:fc:d3:f1:41:46:5a:
25:83:72:07:4d:d6:bf:2f:86:df:02:ae:2c:10:ae:0b:90:66:
f1:b6:0c:cd:8f:10:5f:35:ee:b2:c9:8c:d6:54:ec:c8:6a:b7:
dc:93:c5:d8:3e:3f:99:60:92:7c:bd:65:a5:5a:eb:e7:fa:cd:
22:10:5c:70:62:0e:12:4f:2a:c3:3c:3c:1d:7c:ad:72:de:62:
64:b7:08:d8:b9:64:bf:7f:b8:24:b5:fa:b4:d3:b5:9d:53:32:
74:66:18:12:36:01:a9:e6:78:78:2b:f6:96:d2:7d:89:76:60:
b6:c2:7b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:58 2024 by rpki-client on console-fra.rpki-client.org