Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/t-HFvJV7SQTMm1vyo08biyIWSfI.roa
File: t-HFvJV7SQTMm1vyo08biyIWSfI.roa (raw, json)
Hash identifier: KwwjMM1gHPzFQutaN9IW2UDarnrz70cls0SOq9uVByA=
Subject key identifier: B7:E1:C5:BC:95:7B:49:04:CC:9B:5B:F2:A3:4F:1B:8B:22:16:49:F2
Certificate issuer: /CN=96bfc5a172654dd6009db1d82d92ffaf71234120
Certificate serial: 0189208281936FDDF6E2AED8C8E6A34FC190
Authority key identifier: 96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/t-HFvJV7SQTMm1vyo08biyIWSfI.roa
Signing time: Tue 04 Jul 2023 10:46:11 +0000
ROA not before: Tue 04 Jul 2023 10:46:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209898
IP address blocks: 148.222.248.0/22 maxlen: 24
91.194.139.0/24 maxlen: 24
147.78.194.0/23 maxlen: 24
185.203.114.0/23 maxlen: 23
2a0a:e5c0::/29 maxlen: 48
2a0a:e5c0:2::/48 maxlen: 48
2a09:2940::/29 maxlen: 48
2a0a:e5c1:100::/40 maxlen: 48
2a0a:e5c0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:20:82:81:93:6f:dd:f6:e2:ae:d8:c8:e6:a3:4f:c1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96bfc5a172654dd6009db1d82d92ffaf71234120
Validity
Not Before: Jul 4 10:46:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7e1c5bc957b4904cc9b5bf2a34f1b8b221649f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:08:77:6b:a7:44:86:59:5d:39:51:0a:5c:49:
60:9f:3d:07:d4:d0:95:c7:fa:aa:80:13:ab:29:22:
7a:42:6a:d4:c6:90:9a:b0:81:4f:df:cb:60:ea:9a:
a7:77:07:59:ff:ee:5d:c9:3c:f5:42:ab:a5:43:b6:
1e:11:63:c7:d4:92:96:1d:3e:01:84:01:a5:5d:0c:
c5:39:61:35:60:9e:22:86:74:c4:b1:3c:02:0b:bb:
ca:a5:72:0c:36:b9:d3:c4:79:84:12:22:b5:c2:97:
e7:31:fa:e4:89:63:8a:d4:71:29:ea:42:14:bf:9b:
21:c9:0b:96:3b:31:1f:b3:20:36:6f:83:e3:9a:0e:
bf:8a:1b:57:17:79:7b:53:54:2f:e3:11:64:66:80:
fc:69:f7:75:06:47:1c:cb:89:15:f8:d9:41:82:0e:
19:c2:12:95:00:f8:d2:4d:35:e1:94:33:1b:b7:c0:
07:6c:c4:0f:9e:7b:f9:3c:83:b2:da:ac:f1:a7:cc:
9a:a5:d9:3d:04:bc:d6:38:9f:8b:b7:fe:0b:2c:7d:
12:ab:45:33:fc:b8:1f:86:cf:9d:cd:33:fd:98:d8:
9e:82:3d:b5:5f:4d:b5:5d:07:3a:de:62:42:b6:fb:
f9:a2:a4:db:bc:ae:1c:9c:38:14:40:5d:bd:e6:d4:
43:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E1:C5:BC:95:7B:49:04:CC:9B:5B:F2:A3:4F:1B:8B:22:16:49:F2
X509v3 Authority Key Identifier:
keyid:96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/t-HFvJV7SQTMm1vyo08biyIWSfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.139.0/24
147.78.194.0/23
148.222.248.0/22
185.203.114.0/23
IPv6:
2a09:2940::/29
2a0a:e5c0::/29
Signature Algorithm: sha256WithRSAEncryption
50:54:fc:9a:b6:ef:21:e4:ed:b5:cf:1b:64:72:50:28:66:82:
02:24:07:3b:11:95:56:0d:85:40:18:b9:d6:bb:83:af:6a:df:
0e:d7:ef:2a:d0:d7:b7:a3:c2:3e:b9:5a:f4:e6:88:14:7f:00:
ce:d3:e9:29:f1:14:59:b0:af:ed:ff:22:8d:8f:03:90:84:0d:
2f:72:4f:ea:00:23:8a:64:92:ce:a2:b7:ba:44:c9:6a:61:90:
57:1c:b2:42:6b:db:68:c2:36:42:be:28:46:8d:c0:ca:33:dd:
4b:f1:1d:35:1b:61:55:cb:de:e6:55:66:22:96:e1:76:b7:39:
f5:b8:ef:09:06:51:4a:8c:8f:e5:e0:28:79:b2:71:ac:86:a1:
86:b3:03:fb:74:91:12:97:2e:ef:04:c6:67:5c:32:8a:f8:ed:
3a:ad:31:b1:93:5a:6f:05:8f:f6:1d:a8:e0:9a:46:13:5f:f8:
81:bc:a8:36:25:d0:82:ae:56:46:95:d2:f9:34:c6:ab:9d:7b:
67:e6:8b:fb:b9:02:11:e6:82:85:a1:1e:44:1f:b0:8e:fd:e1:
e4:0e:09:ae:f6:17:4c:6d:0e:e2:ff:ce:f9:f7:67:46:1c:83:
eb:42:07:da:95:36:2a:7d:3c:b9:9b:54:0f:8d:73:af:fd:d9:
66:2c:cc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:34 2024 by rpki-client on console-ams.rpki-client.org