Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/n8-km0bLEB-cGHw-l5j76rGpYTU.roa
File: n8-km0bLEB-cGHw-l5j76rGpYTU.roa (raw, json)
Hash identifier: Z1Bj2w+tC5y3Q29BATIS90ob6R46gmrZ9mvQ2DqzLS8=
Subject key identifier: 9F:CF:A4:9B:46:CB:10:1F:9C:18:7C:3E:97:98:FB:EA:B1:A9:61:35
Certificate issuer: /CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Certificate serial: 019228687A8B831F4F6DC749EAC8BE008077
Authority key identifier: 7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/n8-km0bLEB-cGHw-l5j76rGpYTU.roa
Signing time: Wed 25 Sep 2024 08:59:48 +0000
ROA not before: Wed 25 Sep 2024 08:59:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 5.253.63.0/24 maxlen: 24
79.133.180.0/24 maxlen: 24
89.191.234.0/24 maxlen: 24
194.113.153.0/24 maxlen: 24
195.226.194.0/24 maxlen: 24
195.245.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Oct 2024 10:58:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:28:68:7a:8b:83:1f:4f:6d:c7:49:ea:c8:be:00:80:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Validity
Not Before: Sep 25 08:59:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fcfa49b46cb101f9c187c3e9798fbeab1a96135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:eb:4a:e8:a5:ae:b6:71:2d:4b:74:2f:ee:e7:
1c:43:ae:ed:df:11:66:9b:16:c5:e9:cf:3b:ff:25:
e9:46:5b:62:4a:dd:45:05:ec:2f:f1:a2:8e:d0:ad:
20:c6:11:15:df:e4:1d:87:4a:08:5d:bc:58:b9:98:
80:55:ac:41:ac:31:d9:41:4b:9f:ab:b3:53:4e:0b:
7f:63:4b:1f:21:d4:d4:03:81:c2:5c:72:38:f5:8f:
cf:ba:53:b0:41:08:7f:d7:0c:d8:12:cf:e9:f6:eb:
36:4b:eb:26:81:72:d8:b4:4b:f5:2f:8b:49:4a:88:
e9:41:5b:0c:e3:57:f9:78:7b:a6:34:cb:ec:b9:d1:
60:1e:4e:25:b1:85:86:1b:87:f1:eb:d7:17:43:84:
6e:1a:1f:3d:c8:b6:d3:2c:e4:3f:21:aa:1d:4c:89:
7a:b7:18:3b:3d:24:49:57:06:2a:0c:34:ff:8b:7e:
69:f5:69:d6:aa:17:a9:41:2a:ae:58:b9:36:7a:58:
a9:56:e5:b3:60:72:6a:7b:e4:f1:9f:bc:99:95:dd:
d1:ce:cf:67:bb:7f:c7:40:b2:e0:6b:5c:88:10:40:
70:6a:67:e8:c3:98:69:aa:c0:2d:8e:67:65:f9:ca:
ec:fb:c8:0d:ee:b3:9e:d8:0c:46:92:d6:f2:d6:92:
07:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CF:A4:9B:46:CB:10:1F:9C:18:7C:3E:97:98:FB:EA:B1:A9:61:35
X509v3 Authority Key Identifier:
keyid:7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/n8-km0bLEB-cGHw-l5j76rGpYTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.63.0/24
79.133.180.0/24
89.191.234.0/24
194.113.153.0/24
195.226.194.0/24
195.245.239.0/24
Signature Algorithm: sha256WithRSAEncryption
40:fb:db:da:e1:cf:9c:de:28:bb:fd:49:9d:d1:f4:f7:fc:f6:
64:8e:12:20:43:ec:e7:87:13:28:06:f6:98:de:48:18:f5:c7:
18:aa:9d:82:f0:12:18:00:3b:e3:f6:ab:d9:a4:93:b5:8e:d0:
93:cc:54:69:4f:b1:99:a6:52:81:76:14:c8:a2:20:24:57:c8:
83:05:6c:d9:06:52:ef:ce:b6:4c:1f:f0:84:11:e6:97:fc:4a:
c5:61:d4:47:ab:df:96:3e:07:05:2c:75:85:4d:b8:90:35:c7:
f3:cd:d2:2e:d9:51:00:f2:4b:b7:1e:5d:0d:8b:3c:41:e7:32:
a7:57:43:2e:21:66:22:85:66:ef:82:21:fd:2c:79:46:88:ea:
b0:83:be:e8:aa:79:4b:3d:4c:45:b3:fb:e6:11:fb:fb:95:73:
ed:d9:76:ef:d8:28:51:3b:b8:65:5a:83:72:db:8e:e3:3b:48:
9d:8e:2d:24:59:8d:54:84:58:b4:5a:8f:4e:ac:47:32:78:d2:
dd:42:bb:03:09:29:67:6a:2a:77:78:0f:63:63:bf:0b:8d:59:
29:06:15:d2:14:40:fe:a6:48:da:45:12:2d:17:84:1e:d5:eb:
bf:02:b7:93:ad:f7:31:fd:6c:08:4e:8d:a0:dd:76:82:1f:a5:
2a:1e:bf:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 13:44:39 2024 by rpki-client on console-fra.rpki-client.org