Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/u_4eyGBCjYI8ZtGJ9c5Zos5rIrg.roa
File: u_4eyGBCjYI8ZtGJ9c5Zos5rIrg.roa (raw, json)
Hash identifier: CsZueVKwiT+7eo6Y41OW04MdJ6xpWZoh6pQ1KHuhruI=
Subject key identifier: BB:FE:1E:C8:60:42:8D:82:3C:66:D1:89:F5:CE:59:A2:CE:6B:22:B8
Certificate issuer: /CN=932460b78f6e8f4662aec7858e92051e856099f5
Certificate serial: 01856EC2301F0F1183E0D88E8D8293350572
Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/u_4eyGBCjYI8ZtGJ9c5Zos5rIrg.roa
Signing time: Sun 01 Jan 2023 19:14:58 +0000
ROA not before: Sun 01 Jan 2023 19:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47836
IP address blocks: 91.208.175.0/24 maxlen: 24
185.161.88.0/22 maxlen: 24
2a00:ddc0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:30:1f:0f:11:83:e0:d8:8e:8d:82:93:35:05:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5
Validity
Not Before: Jan 1 19:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbfe1ec860428d823c66d189f5ce59a2ce6b22b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2a:ef:28:72:a1:cd:09:6b:00:3d:5f:5d:71:
50:3e:4d:0d:5a:1c:3a:f5:75:25:11:6f:1e:c7:50:
f3:17:1f:7f:e4:c1:5c:e3:47:73:a4:27:13:bc:c0:
3e:6f:d3:56:fd:43:c1:d6:a4:1b:78:44:0f:fa:7c:
e4:7e:d0:e2:f9:d2:ef:bd:8c:ed:97:22:54:92:15:
b6:ee:2b:03:ea:87:58:4c:fa:09:8a:39:2a:0f:0c:
85:2b:5c:72:5c:e6:3a:66:ca:fc:b7:96:e0:cc:fb:
1d:be:74:92:9a:af:b3:38:cb:71:4c:52:bd:22:3f:
58:75:ad:fa:cb:43:41:e3:02:ac:af:85:f7:c1:a4:
29:58:32:6d:02:d6:0a:01:65:ea:6b:4e:19:a3:26:
78:1b:82:21:f3:7a:80:0b:59:52:07:10:0c:04:4e:
d7:c8:38:65:da:45:47:9a:f2:e9:44:17:b4:7c:c0:
4b:8b:cf:60:4e:4e:4c:90:41:3a:70:05:61:7f:09:
0e:14:88:cb:6d:c5:b1:53:ef:ee:14:33:aa:52:0a:
66:a4:ae:a3:80:e6:d6:11:58:bb:2b:90:35:c6:8e:
20:1d:b0:3d:e4:15:9c:f1:0a:9a:52:7f:91:c8:48:
8d:7d:1c:84:96:12:16:6b:ec:04:ff:33:25:46:23:
f7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FE:1E:C8:60:42:8D:82:3C:66:D1:89:F5:CE:59:A2:CE:6B:22:B8
X509v3 Authority Key Identifier:
keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/u_4eyGBCjYI8ZtGJ9c5Zos5rIrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.175.0/24
185.161.88.0/22
IPv6:
2a00:ddc0::/32
Signature Algorithm: sha256WithRSAEncryption
96:75:c7:08:70:47:15:8f:ea:c6:12:e8:35:ae:9f:e3:4b:97:
15:f6:f8:99:cc:46:b8:9f:6b:8c:56:f3:c9:f7:3a:c5:9b:07:
3d:91:ce:67:5a:ee:01:6b:81:1a:c8:4f:6e:ae:63:98:02:99:
43:c8:b1:43:b2:95:1a:ce:6a:00:b6:44:94:4c:9e:8d:a7:b4:
46:ef:c7:da:3f:90:7a:62:38:6b:8d:69:14:f8:2b:1b:40:73:
3b:ab:d6:f9:85:50:a9:09:e4:c8:98:f6:52:ce:9e:47:62:ae:
de:28:b9:2d:ba:8d:0f:6a:df:57:f1:20:c2:e0:e5:03:6c:9d:
44:e0:25:03:cd:0d:b0:1f:15:2f:98:db:f0:9a:cf:1e:f9:54:
ac:c1:02:21:c4:7b:c4:4d:07:18:83:76:a4:94:94:77:d7:c7:
f5:eb:a2:10:14:e2:e6:19:3e:7f:1a:a5:ba:68:9e:f7:a9:bc:
ba:5d:6b:17:2f:19:70:63:74:4b:a7:75:63:d3:19:e9:7a:a0:
6d:1e:78:cf:48:2d:74:b2:8b:c7:ea:a7:eb:c7:8a:73:a3:ea:
6c:d9:da:2d:93:58:2c:e8:3e:02:00:68:23:49:e0:84:8a:96:
08:d7:be:38:d2:0e:72:85:2a:35:36:c9:54:62:50:ab:31:70:
eb:54:d2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:13 2024 by rpki-client on console-fra.rpki-client.org