Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/Ex7a7vvyZNl8ylOFFocTkJDMvUU.roa
File: Ex7a7vvyZNl8ylOFFocTkJDMvUU.roa (raw, json)
Hash identifier: zyC1joG25b9zGlgljKU98AUemTc8G7nEY3FciY5dcrY=
Subject key identifier: 13:1E:DA:EE:FB:F2:64:D9:7C:CA:53:85:16:87:13:90:90:CC:BD:45
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 01932AE4614C1A3651F17D7DE92E00286034
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/Ex7a7vvyZNl8ylOFFocTkJDMvUU.roa
Signing time: Thu 14 Nov 2024 13:37:10 +0000
ROA not before: Thu 14 Nov 2024 13:37:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44252
IP address blocks: 92.60.227.0/24 maxlen: 24
92.60.228.0/24 maxlen: 24
92.60.232.0/24 maxlen: 24
92.60.235.0/24 maxlen: 24
94.228.227.0/24 maxlen: 24
94.228.230.0/24 maxlen: 24
94.228.233.0/24 maxlen: 24
94.228.238.0/24 maxlen: 24
176.67.193.0/24 maxlen: 24
176.67.194.0/24 maxlen: 24
176.67.196.0/24 maxlen: 24
176.67.198.0/24 maxlen: 24
176.67.200.0/23 maxlen: 24
176.67.205.0/24 maxlen: 24
176.67.208.0/24 maxlen: 24
176.67.211.0/24 maxlen: 24
176.67.212.0/24 maxlen: 24
176.67.219.0/24 maxlen: 24
176.67.220.0/24 maxlen: 24
176.67.223.0/24 maxlen: 24
178.17.19.0/24 maxlen: 24
178.17.22.0/24 maxlen: 24
178.17.23.0/24 maxlen: 24
178.17.24.0/24 maxlen: 24
178.17.26.0/24 maxlen: 24
178.17.27.0/24 maxlen: 24
178.17.28.0/24 maxlen: 24
185.27.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 14:15:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2a:e4:61:4c:1a:36:51:f1:7d:7d:e9:2e:00:28:60:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Nov 14 13:37:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=131edaeefbf264d97cca53851687139090ccbd45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d7:a0:b4:ed:41:22:bb:3e:1c:ad:1e:1f:37:
30:5a:db:4a:3a:8f:2b:02:11:07:1e:71:77:a1:6c:
20:13:f1:8e:2f:a9:50:f6:e7:db:fe:e2:c7:ef:48:
38:59:09:07:72:cc:fc:61:3e:fd:ce:a1:be:fe:84:
78:5f:d9:d7:b6:8d:88:eb:b3:24:67:7d:18:57:d0:
cb:e2:3c:fd:56:22:17:06:c9:d4:91:07:88:bc:9a:
82:58:df:69:63:45:f0:29:e1:ca:74:6d:b0:ec:80:
7d:a8:23:f4:21:bb:eb:bb:c4:71:ca:a9:65:4f:0b:
5e:9b:85:2c:d4:dc:e0:f3:66:5a:a2:bf:4f:3a:9e:
92:65:bc:76:0d:6a:67:cb:0c:6f:fb:27:0b:d3:81:
01:57:9c:38:67:dd:4b:35:66:40:7c:0a:2e:18:b8:
28:f9:49:33:da:83:a2:2f:79:82:8c:3e:0d:3d:b2:
fd:a3:92:fa:58:98:f1:4c:5e:18:81:c5:8e:e7:d2:
3f:77:e5:b5:3e:08:ff:cb:6b:85:5b:bc:77:49:b0:
60:8e:eb:85:13:9c:8b:07:4f:74:29:b9:e4:bf:26:
34:bd:38:52:7a:6a:53:bc:ee:f2:da:4b:a7:e1:be:
1e:15:d9:3c:a1:e6:87:9c:5f:91:92:cc:e6:6a:88:
4a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1E:DA:EE:FB:F2:64:D9:7C:CA:53:85:16:87:13:90:90:CC:BD:45
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/Ex7a7vvyZNl8ylOFFocTkJDMvUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.227.0-92.60.228.255
92.60.232.0/24
92.60.235.0/24
94.228.227.0/24
94.228.230.0/24
94.228.233.0/24
94.228.238.0/24
176.67.193.0-176.67.194.255
176.67.196.0/24
176.67.198.0/24
176.67.200.0/23
176.67.205.0/24
176.67.208.0/24
176.67.211.0-176.67.212.255
176.67.219.0-176.67.220.255
176.67.223.0/24
178.17.19.0/24
178.17.22.0-178.17.24.255
178.17.26.0-178.17.28.255
185.27.131.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ae:1b:64:d9:67:90:0b:25:29:8b:80:b8:7f:4c:35:aa:a2:
c7:0d:d4:e0:9c:09:8e:b2:64:5b:ca:1a:c7:86:da:a6:1f:6c:
71:5f:2a:eb:a8:d4:f8:58:96:12:2a:39:d3:aa:83:f9:0e:7d:
c2:a0:c3:f6:fc:ed:79:ea:3f:5c:f4:88:0b:da:b6:fc:ae:3a:
50:4d:80:30:56:d5:e2:65:1b:47:51:71:cd:16:1e:ec:80:a6:
e2:98:24:50:7e:78:61:15:59:0d:6a:bd:9a:31:59:19:9e:7b:
a5:f6:7b:a3:4d:ca:a1:5a:a6:9d:bf:71:90:7e:61:58:52:b1:
f1:8d:a4:00:cc:47:94:d4:bd:42:29:a4:f6:5c:e8:69:86:ab:
3d:8c:96:f4:c7:67:0b:72:ec:a6:40:71:05:bd:aa:cf:ab:f2:
24:a9:6b:44:4b:ba:ba:be:93:61:ff:67:02:bc:18:5c:2f:1a:
bd:66:4f:d6:01:72:5e:b8:f2:32:60:70:b2:e6:d1:2d:46:db:
f3:6e:f6:37:72:0f:e8:29:83:7d:dd:b8:eb:aa:d3:f9:9c:85:
e5:e6:86:81:45:b7:ea:de:49:a7:fa:f9:56:1f:b2:1b:ca:41:
3b:ce:62:74:30:be:0d:b3:00:ac:03:14:7a:60:68:31:86:0f:
a4:28:02:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 17:49:49 2024 by rpki-client on console-ams.rpki-client.org