Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/xZxxBGrJu4YG8xZ_GYkJ4xnWzM4.roa
File: xZxxBGrJu4YG8xZ_GYkJ4xnWzM4.roa (raw, json)
Hash identifier: Ah4qo0Fc9KT6qAbFTUiJZnetRK4lQmwAfu8OWnBHivQ=
Subject key identifier: C5:9C:71:04:6A:C9:BB:86:06:F3:16:7F:19:89:09:E3:19:D6:CC:CE
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 01930C40EBABC8293DE75F7008A6438193A7
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/xZxxBGrJu4YG8xZ_GYkJ4xnWzM4.roa
Signing time: Fri 08 Nov 2024 14:50:01 +0000
ROA not before: Fri 08 Nov 2024 14:50:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44252
IP address blocks: 92.60.227.0/24 maxlen: 24
92.60.228.0/24 maxlen: 24
92.60.232.0/24 maxlen: 24
92.60.235.0/24 maxlen: 24
93.113.250.0/24 maxlen: 24
94.228.227.0/24 maxlen: 24
94.228.230.0/24 maxlen: 24
94.228.233.0/24 maxlen: 24
94.228.238.0/24 maxlen: 24
176.67.193.0/24 maxlen: 24
176.67.194.0/24 maxlen: 24
176.67.196.0/24 maxlen: 24
176.67.198.0/24 maxlen: 24
176.67.200.0/23 maxlen: 24
176.67.205.0/24 maxlen: 24
176.67.208.0/24 maxlen: 24
176.67.211.0/24 maxlen: 24
176.67.212.0/24 maxlen: 24
176.67.219.0/24 maxlen: 24
176.67.220.0/24 maxlen: 24
176.67.223.0/24 maxlen: 24
178.17.19.0/24 maxlen: 24
178.17.22.0/24 maxlen: 24
178.17.23.0/24 maxlen: 24
178.17.24.0/24 maxlen: 24
178.17.26.0/24 maxlen: 24
178.17.27.0/24 maxlen: 24
178.17.28.0/24 maxlen: 24
185.27.131.0/24 maxlen: 24
185.36.255.0/24 maxlen: 24
188.215.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 13:36:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0c:40:eb:ab:c8:29:3d:e7:5f:70:08:a6:43:81:93:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Nov 8 14:50:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c59c71046ac9bb8606f3167f198909e319d6ccce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a1:78:4c:08:65:fb:35:5b:c5:e2:6d:70:b7:
47:5f:ae:f2:dd:2e:c0:4b:07:ea:ed:d6:07:76:2c:
46:a9:bd:12:91:27:7a:d0:09:14:d8:fe:52:c8:5a:
df:5d:71:f8:c9:ae:13:53:2d:12:bd:7d:a1:e5:04:
3f:0e:2d:71:e6:b5:bb:ac:f7:e6:c5:93:33:35:d3:
13:3e:37:e6:33:95:df:ac:8c:d7:e2:04:43:9a:e2:
fc:53:63:bb:bc:6d:03:fc:01:73:2a:a5:63:4f:f5:
01:37:d5:64:d6:2c:a1:d6:d3:81:ae:6a:6b:f4:f7:
9a:44:b0:09:32:d1:01:84:2d:41:80:9e:77:9d:ea:
a5:de:3f:b4:bc:0e:50:b8:fe:1f:ac:f9:b8:9d:51:
d6:5b:4c:9c:a4:e1:84:27:6a:91:4c:ae:4f:ed:16:
b0:7d:b2:20:d1:d3:74:fe:37:b2:1e:ff:b4:68:98:
03:49:2b:a9:7f:c8:25:14:2b:78:c1:13:db:df:55:
2f:94:2c:15:82:7b:f0:d4:03:cc:6b:af:f7:78:c0:
3e:0d:de:8a:38:b3:c0:1f:b0:d6:33:84:d2:86:75:
9a:18:be:78:95:54:cc:db:62:89:8a:02:ca:6f:0a:
f4:33:19:93:a7:02:c5:d3:be:dc:85:80:3a:81:6b:
f6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9C:71:04:6A:C9:BB:86:06:F3:16:7F:19:89:09:E3:19:D6:CC:CE
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/xZxxBGrJu4YG8xZ_GYkJ4xnWzM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.227.0-92.60.228.255
92.60.232.0/24
92.60.235.0/24
93.113.250.0/24
94.228.227.0/24
94.228.230.0/24
94.228.233.0/24
94.228.238.0/24
176.67.193.0-176.67.194.255
176.67.196.0/24
176.67.198.0/24
176.67.200.0/23
176.67.205.0/24
176.67.208.0/24
176.67.211.0-176.67.212.255
176.67.219.0-176.67.220.255
176.67.223.0/24
178.17.19.0/24
178.17.22.0-178.17.24.255
178.17.26.0-178.17.28.255
185.27.131.0/24
185.36.255.0/24
188.215.30.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:94:d9:ae:2b:78:03:57:38:bd:ed:bb:1e:b9:36:c1:93:cc:
05:2f:f4:a8:ea:30:22:3a:c6:66:fa:74:3e:97:cf:43:63:f5:
98:f5:15:da:92:43:8a:b5:8b:93:0a:e2:9a:61:b6:61:9f:a1:
42:7c:1b:fb:d4:3f:e7:61:ea:3c:88:1a:fd:fe:ab:56:63:c0:
08:23:05:54:16:df:21:f8:31:42:32:d1:d6:09:cb:f1:bb:b6:
0f:b3:46:66:81:59:bf:fa:76:b2:62:db:07:b2:e3:bd:09:59:
f7:19:29:3e:5a:b2:fb:d6:bc:94:f5:6d:d5:d3:a8:96:3a:28:
41:e4:a7:58:5d:0d:0b:6a:38:60:3f:cc:3b:2f:69:36:5c:02:
53:2d:f8:e8:09:61:47:16:61:8d:da:7e:ea:cb:4b:44:21:c3:
42:47:7f:77:66:95:36:24:64:67:a8:58:76:0c:2b:0c:ba:76:
3d:51:d0:85:2f:0b:eb:82:82:31:0d:ed:ee:6b:39:43:1e:a0:
b9:ff:a0:2f:23:0a:c3:76:a7:8a:43:2a:47:b7:7a:f7:34:5f:
ca:7c:a3:c6:f4:74:97:26:38:3e:88:50:9e:37:42:63:5d:89:
60:c3:63:c9:f2:3a:2d:6e:86:4d:92:19:55:96:8a:bc:53:66:
9b:26:7a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 15:01:10 2024 by rpki-client on console-ams.rpki-client.org