Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/cDFopyNup5qrQudXnu1sRwSk3Ns.roa
File: cDFopyNup5qrQudXnu1sRwSk3Ns.roa (raw, json)
Hash identifier: aDzgNBlV03Luc1+ovzl20oVBFKF2CeABPXuK9czRHPM=
Subject key identifier: 70:31:68:A7:23:6E:A7:9A:AB:42:E7:57:9E:ED:6C:47:04:A4:DC:DB
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018CC7952749CC383A2BBE3108CEFB328388
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/cDFopyNup5qrQudXnu1sRwSk3Ns.roa
Signing time: Tue 02 Jan 2024 00:31:29 +0000
ROA not before: Tue 02 Jan 2024 00:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 193.238.135.0/24 maxlen: 24
193.238.134.0/24 maxlen: 24
193.33.48.0/24 maxlen: 24
45.147.194.0/24 maxlen: 24
91.224.22.0/24 maxlen: 24
91.224.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 22:17:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:27:49:cc:38:3a:2b:be:31:08:ce:fb:32:83:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 00:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=703168a7236ea79aab42e7579eed6c4704a4dcdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:35:a2:bf:54:2c:4a:72:d1:7c:14:65:63:af:
28:48:66:d5:75:4e:3e:e0:df:1c:fb:22:ea:f9:2f:
fd:bf:ed:b4:d9:c7:ee:3d:e6:2b:d7:23:8c:e4:9b:
4e:9c:c6:7f:bf:b9:fc:ac:09:40:bf:7c:50:2f:d0:
b7:ac:1f:c7:5e:4b:85:05:76:87:94:b1:ad:4e:1d:
f6:42:57:fe:2d:bf:66:d5:75:7f:b6:7d:96:47:48:
78:8a:c1:02:2d:d4:fb:02:26:5f:c5:39:0c:61:34:
78:08:3e:47:ba:5a:3d:da:df:bf:7f:bb:73:3b:57:
c4:fe:d1:c9:e9:93:9f:bd:06:3c:af:c1:e7:05:80:
37:34:36:2f:e9:23:5f:ff:23:94:5b:1e:f9:97:93:
72:40:ee:cf:67:c0:89:39:9b:15:58:17:23:16:7a:
1f:5b:b5:8f:12:eb:9e:41:c7:f1:41:ea:a5:e2:2a:
53:82:0a:bb:c4:2c:5a:57:ef:68:e2:dd:d7:32:4e:
18:fc:ec:0c:ca:69:d5:b0:1a:07:92:50:e5:35:c5:
61:c1:ea:3b:18:cd:c2:b3:4d:d5:33:25:7c:c2:92:
82:4e:66:dd:59:50:fb:55:50:00:67:67:c0:fc:16:
40:c2:fe:49:57:cc:a0:f0:d2:32:03:73:87:05:0b:
0b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:31:68:A7:23:6E:A7:9A:AB:42:E7:57:9E:ED:6C:47:04:A4:DC:DB
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/cDFopyNup5qrQudXnu1sRwSk3Ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.194.0/24
91.224.22.0/23
193.33.48.0/24
193.238.134.0/23
Signature Algorithm: sha256WithRSAEncryption
80:8c:dd:f1:82:0a:91:0a:23:ff:5e:66:13:03:22:be:da:d2:
59:6c:6b:16:1b:0e:5d:67:07:90:ca:b2:f8:5f:e9:98:90:52:
5b:fd:01:5f:fe:4c:3e:7f:65:c0:53:a8:11:c0:63:e5:b3:1d:
82:84:93:ff:5a:34:85:00:87:16:54:f2:96:a2:c7:29:15:c8:
75:f8:d7:39:80:4e:e5:68:c8:33:2b:5e:fe:07:19:87:76:00:
21:31:35:fd:15:35:9e:6d:3d:d3:00:c0:2b:2b:0a:1e:98:58:
5d:23:e8:6f:98:b5:15:c2:79:18:00:52:83:a9:33:38:0e:5d:
26:2e:e1:1c:e9:51:71:ca:46:89:b4:bc:9f:5e:70:e0:5b:54:
46:62:4b:63:03:55:bd:92:d2:90:0c:ef:8c:4c:fc:44:de:0e:
16:16:d8:92:b1:21:f5:50:6d:32:9e:50:28:6f:70:f3:e1:7a:
40:61:d9:72:1e:bd:0d:b3:52:74:84:5e:a8:58:7b:0b:9d:bb:
29:76:fd:29:e1:ff:e7:ae:e3:a8:27:3b:4f:92:1d:48:a2:9c:
79:d0:be:87:83:59:23:b8:78:b2:1c:88:4f:88:6f:9c:00:50:
ed:de:dd:03:a6:46:3b:29:18:6f:0d:bd:2c:07:3f:8d:33:36:
c0:46:e3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:51 2024 by rpki-client on console-fra.rpki-client.org