Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/8mGq9FGRXraSyOaXIu98rr9uUfQ.roa
File: 8mGq9FGRXraSyOaXIu98rr9uUfQ.roa (raw, json)
Hash identifier: bVq3AgQSEgJREvhUGhLnwwgmfgCl7fRqoOIcXXoQ1NU=
Subject key identifier: F2:61:AA:F4:51:91:5E:B6:92:C8:E6:97:22:EF:7C:AE:BF:6E:51:F4
Certificate issuer: /CN=4eeb6b2c3e09ca1c45fd7547e458946cc8a468b4
Certificate serial: 01856D4AB6A0E3EEFCF0124D892C9CBA67DC
Authority key identifier: 4E:EB:6B:2C:3E:09:CA:1C:45:FD:75:47:E4:58:94:6C:C8:A4:68:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/8mGq9FGRXraSyOaXIu98rr9uUfQ.roa
Signing time: Sun 01 Jan 2023 12:24:50 +0000
ROA not before: Sun 01 Jan 2023 12:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8934
IP address blocks: 185.109.120.0/22 maxlen: 24
193.188.64.0/19 maxlen: 24
93.93.144.0/21 maxlen: 24
2a02:9c0::/29 maxlen: 29
2a02:9c6::/32 maxlen: 32
2a02:9c7::/32 maxlen: 32
2a02:9c0::/32 maxlen: 64
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:b6:a0:e3:ee:fc:f0:12:4d:89:2c:9c:ba:67:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eeb6b2c3e09ca1c45fd7547e458946cc8a468b4
Validity
Not Before: Jan 1 12:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f261aaf451915eb692c8e69722ef7caebf6e51f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0e:de:d7:05:ec:53:b9:7d:15:e4:60:14:d1:
42:61:ce:25:ed:be:95:af:79:d8:7a:6b:78:b7:d7:
8a:cf:08:04:89:82:26:52:ce:28:b0:01:88:4b:e1:
57:7a:be:74:1b:72:72:c5:66:a7:b8:d1:45:0b:24:
46:fb:49:39:01:b2:ac:68:80:4e:13:a6:f0:91:1a:
22:71:3a:60:0b:7d:31:1b:d2:b6:c2:f4:a7:a6:d6:
cd:13:51:53:39:a6:92:c6:08:a7:0f:3f:91:18:ac:
ae:bb:0e:ad:ac:13:c9:2a:51:6b:b4:98:c1:23:d0:
2d:d3:b9:0d:f6:04:e9:10:6f:b9:7e:8d:77:1b:2c:
20:9d:db:2c:a3:ed:4b:30:dc:63:7f:cd:d8:02:c3:
9c:a0:e2:33:d4:1a:68:96:bf:4a:d8:26:76:a4:f0:
1d:c9:99:17:39:9f:16:7e:2c:2e:be:9d:cb:de:d5:
06:ea:ca:fb:55:d3:af:41:58:86:e1:8b:17:a1:23:
d6:50:04:26:28:97:3d:2d:07:7b:03:78:79:ca:9f:
b1:61:db:05:26:f9:bf:04:8e:84:92:e4:fb:2e:ac:
0f:13:65:7a:ae:63:04:bc:96:d5:3c:3f:a8:e7:0e:
46:47:86:96:90:df:ce:99:58:39:5e:ba:91:bc:a9:
8a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:61:AA:F4:51:91:5E:B6:92:C8:E6:97:22:EF:7C:AE:BF:6E:51:F4
X509v3 Authority Key Identifier:
keyid:4E:EB:6B:2C:3E:09:CA:1C:45:FD:75:47:E4:58:94:6C:C8:A4:68:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/8mGq9FGRXraSyOaXIu98rr9uUfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.144.0/21
185.109.120.0/22
193.188.64.0/19
IPv6:
2a02:9c0::/29
Signature Algorithm: sha256WithRSAEncryption
41:bf:cf:c3:ad:0d:a9:81:b8:04:31:cb:7f:db:dc:dd:a1:54:
fa:41:d5:ea:f9:07:54:18:97:c9:1a:4d:4a:09:0b:76:ea:66:
0f:f0:65:45:3e:b4:93:99:9f:a8:f6:71:ba:37:3d:62:d0:9a:
8b:2c:1c:b4:a0:1f:e5:11:70:4c:3d:3b:9e:73:5b:5c:f1:8a:
c0:e5:68:8a:de:f9:e0:c1:f0:7c:ff:e7:c9:c8:32:be:ea:9b:
83:0a:7b:2c:fb:e0:1b:e7:66:d9:fb:f0:b9:ef:c9:d2:03:06:
61:5e:82:a8:f6:27:b5:35:5a:b8:e0:18:05:c1:05:eb:1f:9f:
cc:38:bf:c7:b8:bc:9b:0d:cf:5b:54:1f:7c:ba:b1:0e:6d:50:
c0:61:c3:4f:d5:aa:bc:91:63:d1:0e:91:96:c6:ac:c2:3a:a8:
2a:59:79:fe:18:b3:57:10:a0:bf:7b:48:f1:fa:fe:a2:ea:37:
1b:3e:47:4d:ab:bc:c5:87:28:8d:68:41:e9:3d:3f:92:b2:be:
88:5a:31:b3:88:1e:d4:87:aa:bd:fa:84:50:43:b9:dc:ca:e0:
09:f6:66:a9:e6:81:0a:2f:8e:1e:44:4e:5a:8e:60:d6:0f:fd:
eb:39:23:ba:84:ca:92:31:2b:ad:1a:2f:24:c9:fc:69:6c:02:
85:eb:e8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:08 2024 by rpki-client on console-ams.rpki-client.org