Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/AR95h7Qm0f4usg7nY7m4TeH8pj0.roa
File: AR95h7Qm0f4usg7nY7m4TeH8pj0.roa (raw, json)
Hash identifier: tnNNUiLxdKCt98lfDjY8QD3I+e6obrklTBGQ7Ia+m+M=
Subject key identifier: 01:1F:79:87:B4:26:D1:FE:2E:B2:0E:E7:63:B9:B8:4D:E1:FC:A6:3D
Certificate issuer: /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Certificate serial: 0187008FF685667FE4E0F41DC302CF588D04
Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/AR95h7Qm0f4usg7nY7m4TeH8pj0.roa
Signing time: Mon 20 Mar 2023 19:47:27 +0000
ROA not before: Mon 20 Mar 2023 19:47:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209605
IP address blocks: 91.224.92.0/24 maxlen: 24
185.36.81.0/24 maxlen: 24
185.169.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:00:8f:f6:85:66:7f:e4:e0:f4:1d:c3:02:cf:58:8d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Validity
Not Before: Mar 20 19:47:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=011f7987b426d1fe2eb20ee763b9b84de1fca63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8f:81:68:43:55:d2:63:87:69:e0:a5:1c:78:
5b:f7:ea:23:2c:61:9a:18:26:13:9e:ca:66:d0:b5:
b4:55:37:16:24:db:16:a6:af:42:d8:98:28:9a:52:
d4:12:6d:74:ec:d0:ff:fa:a1:fe:fa:9a:e4:31:67:
41:fa:fa:0a:ed:2e:6c:b3:fb:0f:9a:6d:9f:50:a0:
f7:52:6f:99:0c:a3:a2:eb:06:f1:0b:d2:92:d7:24:
16:39:63:fc:b3:4a:64:27:73:4b:6e:d5:3d:ef:a8:
91:f7:9f:9a:f8:bd:64:d2:c3:81:92:4f:ed:2d:e8:
e4:76:dd:1a:24:9e:a1:5b:9a:41:e1:65:a8:3f:44:
c1:cb:36:c1:62:c8:68:a8:ea:f9:ca:3e:2a:85:14:
8e:c6:60:15:12:51:78:ee:58:c4:86:52:2c:3b:cc:
84:08:d8:41:4d:17:b9:86:a0:b1:1c:f3:a2:de:fd:
10:07:4d:2a:81:6e:7d:c9:80:bf:dd:8a:4a:0b:16:
1c:84:53:87:08:32:28:4f:26:f2:c7:44:b4:2f:70:
77:f4:cc:51:a0:0b:8a:f4:4f:12:01:33:a4:3d:09:
04:94:8d:52:25:6f:99:ad:d9:c7:2b:3c:57:1f:cf:
0e:28:4a:1d:c0:6b:b0:30:f9:53:0f:60:1f:fc:c4:
ab:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1F:79:87:B4:26:D1:FE:2E:B2:0E:E7:63:B9:B8:4D:E1:FC:A6:3D
X509v3 Authority Key Identifier:
keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/AR95h7Qm0f4usg7nY7m4TeH8pj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.92.0/24
185.36.81.0/24
185.169.4.0/24
Signature Algorithm: sha256WithRSAEncryption
71:d9:60:f0:37:31:0c:79:dd:75:43:19:67:95:61:c9:50:cb:
ac:1a:cd:7e:3f:4b:03:53:00:1c:c4:91:71:c5:7b:0c:9f:0c:
57:44:04:ff:60:81:d2:db:b4:a9:72:3f:c2:cc:5b:86:12:fe:
86:c2:28:d3:e2:7d:06:fc:da:f5:3b:02:8a:cd:e5:c4:e2:fa:
e4:bf:65:c8:8b:e7:a6:48:99:93:ec:01:f4:42:95:e6:e4:ea:
09:b6:6f:27:6d:b2:38:68:20:ea:3c:ca:9f:10:6a:59:0e:45:
8d:18:a3:3f:8b:b5:ed:d4:dd:c2:c1:74:91:89:66:76:9b:c9:
a4:04:cb:4f:72:d6:d5:4f:3c:19:6e:85:ea:9b:ed:0c:32:41:
2b:e6:a6:ff:91:8b:53:6a:ba:52:04:a0:24:de:cb:3f:bb:db:
ee:9e:53:53:2e:5a:d5:ea:70:d1:5d:d4:05:cc:f7:10:6d:5a:
3e:c9:62:f5:28:9e:f0:c5:fa:03:68:b9:8a:a1:4c:90:0e:27:
af:fa:01:fc:00:48:f6:64:17:1d:0b:40:ee:ba:42:e5:a1:ba:
0c:ca:03:eb:36:68:48:97:a5:2a:85:a5:b1:4d:5a:ab:05:89:
a5:34:50:69:39:be:22:ac:32:46:61:9a:4d:09:b4:47:5c:c9:
54:66:a8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:44 2024 by rpki-client on console-fra.rpki-client.org