Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/c92NrJ1u04n9KqBBe_LbUXguDbA.roa
File: c92NrJ1u04n9KqBBe_LbUXguDbA.roa (raw, json)
Hash identifier: U/bOKv5El75OxXfKKPXaVLyeslyMPAzbL/LJVg1IYOQ=
Subject key identifier: 73:DD:8D:AC:9D:6E:D3:89:FD:2A:A0:41:7B:F2:DB:51:78:2E:0D:B0
Certificate issuer: /CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Certificate serial: 01856CF848BC619F930145D9937F047FF52B
Authority key identifier: C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/c92NrJ1u04n9KqBBe_LbUXguDbA.roa
Signing time: Sun 01 Jan 2023 10:54:48 +0000
ROA not before: Sun 01 Jan 2023 10:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33930
IP address blocks: 80.75.152.0/21 maxlen: 21
93.187.40.0/21 maxlen: 21
91.223.207.0/24 maxlen: 24
45.15.212.0/22 maxlen: 22
185.56.204.0/22 maxlen: 22
194.6.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:48:bc:61:9f:93:01:45:d9:93:7f:04:7f:f5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Validity
Not Before: Jan 1 10:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73dd8dac9d6ed389fd2aa0417bf2db51782e0db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5f:19:05:b5:1e:f5:0c:4d:84:56:37:76:54:
ce:84:6e:cb:62:0b:fd:0a:da:4b:cd:be:58:5d:7a:
cd:f7:07:47:f3:9d:ab:14:37:79:a6:2b:3d:b0:c1:
dc:61:5a:ac:e3:19:59:b0:de:32:c0:da:74:fe:ed:
70:d2:2c:9c:90:5e:3d:8e:33:e2:df:7a:89:91:c7:
f5:e9:ab:fa:73:d9:34:af:9b:e6:ad:db:6a:6c:26:
37:2e:73:03:a3:37:31:7d:90:ab:5a:1c:81:c1:d2:
14:a3:5f:0a:c0:d5:75:b1:d9:82:48:2b:12:de:18:
19:8f:30:d4:91:fd:10:20:6f:ad:99:b8:14:a9:17:
46:27:21:4d:e7:a4:c5:60:90:12:d4:a2:af:e1:56:
b1:e6:63:04:2a:bf:20:9e:dd:25:34:3a:d0:86:c0:
d3:2d:19:80:b8:8f:ce:85:0e:63:a2:f2:c6:4d:19:
55:1d:a7:36:21:54:a7:f3:e1:89:91:3d:f9:88:1f:
c4:9e:44:70:53:19:43:09:3c:57:c9:13:79:47:e5:
91:6e:a4:06:4b:b1:95:4c:e4:f6:19:21:4d:ba:d9:
0d:73:0e:a8:df:71:f8:b2:a0:9c:5e:e8:32:05:b8:
a0:45:f4:f4:91:3d:34:ba:4f:0b:b4:a5:dc:77:7c:
83:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DD:8D:AC:9D:6E:D3:89:FD:2A:A0:41:7B:F2:DB:51:78:2E:0D:B0
X509v3 Authority Key Identifier:
keyid:C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/c92NrJ1u04n9KqBBe_LbUXguDbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.212.0/22
80.75.152.0/21
91.223.207.0/24
93.187.40.0/21
185.56.204.0/22
194.6.240.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:05:b3:3d:65:86:0e:61:22:6e:b8:7c:c3:b4:12:73:88:41:
69:12:34:47:54:c3:a8:2e:25:63:45:fb:a3:7f:7f:70:5e:8b:
e5:f3:d7:dd:e4:88:5c:f4:8e:a3:2c:92:8b:73:50:14:0f:92:
e1:f4:56:ae:3a:ed:f1:00:a9:52:9c:9b:b4:11:8c:4e:0a:19:
8e:0c:1b:81:eb:6c:da:6d:e1:c6:67:65:60:94:9b:8e:79:46:
75:51:71:07:db:57:5d:c8:69:ef:f1:c7:1f:3c:b6:a1:89:6a:
c1:6c:19:46:dc:05:9b:6e:b3:3c:dd:4e:b6:c7:37:90:70:6d:
cd:0f:07:aa:72:09:fd:fc:3d:2e:ab:e5:d6:9e:2f:9b:cb:40:
f5:43:3b:e8:01:16:72:50:9d:56:53:3b:c7:90:5e:40:11:d7:
d4:af:72:94:1b:1d:6b:80:af:2d:fb:95:c5:4c:ac:fd:fa:08:
bf:af:88:d7:e3:88:8b:aa:f8:93:68:9f:8c:37:55:8a:b1:be:
46:ad:63:39:64:4b:a4:31:55:7b:46:4b:d1:ff:fb:ba:40:a9:
83:0a:f5:42:29:0f:2e:5b:bc:c4:29:c2:bf:1c:2b:b1:dc:08:
10:aa:a0:3d:70:52:0f:df:fd:6e:b5:ee:91:7b:1d:bd:31:4e:
9e:8c:a9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:27 2024 by rpki-client on console-fra.rpki-client.org