Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/0rNuzMpc6G7OOn3CrF_nCfXroOQ.roa
File: 0rNuzMpc6G7OOn3CrF_nCfXroOQ.roa (raw, json)
Hash identifier: mUwnLPdWxecezugYDbOq3QMLr/oRrzrKF/Pwd4B8bJo=
Subject key identifier: D2:B3:6E:CC:CA:5C:E8:6E:CE:3A:7D:C2:AC:5F:E7:09:F5:EB:A0:E4
Certificate issuer: /CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Certificate serial: 01856FCBAED2B64EABF88D9B0EB7AE0F46D2
Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/0rNuzMpc6G7OOn3CrF_nCfXroOQ.roa
Signing time: Mon 02 Jan 2023 00:04:57 +0000
ROA not before: Mon 02 Jan 2023 00:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199669
IP address blocks: 185.195.170.0/23 maxlen: 24
91.109.200.0/21 maxlen: 24
46.29.118.0/23 maxlen: 24
185.10.44.0/24 maxlen: 24
185.10.44.0/22 maxlen: 24
2a03:ec0::/48 maxlen: 64
2a03:ec0:1::/48 maxlen: 64
Validation: Failed, certificate revoked on Fri 22 Dec 2023 09:26:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:ae:d2:b6:4e:ab:f8:8d:9b:0e:b7:ae:0f:46:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Validity
Not Before: Jan 2 00:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2b36eccca5ce86ece3a7dc2ac5fe709f5eba0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:87:88:6b:8b:ff:71:07:f9:11:8c:6f:d0:f6:
d4:e0:ba:6a:30:a5:db:94:1f:60:a7:73:3a:8b:72:
cf:0a:fa:89:14:95:9d:23:fb:70:60:83:20:f6:24:
a3:22:b3:5a:ae:e8:bf:b1:8a:00:59:fc:f2:2c:d7:
21:71:3b:a2:16:71:f0:a2:06:ff:6d:bc:55:d7:a5:
87:45:62:01:2d:20:a8:bc:05:e1:ba:88:d2:c0:8f:
c3:50:8c:51:5f:f7:b7:3b:4f:b2:27:0c:24:77:1b:
f8:6f:8c:75:de:ec:f3:63:98:d1:80:21:64:9c:7f:
30:05:8b:ba:38:35:f2:0b:7c:1d:a2:5e:02:f0:8f:
8e:d0:65:c7:0a:76:ad:49:74:34:be:1d:1d:b0:20:
22:63:ea:51:a3:28:51:41:d0:e5:b4:89:0f:ec:16:
c5:e7:76:68:94:e8:cc:98:80:6a:87:af:5b:e7:61:
65:a1:d1:a3:91:53:47:23:b8:40:de:34:14:f8:74:
d4:24:f6:98:c2:55:66:4d:66:3a:a4:3e:67:db:77:
e5:5b:e0:ec:ab:f5:8d:a8:a0:e6:df:e4:04:be:ea:
7d:88:56:48:a8:2f:a4:80:6d:f5:3c:e7:bd:7b:4b:
6c:5f:21:d4:fe:d2:31:b1:8a:69:3e:f5:55:be:30:
79:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B3:6E:CC:CA:5C:E8:6E:CE:3A:7D:C2:AC:5F:E7:09:F5:EB:A0:E4
X509v3 Authority Key Identifier:
keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/0rNuzMpc6G7OOn3CrF_nCfXroOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.118.0/23
91.109.200.0/21
185.10.44.0/22
185.195.170.0/23
IPv6:
2a03:ec0::/47
Signature Algorithm: sha256WithRSAEncryption
31:f4:85:bb:1b:9b:f9:24:e1:ec:58:07:42:5a:4a:d1:a5:91:
04:1b:fd:0c:66:13:21:6b:8f:da:c9:ed:96:49:c2:d0:68:c6:
82:b2:12:81:e6:c3:90:f0:20:78:37:84:be:cf:2a:5c:f5:ad:
c4:13:76:f4:38:32:cc:0e:24:fb:88:32:64:84:02:7d:f8:01:
d6:5a:eb:3f:52:c1:b4:62:a3:e8:8a:a8:7e:1f:75:c0:2f:95:
fb:5a:71:ad:cd:d8:c9:1f:df:90:29:64:f9:a0:20:c3:67:91:
7d:ea:55:5d:26:11:ad:6f:d9:7f:de:4e:be:2c:60:0e:72:12:
cb:9d:36:cb:6a:ec:27:99:48:cd:b0:d4:19:12:43:ae:6f:d5:
c9:43:e8:4b:f0:0b:0c:76:00:ca:23:c4:a6:09:b8:02:e3:ec:
23:a0:e5:ec:78:46:e9:cf:38:dc:b7:e8:39:4b:24:a8:a5:46:
66:f8:f6:32:73:2f:ad:b4:d9:78:97:06:78:bd:03:9f:6c:71:
da:3b:18:bc:8a:71:97:3b:d7:61:d5:cc:aa:cc:56:c3:7d:fc:
16:19:8c:95:cf:15:cb:4f:0d:3e:88:75:a0:8a:dc:41:68:fb:
8b:ab:58:2a:5a:e4:0a:7e:e8:63:00:d2:62:71:66:43:90:4f:
9e:f3:48:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:59 2024 by rpki-client on console-ams.rpki-client.org