Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/as0fsQU6ZYVxuJrAM7ABbwvT12k.roa
File: as0fsQU6ZYVxuJrAM7ABbwvT12k.roa (raw, json)
Hash identifier: K7EqBHb9odf4/vWL3arS2kSoqJ/yGSvHkPPlZ5tBb0U=
Subject key identifier: 6A:CD:1F:B1:05:3A:65:85:71:B8:9A:C0:33:B0:01:6F:0B:D3:D7:69
Certificate issuer: /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial: 0190D9C49B4762F77204A4EB9EF04E6BF42B
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/as0fsQU6ZYVxuJrAM7ABbwvT12k.roa
Signing time: Mon 22 Jul 2024 09:27:38 +0000
ROA not before: Mon 22 Jul 2024 09:27:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198949
IP address blocks: 92.40.0.0/20 maxlen: 20
92.40.16.0/20 maxlen: 20
92.40.32.0/20 maxlen: 20
92.40.48.0/20 maxlen: 20
92.40.64.0/20 maxlen: 20
92.40.80.0/20 maxlen: 20
92.40.96.0/20 maxlen: 20
92.40.112.0/20 maxlen: 20
92.40.128.0/19 maxlen: 19
92.40.160.0/21 maxlen: 21
92.40.168.0/23 maxlen: 23
92.40.170.0/23 maxlen: 23
92.40.172.0/23 maxlen: 23
92.40.174.0/23 maxlen: 23
92.40.176.0/23 maxlen: 23
94.197.48.0/20 maxlen: 20
94.197.104.0/21 maxlen: 21
188.28.192.0/18 maxlen: 18
188.29.32.0/20 maxlen: 20
188.29.48.0/20 maxlen: 20
188.30.0.0/22 maxlen: 22
188.30.4.0/23 maxlen: 23
188.30.6.0/24 maxlen: 24
188.30.7.0/25 maxlen: 25
188.30.8.0/21 maxlen: 21
188.30.16.0/21 maxlen: 21
188.30.160.0/19 maxlen: 19
188.30.224.0/20 maxlen: 20
188.31.0.0/22 maxlen: 22
188.31.4.0/23 maxlen: 23
188.31.6.0/24 maxlen: 24
188.31.32.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 22 Jul 2024 19:36:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d9:c4:9b:47:62:f7:72:04:a4:eb:9e:f0:4e:6b:f4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
Validity
Not Before: Jul 22 09:27:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6acd1fb1053a658571b89ac033b0016f0bd3d769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:59:1b:2f:68:6a:93:0e:3e:1d:9d:24:0a:ff:
15:16:08:aa:46:03:f1:c5:ee:6e:42:6f:e8:5d:64:
a3:64:62:6b:6b:1a:79:a1:d1:fc:08:3d:d7:69:35:
5b:ee:1d:b9:03:d5:d5:c2:6d:69:bb:9b:4e:22:92:
52:01:be:29:92:bd:d2:62:72:94:97:84:e1:d9:2e:
30:6b:8e:9f:d9:6e:22:9d:33:ba:06:66:12:d1:46:
93:22:bc:3f:ea:d0:d0:e8:89:fa:8f:89:7d:2e:bb:
c9:bc:5e:56:6a:f0:b7:32:e0:99:19:bc:f5:11:05:
90:af:89:c5:00:20:57:48:2a:68:68:1b:72:ca:f4:
8c:b0:7c:0e:02:42:33:93:04:86:70:18:f5:11:f0:
5a:2f:39:6a:1e:da:e2:5d:f4:99:f7:94:52:6b:dd:
f2:f6:8d:df:16:0e:f9:3c:bd:c3:e3:d2:ca:88:42:
96:f5:8b:d6:04:69:80:92:3e:0b:fa:3c:06:65:8c:
9b:b9:ba:d7:49:16:6b:fa:38:f2:28:9c:f7:e2:c6:
19:0a:b1:65:6b:30:aa:b0:f5:c8:8a:40:f0:5f:b9:
ab:8f:86:11:fb:62:92:57:5d:3a:87:3e:38:58:89:
e0:30:ac:de:39:74:da:2d:c8:31:01:ed:cb:65:67:
06:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CD:1F:B1:05:3A:65:85:71:B8:9A:C0:33:B0:01:6F:0B:D3:D7:69
X509v3 Authority Key Identifier:
keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/as0fsQU6ZYVxuJrAM7ABbwvT12k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.40.0.0-92.40.177.255
94.197.48.0/20
94.197.104.0/21
188.28.192.0/18
188.29.32.0/19
188.30.0.0-188.30.7.127
188.30.8.0-188.30.23.255
188.30.160.0/19
188.30.224.0/20
188.31.0.0-188.31.6.255
188.31.32.0/19
Signature Algorithm: sha256WithRSAEncryption
6f:1a:52:02:fc:47:27:9b:24:0b:cb:46:9f:d3:29:70:c1:1f:
f1:f1:0b:75:c8:62:ed:57:e6:79:a1:e7:18:90:2c:cd:f9:a2:
7c:7c:1b:0f:3b:f9:a5:5c:e7:ba:10:8e:51:cc:2f:b4:ff:51:
ed:6f:86:1f:d2:54:47:7c:89:ee:83:14:75:bf:39:f1:a9:66:
c6:89:9b:c1:99:a1:27:e3:8d:81:1b:94:68:25:7c:5b:3d:1c:
67:6c:ce:89:94:bd:0f:08:fb:9b:22:65:b4:bd:a8:a6:d8:8a:
20:1f:55:3e:46:9d:a8:ac:79:92:ff:0d:82:0b:b5:52:3e:c2:
32:62:54:45:37:5a:89:3f:69:37:3a:01:82:c6:78:39:79:b7:
90:ab:cd:04:04:91:49:82:56:ec:9e:54:70:89:c9:62:72:d0:
05:89:40:7f:26:54:6b:65:94:37:75:d9:5a:c6:9f:bb:51:4e:
e4:0b:e6:7b:c2:83:4f:07:a4:b7:ec:3e:89:56:cd:fa:c3:7d:
0c:09:f8:4d:25:63:81:12:19:18:2c:f8:3c:d2:0d:2b:76:fc:
0a:cb:ac:d9:c8:48:c1:c3:92:2b:e9:19:d1:f9:78:71:5d:91:
75:19:89:61:6d:52:9a:77:ec:90:7a:50:f9:8a:a1:ea:b3:29:
f3:b2:2e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 21:28:39 2024 by rpki-client on console-fra.rpki-client.org