Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7pGaVaSEUYylNghIneq1l6PCqjQ.roa
File: 7pGaVaSEUYylNghIneq1l6PCqjQ.roa (raw, json)
Hash identifier: meTNt427dTCB6TXvPWAgltRzxHmS9wjvAEHYHq3Hy1I=
Subject key identifier: EE:91:9A:55:A4:84:51:8C:A5:36:08:48:9D:EA:B5:97:A3:C2:AA:34
Certificate issuer: /CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
Certificate serial: 01856D8AB3108799BC4E651046A4AF7FF4F8
Authority key identifier: EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7pGaVaSEUYylNghIneq1l6PCqjQ.roa
Signing time: Sun 01 Jan 2023 13:34:44 +0000
ROA not before: Sun 01 Jan 2023 13:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39505
IP address blocks: 87.247.250.0/24 maxlen: 24
93.93.8.0/24 maxlen: 24
87.247.248.0/24 maxlen: 24
87.247.249.0/24 maxlen: 24
87.247.254.0/24 maxlen: 24
93.93.12.0/24 maxlen: 24
87.247.255.0/24 maxlen: 24
93.93.13.0/24 maxlen: 24
78.40.136.0/24 maxlen: 24
78.40.137.0/24 maxlen: 24
78.40.138.0/24 maxlen: 24
2a00:6580::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 19 Apr 2023 08:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:b3:10:87:99:bc:4e:65:10:46:a4:af:7f:f4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
Validity
Not Before: Jan 1 13:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee919a55a484518ca53608489deab597a3c2aa34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f5:69:0b:14:7e:d9:1c:b9:26:e4:0c:ec:25:
b9:3a:36:64:8f:64:78:c3:39:9f:06:28:53:17:47:
64:0e:78:f9:20:32:b8:c3:28:7d:21:b4:40:a5:75:
e6:9b:3f:85:6b:72:d9:96:8d:65:b4:b2:1c:51:2e:
04:fa:48:72:43:1d:f5:31:91:8b:40:83:4d:27:27:
ae:ea:90:56:94:41:e6:72:67:4b:d7:a9:a7:f9:6f:
cf:c7:49:ed:72:c3:cd:00:80:3f:d6:4f:a9:ea:db:
fa:6d:09:e0:94:a0:e1:68:5f:4c:5d:57:d2:c8:eb:
64:5d:0b:84:e3:6d:06:a6:1e:97:56:f2:8d:b7:79:
40:e8:51:eb:da:74:2e:d3:5f:78:cc:9b:f6:10:3f:
b3:79:05:30:52:96:cb:9d:ac:45:6a:8d:0f:6d:f1:
39:9d:7d:33:e9:07:60:f5:67:78:5a:5f:ff:b7:7a:
f7:f2:a2:7e:03:a3:33:0b:72:65:dc:ac:28:cc:3e:
44:e3:9c:7b:0c:c6:92:36:0d:48:0f:dd:7a:66:9e:
90:21:06:d7:6d:17:e6:56:65:74:aa:2e:2b:c1:9c:
e3:c3:6b:86:95:16:96:82:20:fc:da:49:1d:1f:f3:
41:2f:2b:1f:bf:56:5f:b0:88:cb:9b:c6:68:bb:82:
a1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:91:9A:55:A4:84:51:8C:A5:36:08:48:9D:EA:B5:97:A3:C2:AA:34
X509v3 Authority Key Identifier:
keyid:EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7pGaVaSEUYylNghIneq1l6PCqjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.136.0-78.40.138.255
87.247.248.0-87.247.250.255
87.247.254.0/23
93.93.8.0/24
93.93.12.0/23
IPv6:
2a00:6580::/32
Signature Algorithm: sha256WithRSAEncryption
10:77:06:df:4f:39:1f:a6:b4:67:a1:27:6e:c5:ca:a1:a3:fa:
af:39:c5:4b:53:0c:fb:ad:33:fa:d1:be:5f:27:69:b7:0e:0b:
c0:a0:b8:12:73:74:87:94:b0:27:e7:79:59:d7:da:f2:bd:a8:
7f:47:31:6d:6e:0b:63:89:02:a2:b4:70:40:fe:e5:b5:22:c9:
84:fa:7e:93:f0:6c:2e:dc:70:6d:71:e1:ff:37:08:bc:11:e1:
a2:07:1e:fa:c8:e4:7b:e7:a5:bd:ff:62:32:42:bb:99:f9:24:
86:2d:82:d2:c8:6a:ab:d7:84:99:a5:05:c6:f8:e8:46:e7:70:
89:cf:c9:51:2c:42:82:7f:0e:79:09:c9:a9:40:5f:db:e3:90:
ad:1f:d4:57:b3:e9:59:2f:63:5b:f5:cf:54:03:94:e2:70:e8:
cb:80:c3:7c:02:1a:87:5f:45:42:4d:bd:42:28:d1:49:31:b2:
74:0b:e7:dd:34:66:1e:a6:be:66:f5:81:be:33:e5:f9:b7:e0:
8a:90:1c:86:db:14:23:61:b2:e7:72:23:ec:0d:f1:36:2d:d9:
7e:43:48:67:99:b3:d5:72:50:27:95:28:e5:1b:ac:b8:33:e9:
f8:fb:63:84:ee:e4:da:f6:83:a4:56:ed:3e:9f:e9:f5:f2:1c:
39:61:f6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:08 2024 by rpki-client on console-fra.rpki-client.org