Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/p97ntNWhegaxxbafbZkabRSMTg8.roa
File: p97ntNWhegaxxbafbZkabRSMTg8.roa (raw, json)
Hash identifier: 0dTpwzzvXKFn0kL0lsp5iOSxoUaHpcIQ9yHtxcZ3YLI=
Subject key identifier: A7:DE:E7:B4:D5:A1:7A:06:B1:C5:B6:9F:6D:99:1A:6D:14:8C:4E:0F
Certificate issuer: /CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Certificate serial: 018DF05E4D1140B89947551B074C7DB21DE5
Authority key identifier: C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/p97ntNWhegaxxbafbZkabRSMTg8.roa
Signing time: Wed 28 Feb 2024 15:38:48 +0000
ROA not before: Wed 28 Feb 2024 15:38:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206610
IP address blocks: 78.111.128.0/20 maxlen: 24
92.119.100.0/24 maxlen: 24
92.119.101.0/24 maxlen: 24
92.119.102.0/24 maxlen: 24
92.119.103.0/24 maxlen: 24
185.104.168.0/22 maxlen: 24
185.173.180.0/22 maxlen: 24
2a0b:b880::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 05 Jun 2024 08:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f0:5e:4d:11:40:b8:99:47:55:1b:07:4c:7d:b2:1d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Validity
Not Before: Feb 28 15:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7dee7b4d5a17a06b1c5b69f6d991a6d148c4e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:86:c7:f8:0d:ad:37:d8:75:3f:ed:67:7e:0b:
44:3e:9c:cd:47:1e:7b:ae:2e:be:13:e6:cd:53:af:
c2:09:44:7d:e0:1c:b1:f0:da:bf:26:f9:06:6c:fc:
8b:5f:e7:2a:cd:4d:8b:26:6f:55:47:4a:4c:e1:d5:
24:45:00:68:87:d5:7f:f0:56:b7:4a:4b:dd:ef:48:
52:4b:4c:ee:35:a7:03:db:40:ca:e6:12:5a:b1:78:
e1:d2:b1:08:1c:44:26:2b:7f:78:99:c2:05:66:d7:
d3:89:51:a7:e2:ad:09:72:05:a8:ee:1c:64:f4:d7:
0a:cd:be:5e:18:3c:87:e0:c4:a1:d2:af:09:a3:90:
3b:dd:c2:8c:77:d4:5c:25:e2:b3:77:13:a1:00:f4:
14:2f:e0:6e:a5:fb:78:8e:4c:f8:de:77:28:8d:4d:
22:13:49:57:8b:42:8a:e5:46:55:a6:77:2d:36:80:
57:e5:79:c2:db:f3:79:3d:84:c6:8e:4b:fc:39:67:
47:ec:6a:23:7c:18:ea:7a:7b:32:a8:9b:33:63:30:
32:28:19:d1:60:62:c1:42:3e:fe:3c:47:6e:4e:d0:
e2:65:83:42:bc:2a:0d:a5:5b:57:ce:a9:9d:83:8d:
e1:81:18:9e:20:76:0f:03:34:0c:41:32:5e:81:09:
d6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DE:E7:B4:D5:A1:7A:06:B1:C5:B6:9F:6D:99:1A:6D:14:8C:4E:0F
X509v3 Authority Key Identifier:
keyid:C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/p97ntNWhegaxxbafbZkabRSMTg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.111.128.0/20
92.119.100.0/22
185.104.168.0/22
185.173.180.0/22
IPv6:
2a0b:b880::/29
Signature Algorithm: sha256WithRSAEncryption
11:aa:b4:f0:17:9c:eb:c4:97:87:cd:67:95:83:c5:56:ad:ed:
1a:f0:09:49:6b:99:c9:01:9a:59:4e:55:a8:1d:0b:f7:54:43:
80:a4:ad:b4:35:6c:74:f0:59:23:74:38:49:7e:ef:54:9a:83:
29:d4:38:47:92:57:b7:30:3b:76:88:b2:0c:92:d6:c1:4e:19:
bf:f0:d4:cb:41:d6:7f:de:4f:20:c2:eb:ab:f8:82:be:4b:1b:
63:e3:5c:05:df:39:b3:49:38:a4:63:0e:fe:10:72:c8:1d:ae:
79:34:7f:be:e9:3e:e7:8a:ba:29:d2:ed:72:ad:3a:fd:11:cb:
56:81:e7:55:a4:bf:c4:4d:63:cc:3c:04:5f:af:70:7e:f1:fe:
34:e9:db:db:06:dd:ba:2b:14:f2:65:16:b0:d9:c9:30:35:01:
ac:24:ce:18:0e:a9:85:82:c8:2b:3e:2d:be:37:5c:b8:52:59:
c8:ab:c0:ee:61:dc:64:7b:c5:e2:53:91:9b:a0:6f:48:e4:2a:
85:69:07:5c:63:ba:56:65:81:90:6c:89:7c:8e:d0:3b:03:db:
1d:de:58:92:2c:18:ca:94:f6:4e:c0:1f:cb:02:8e:55:59:a1:
7f:75:7f:c9:e9:35:c3:bb:fa:8d:54:04:48:c0:80:58:04:3a:
e2:78:f8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 14:41:57 2024 by rpki-client on console.sobornost.net