Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/sssjgL0adbAMIGj00bc5qEYis5k.roa
File: sssjgL0adbAMIGj00bc5qEYis5k.roa (raw, json)
Hash identifier: l1suKlKGxhjUgE2HYS8+KZfJ2Ca1MCLuF6Ho17JsupY=
Subject key identifier: B2:CB:23:80:BD:1A:75:B0:0C:20:68:F4:D1:B7:39:A8:46:22:B3:99
Certificate issuer: /CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
Certificate serial: 018CC56E9FC46A39BC991839A43F9FC8D85F
Authority key identifier: 7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/sssjgL0adbAMIGj00bc5qEYis5k.roa
Signing time: Mon 01 Jan 2024 14:30:10 +0000
ROA not before: Mon 01 Jan 2024 14:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64462
IP address blocks: 195.80.233.0/24 maxlen: 24
185.83.108.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 17:43:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:9f:c4:6a:39:bc:99:18:39:a4:3f:9f:c8:d8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
Validity
Not Before: Jan 1 14:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2cb2380bd1a75b00c2068f4d1b739a84622b399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:73:c8:03:63:eb:ba:2a:5a:c6:20:7a:c2:01:
24:51:09:21:e8:94:12:ad:79:94:1f:ee:10:76:e5:
2f:a0:45:66:3f:72:5c:cb:5e:66:7f:80:d6:8e:e8:
64:33:d4:cf:ab:25:af:13:20:5d:00:31:dc:4e:b7:
41:36:df:cd:53:be:a4:29:ee:c4:6b:96:03:7b:6b:
6f:d7:cc:6f:63:66:dc:91:6a:cb:02:4d:b5:fd:f1:
4d:61:97:d3:f4:a0:cb:83:0b:72:a3:1d:97:27:f1:
66:82:00:5d:8a:9d:cb:7a:44:6d:7a:fa:f6:98:e8:
2d:52:c3:50:3c:37:c2:d8:a5:b4:3a:34:17:b6:8d:
0e:09:bf:72:0c:dd:ce:d6:ad:29:39:51:c1:a4:38:
f5:fd:0c:ad:cd:03:22:01:15:7f:0a:45:ee:c9:c9:
ba:5a:db:b1:1d:57:01:5d:b6:30:34:6a:4f:41:fa:
8c:39:7e:0b:a0:09:20:4e:69:a8:ae:2b:b0:cf:53:
e3:6a:61:b0:95:9a:e5:37:1c:c4:22:32:38:2a:2e:
49:e7:ce:d0:e3:2a:ca:2f:55:29:94:8e:96:4a:14:
1f:1b:d7:f7:61:9a:ca:77:80:28:94:5e:cc:98:1d:
07:d4:a8:49:42:7f:08:30:03:77:18:8f:78:bf:ea:
d0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CB:23:80:BD:1A:75:B0:0C:20:68:F4:D1:B7:39:A8:46:22:B3:99
X509v3 Authority Key Identifier:
keyid:7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/sssjgL0adbAMIGj00bc5qEYis5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.108.0/22
195.80.233.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:62:76:f8:cf:40:1d:d5:07:ed:2c:9f:a1:04:f8:85:92:61:
57:d9:9c:e1:d2:b5:6c:9c:68:e4:89:9a:6c:9a:89:75:fa:1f:
21:7f:04:e8:aa:18:d4:96:2b:1f:65:ad:58:17:6e:60:60:9f:
16:b5:c4:24:28:3d:4e:60:44:01:4a:b3:36:ab:81:ad:54:52:
f8:00:da:2f:d7:28:ce:4a:37:07:ef:02:89:35:86:f7:27:7c:
0e:ab:2f:96:b7:3e:c6:71:91:04:4e:e6:78:9a:e8:7b:7c:08:
90:51:31:fd:c3:d7:2d:a3:70:05:01:09:f9:aa:36:15:95:fc:
02:18:f5:de:4a:6e:a9:7b:23:bf:1f:44:59:3b:e8:38:bb:0b:
fa:94:73:cb:12:6e:6d:3a:c8:62:9f:3b:35:2d:b3:92:64:4b:
51:2b:1c:ab:c1:d4:02:95:b4:ff:76:5d:d6:ff:5e:62:6b:54:
fa:e2:5c:a1:93:67:76:e7:4f:53:cf:50:23:3c:60:a1:3c:6e:
6a:e8:d5:25:93:0d:7b:6a:ed:31:25:db:88:04:42:21:52:a8:
45:d8:8f:65:bb:2a:70:ab:68:a0:a6:70:f2:6d:aa:c7:77:f3:
b9:98:eb:b8:f7:09:cd:b8:2b:89:7b:22:82:26:a5:76:b1:2e:
04:a4:c4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:52 2024 by rpki-client on console-ams.rpki-client.org