Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/C-JzZD2QF1NlwBYsOSTTONAiGJQ.roa
File: C-JzZD2QF1NlwBYsOSTTONAiGJQ.roa (raw, json)
Hash identifier: ek3iVlkxQ0hLVlCTjZjU8Zg0Oqxf2ylNkLtaTdErrQE=
Subject key identifier: 0B:E2:73:64:3D:90:17:53:65:C0:16:2C:39:24:D3:38:D0:22:18:94
Certificate issuer: /CN=b30e3011a0fb3111fbe8493c1230974aef532704
Certificate serial: 0188B5514A2D5F4B4DDD69CCECD70909631B
Authority key identifier: B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/C-JzZD2QF1NlwBYsOSTTONAiGJQ.roa
Signing time: Tue 13 Jun 2023 15:13:03 +0000
ROA not before: Tue 13 Jun 2023 15:13:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208951
IP address blocks: 94.141.97.0/24 maxlen: 24
94.141.96.0/24 maxlen: 24
94.141.98.0/24 maxlen: 24
94.141.99.0/24 maxlen: 24
109.207.169.0/24 maxlen: 24
109.207.172.0/24 maxlen: 24
109.207.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Jul 2023 15:45:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b5:51:4a:2d:5f:4b:4d:dd:69:cc:ec:d7:09:09:63:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30e3011a0fb3111fbe8493c1230974aef532704
Validity
Not Before: Jun 13 15:13:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0be273643d90175365c0162c3924d338d0221894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5f:94:e0:2b:8b:b0:49:8b:fa:bd:94:04:cf:
f8:15:88:36:2a:1c:38:78:fb:9c:61:59:44:aa:24:
2d:8b:6c:16:c0:6e:d6:9d:dc:23:54:38:20:56:69:
45:80:78:0f:11:9e:50:e4:5f:b3:e6:0f:03:3b:6a:
46:bd:69:f6:8b:0d:22:b6:3d:4b:41:db:26:6d:d1:
7c:cf:d1:b8:d5:ed:15:1c:a0:ac:e9:7e:63:92:14:
25:42:df:53:6f:59:fa:51:58:4b:a8:ef:bd:43:55:
84:f3:24:55:67:d5:f1:61:ba:37:70:a7:a7:b5:d1:
03:48:41:4a:f9:8b:1c:c5:b5:dd:8c:e4:96:bb:da:
f0:07:19:75:6a:fd:43:e6:bc:b9:8b:dc:d3:8b:bf:
03:2e:90:6d:48:81:a6:39:cc:fe:29:49:d5:46:98:
66:b8:1f:3b:4b:6d:9a:54:6f:f1:93:88:6e:bb:6b:
ca:3d:9d:7b:51:4b:59:6d:5a:8e:39:30:b2:66:a7:
fe:a4:27:76:fa:9b:3d:e3:a2:66:42:6a:63:0f:2c:
80:22:f6:41:00:ac:29:f0:28:c2:4d:8e:2c:d8:0e:
7a:08:77:10:e3:13:4f:e3:9d:79:cc:59:97:7c:28:
45:63:e0:32:24:2b:10:e2:12:3f:58:6c:02:1b:ed:
ad:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E2:73:64:3D:90:17:53:65:C0:16:2C:39:24:D3:38:D0:22:18:94
X509v3 Authority Key Identifier:
keyid:B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/C-JzZD2QF1NlwBYsOSTTONAiGJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.141.96.0/22
109.207.168.0/23
109.207.172.0/24
Signature Algorithm: sha256WithRSAEncryption
20:08:23:2d:cf:8f:a1:26:46:ab:f0:63:d7:c8:ef:59:b4:0f:
f2:95:e1:6b:2f:34:ad:dd:d8:98:c7:29:a6:31:d4:87:6e:5f:
13:dc:d1:37:68:3e:29:db:17:32:0f:eb:55:0e:55:5f:3a:32:
cb:78:81:22:e9:64:23:2e:b6:ab:92:b4:72:05:37:8f:e8:91:
dc:5e:50:60:58:f3:37:c4:8b:2b:2b:6f:91:aa:37:e7:23:77:
05:f9:f1:f5:b6:85:39:74:a3:c2:4f:7f:f7:e0:ba:8c:aa:83:
8d:3f:7a:0a:2a:17:2c:b1:2a:0a:e7:e0:38:b8:e5:e0:00:13:
9b:be:13:bf:23:1e:52:9e:fd:c7:b0:9f:d7:a2:d2:90:99:4f:
af:e4:3f:ab:36:a7:63:91:37:85:5b:e8:90:ac:e8:3d:ec:a3:
73:fa:4f:b6:8a:04:79:6a:3b:60:b4:b3:51:f9:0d:a1:2b:18:
49:e0:70:1c:58:28:49:16:24:3f:92:0e:4f:e0:8a:88:7c:06:
6f:f5:a3:3b:20:c0:c2:53:1a:39:cf:ef:6a:08:b0:e0:ca:95:
80:a9:c9:d7:7b:5c:be:b9:d0:04:b7:42:81:fd:21:c3:ca:77:
fb:a7:46:4d:75:ef:51:6a:56:87:a0:7e:dd:c4:43:68:4a:94:
55:a6:58:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:14 2024 by rpki-client on console-fra.rpki-client.org