Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/Ig5JgxFhBBi0Pxw6hek_82_Yx3w.roa
File: Ig5JgxFhBBi0Pxw6hek_82_Yx3w.roa (raw, json)
Hash identifier: BOhtupruUu/pEOcAndct2+b3BhYcyOmsbDOvrAuBwJw=
Subject key identifier: 22:0E:49:83:11:61:04:18:B4:3F:1C:3A:85:E9:3F:F3:6F:D8:C7:7C
Certificate issuer: /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Certificate serial: 018BAE855B789EB95CE783608A856A2C81E1
Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/Ig5JgxFhBBi0Pxw6hek_82_Yx3w.roa
Signing time: Wed 08 Nov 2023 10:40:57 +0000
ROA not before: Wed 08 Nov 2023 10:40:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42369
IP address blocks: 94.176.160.0/23 maxlen: 23
94.176.160.0/24 maxlen: 24
185.235.147.0/24 maxlen: 24
94.176.161.0/24 maxlen: 24
91.250.253.0/24 maxlen: 24
188.240.51.0/24 maxlen: 24
2a10:8b40::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 19 Nov 2023 23:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ae:85:5b:78:9e:b9:5c:e7:83:60:8a:85:6a:2c:81:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Validity
Not Before: Nov 8 10:40:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=220e498311610418b43f1c3a85e93ff36fd8c77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f2:ab:22:d2:82:75:73:bf:b6:ca:d4:f6:e9:
6f:52:6e:6e:11:1c:b7:c5:e3:c1:b2:8d:3e:73:08:
79:25:39:34:ff:b1:95:e4:d0:2e:ab:3d:b0:6b:b7:
4f:2b:0f:9a:19:92:fe:38:8c:06:5a:92:5c:bc:e7:
ab:60:ce:e0:fe:fc:64:19:6d:b1:7e:92:e3:ab:91:
ea:10:d1:b4:cc:99:60:1c:f9:46:41:91:9f:82:f4:
3b:ca:e9:2e:66:c7:68:b8:10:d3:3b:16:df:f1:ec:
9a:4b:fe:7f:d4:89:4f:94:4c:54:92:5a:92:51:da:
55:ef:79:08:41:b2:38:81:9f:ee:3e:08:56:9a:b9:
b8:d0:66:99:cd:74:d1:9c:e8:57:ba:0a:21:08:a7:
ba:c4:8c:a1:db:c4:e7:c8:49:5d:42:e6:61:fe:11:
dc:33:b8:07:d3:fe:9f:d6:07:a4:aa:ca:29:ba:58:
d4:6a:a9:e5:e6:2a:ad:ba:ff:20:cd:1f:b0:29:33:
31:73:c0:3a:f8:f4:00:ea:8e:59:15:46:a6:e5:56:
8c:8d:09:1e:44:3d:06:59:dc:8c:1a:52:dd:06:3e:
85:89:93:87:2b:0a:c2:38:55:78:1c:14:b8:fc:b4:
b4:d8:0d:46:4a:bf:97:94:05:d7:c1:31:3c:14:dd:
00:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0E:49:83:11:61:04:18:B4:3F:1C:3A:85:E9:3F:F3:6F:D8:C7:7C
X509v3 Authority Key Identifier:
keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/Ig5JgxFhBBi0Pxw6hek_82_Yx3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.250.253.0/24
94.176.160.0/23
185.235.147.0/24
188.240.51.0/24
IPv6:
2a10:8b40::/32
Signature Algorithm: sha256WithRSAEncryption
1b:af:fb:1c:36:2b:36:5f:6a:b5:9f:6a:3b:99:80:a9:78:f0:
15:b2:72:5f:e3:61:ac:bc:45:34:32:e0:7c:4a:d2:3b:97:d1:
54:9b:19:29:06:9a:07:c1:bf:c1:86:0e:15:2b:e4:87:1d:b9:
3f:7a:41:ca:4d:6d:54:10:ad:5e:a3:c7:b0:6b:fe:ba:b5:7a:
63:92:b5:7e:5d:61:be:6e:8b:9e:e2:ae:63:93:93:ff:f1:01:
97:7b:bc:2c:62:de:10:e0:27:36:15:c6:c5:e3:5a:8a:19:2a:
81:07:49:47:bc:eb:26:d8:a1:83:07:95:0e:cd:01:64:2d:13:
0c:99:c3:44:a8:bf:19:1e:d4:79:5d:a7:0f:8f:4f:0b:bc:c0:
2c:03:81:7b:1a:8b:85:60:7f:92:d1:e1:0d:b9:14:19:67:13:
42:c1:d8:b1:89:c0:6c:73:ca:62:e7:42:43:83:cb:32:a9:b1:
4e:ee:2d:f5:43:31:7f:1e:7c:ae:c5:26:9e:b7:42:f6:f2:8c:
2b:e3:55:87:ec:d8:05:8f:8c:0a:27:07:83:19:64:36:4a:02:
05:c1:9f:fa:69:a8:03:9b:d9:df:8c:e7:3a:4e:cf:72:8d:4f:
36:49:3e:27:81:cb:ea:59:3b:ce:de:ec:8b:7e:10:b2:e5:2a:
81:ad:79:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-fra.rpki-client.org