Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/dAd9gXRYSXnEncRFuPHfV0Yx-6g.roa
File: dAd9gXRYSXnEncRFuPHfV0Yx-6g.roa (raw, json)
Hash identifier: LmWoTETcBoElquve2sGUEd8JwhlmuD7+pjUk9q6FBXI=
Subject key identifier: 74:07:7D:81:74:58:49:79:C4:9D:C4:45:B8:F1:DF:57:46:31:FB:A8
Certificate issuer: /CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Certificate serial: 01856F9DC931A7C643075D9CB6301D7EB622
Authority key identifier: 23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/dAd9gXRYSXnEncRFuPHfV0Yx-6g.roa
Signing time: Sun 01 Jan 2023 23:14:49 +0000
ROA not before: Sun 01 Jan 2023 23:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6846
IP address blocks: 212.1.122.0/23 maxlen: 23
212.1.64.0/18 maxlen: 24
212.1.96.0/22 maxlen: 22
195.230.128.0/19 maxlen: 24
2a02:f1c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 26 Apr 2023 11:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:c9:31:a7:c6:43:07:5d:9c:b6:30:1d:7e:b6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Validity
Not Before: Jan 1 23:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74077d8174584979c49dc445b8f1df574631fba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7d:cf:54:35:c8:d8:aa:c0:13:df:01:d5:1f:
77:d8:64:01:a1:ec:88:c4:51:f2:ce:c1:34:8c:15:
65:a5:f0:70:ae:95:d3:27:9b:5b:df:d8:5e:6c:ce:
80:0d:96:1b:ce:35:b8:88:29:39:e1:4a:6d:eb:2b:
68:a8:11:4c:2c:b6:b7:8c:42:2d:ce:fb:b9:e9:38:
df:1d:33:7b:72:a6:4c:6e:1c:9b:02:47:93:fd:83:
32:87:06:a9:d8:bf:c1:8c:e0:80:66:37:a0:b5:75:
fb:4d:6a:1e:33:39:b8:fe:aa:6d:82:5c:c9:d3:29:
e1:31:c4:71:9d:94:80:d5:8c:df:c0:c2:a8:66:7f:
df:af:9a:4d:53:e6:d3:98:80:92:11:c2:a4:36:83:
5b:fe:a9:16:cc:35:57:7d:c0:bf:27:58:d3:b2:e0:
70:07:1c:ba:07:5c:d0:49:a5:70:44:2c:66:4c:e6:
ac:9e:4f:d0:b6:56:25:75:70:cb:8e:65:fe:71:e6:
77:f0:76:30:65:76:51:2d:a1:62:10:8c:4c:6e:2f:
00:47:48:5f:bd:05:7f:96:d3:11:4f:83:ad:a8:1f:
d6:8e:44:62:a6:8e:df:6e:db:55:bd:bb:09:ed:87:
33:26:91:14:6f:cc:a1:53:61:e3:72:d5:16:70:81:
a1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:07:7D:81:74:58:49:79:C4:9D:C4:45:B8:F1:DF:57:46:31:FB:A8
X509v3 Authority Key Identifier:
keyid:23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/dAd9gXRYSXnEncRFuPHfV0Yx-6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.230.128.0/19
212.1.64.0/18
IPv6:
2a02:f1c0::/29
Signature Algorithm: sha256WithRSAEncryption
96:25:e6:f0:37:7f:76:c7:b7:a6:fb:4a:cb:7f:ac:20:96:77:
b9:57:8c:14:65:fd:b8:a7:c7:88:a6:9e:50:77:e7:bc:5e:2f:
91:d2:0d:a5:12:bd:11:65:89:39:76:bd:cd:e8:6e:26:94:66:
26:17:91:55:b8:ea:c3:b1:5d:ac:83:37:40:fd:aa:90:6e:16:
ed:4e:7a:43:ed:05:a3:1f:c8:f6:c3:43:b4:66:a7:38:d7:fc:
02:1b:31:f9:0b:b0:a8:c8:73:f0:76:25:03:5e:6b:62:d2:98:
c5:49:3f:9a:b8:ac:3e:3d:f4:9a:f6:cb:c8:5b:86:d5:97:b6:
35:92:db:0e:a9:21:74:74:c0:1b:76:4c:d2:4c:3d:57:84:07:
92:95:44:51:4c:c7:62:3a:a8:4d:91:b6:3e:63:00:f1:f9:6e:
9a:ba:ce:ed:9c:13:09:31:48:f2:61:74:1b:4b:4c:52:fe:ca:
b0:a8:0d:95:ec:55:34:c9:b0:45:3b:58:61:52:ee:c0:3a:d0:
1f:e6:e7:35:2d:46:31:a4:b7:a6:85:20:80:8a:3d:04:1b:97:
9a:5c:5b:a6:f4:75:91:44:a4:d1:d3:09:38:7c:5b:32:c4:10:
1f:c2:c5:c7:51:66:d4:b9:69:fe:03:b4:4c:37:4d:73:ee:f0:
46:11:44:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:12 2024 by rpki-client on console-ams.rpki-client.org