Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/jB1r5Mjz-MEOfMU4yQJy63z1P7c.roa
File: jB1r5Mjz-MEOfMU4yQJy63z1P7c.roa (raw, json)
Hash identifier: eDpWajxyi7Rr9kJPYOlCCMQYbfHzRrNKzR9laokHIss=
Subject key identifier: 8C:1D:6B:E4:C8:F3:F8:C1:0E:7C:C5:38:C9:02:72:EB:7C:F5:3F:B7
Certificate issuer: /CN=d5dcde2125f04058ad4f478e178884142cf2dad0
Certificate serial: 018B84ADF9999E7EF1D49CE49B49A9FC4848
Authority key identifier: D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/jB1r5Mjz-MEOfMU4yQJy63z1P7c.roa
Signing time: Tue 31 Oct 2023 07:41:16 +0000
ROA not before: Tue 31 Oct 2023 07:41:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31543
IP address blocks: 94.198.136.0/21 maxlen: 24
176.121.56.0/22 maxlen: 24
176.104.224.0/20 maxlen: 24
83.218.160.0/19 maxlen: 24
185.199.80.0/22 maxlen: 24
2a00:15c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:84:ad:f9:99:9e:7e:f1:d4:9c:e4:9b:49:a9:fc:48:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5dcde2125f04058ad4f478e178884142cf2dad0
Validity
Not Before: Oct 31 07:41:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c1d6be4c8f3f8c10e7cc538c90272eb7cf53fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:91:0f:ec:30:9e:a2:0c:1b:25:d3:e9:cb:2a:
fb:7a:c6:6a:e7:7b:77:8a:58:48:1b:93:58:70:99:
47:f4:da:58:41:9b:28:ec:57:44:0d:24:81:e2:7a:
91:d2:70:c9:52:55:b7:75:79:5e:a1:c2:96:9f:97:
f0:0b:b1:58:8e:07:8d:8a:42:e6:6b:db:eb:f9:9e:
cf:b1:fe:42:a5:42:54:92:b5:a0:35:04:8c:17:f0:
60:61:a2:52:b3:e1:55:22:08:11:f9:4c:2b:58:4a:
72:49:61:8a:4e:40:4f:41:f4:b8:6c:35:a7:99:91:
ff:b8:ea:e6:de:34:7f:93:53:4c:b4:c0:ff:36:f1:
5c:54:38:c5:3b:f6:59:3e:eb:d0:d5:6c:71:b6:0d:
3b:3e:0f:6b:47:b4:ca:87:41:7d:c3:6b:46:d5:e0:
ea:cb:3e:59:0a:65:2c:32:57:1c:62:8a:9c:34:af:
a3:2d:cf:0f:d9:09:e4:c4:e9:b6:99:9e:59:6d:fa:
84:c6:45:e5:4c:0a:7b:e6:48:e8:e3:d0:4a:12:de:
98:2d:ea:a9:b9:a5:55:2f:d0:ec:ab:cd:59:c3:48:
52:7b:49:12:d5:9d:da:6f:5a:7e:9b:b2:7f:ff:89:
bc:ef:98:57:db:b0:4a:41:ed:d2:15:9e:cd:b9:85:
ae:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1D:6B:E4:C8:F3:F8:C1:0E:7C:C5:38:C9:02:72:EB:7C:F5:3F:B7
X509v3 Authority Key Identifier:
keyid:D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/jB1r5Mjz-MEOfMU4yQJy63z1P7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.218.160.0/19
94.198.136.0/21
176.104.224.0/20
176.121.56.0/22
185.199.80.0/22
IPv6:
2a00:15c0::/29
Signature Algorithm: sha256WithRSAEncryption
40:63:6f:cd:0f:b0:62:2c:8c:72:b6:be:a7:7a:b1:e9:7b:a9:
52:8b:31:6f:3c:e1:f9:ad:40:74:e7:6d:7e:0b:89:0a:41:f7:
69:79:58:b4:d1:89:2a:fb:f9:12:c7:b5:50:1c:2b:20:46:63:
d2:3d:88:cc:49:bf:26:f9:36:60:a9:82:b6:bf:f1:ea:96:00:
91:74:70:aa:4e:d8:a8:52:6d:a8:dd:a7:fc:7e:02:1f:7b:dd:
61:18:4d:22:7d:72:e4:bb:55:82:e6:48:ee:fe:6d:99:7e:95:
ee:f4:f7:43:03:d0:e7:04:81:80:5d:c1:22:f8:11:8a:fa:d2:
ca:ce:65:56:08:3f:23:52:5a:b9:47:d3:3f:6c:70:f5:72:29:
d2:3a:25:5e:41:db:62:c4:da:90:8f:12:92:dd:2b:e3:f2:d7:
87:41:d4:53:d2:2e:47:20:4e:d8:3b:66:22:aa:ea:6a:62:3c:
bc:68:89:65:36:60:10:e7:81:be:58:13:b5:51:98:96:f1:0c:
b0:61:27:6f:a1:dd:24:80:9f:e4:90:c8:4d:13:4a:4d:f1:2e:
b7:5f:b4:3a:58:1f:14:0f:76:cb:43:da:d7:30:1c:bc:b3:6e:
ee:f7:b8:06:52:37:6a:dc:ae:05:03:36:b1:24:cc:f9:26:d8:
af:e5:e4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:05 2024 by rpki-client on console-fra.rpki-client.org