Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IFSFLlpmWxs-cQSIrY1B0D7YB28.roa
File: IFSFLlpmWxs-cQSIrY1B0D7YB28.roa (raw, json)
Hash identifier: nVr0Iol/ALz0g+UE9h0uuMa72cA7z7IIfT1Lz80cq1U=
Subject key identifier: 20:54:85:2E:5A:66:5B:1B:3E:71:04:88:AD:8D:41:D0:3E:D8:07:6F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A734CE759DE2D52C1E3DEB69B1E457034
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IFSFLlpmWxs-cQSIrY1B0D7YB28.roa
Signing time: Fri 08 Sep 2023 05:38:54 +0000
ROA not before: Fri 08 Sep 2023 05:38:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211256
IP address blocks: 195.58.38.0/24 maxlen: 24
194.87.51.0/24 maxlen: 24
194.87.54.0/24 maxlen: 24
194.58.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Sep 2023 08:41:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:73:4c:e7:59:de:2d:52:c1:e3:de:b6:9b:1e:45:70:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 8 05:38:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2054852e5a665b1b3e710488ad8d41d03ed8076f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:25:19:fe:fc:d9:72:67:90:f4:bd:80:b4:5b:
f6:77:8e:3b:52:61:16:6a:99:4b:e5:5e:ac:98:af:
71:30:c8:a6:b7:11:cb:3b:3c:fd:48:98:b8:53:29:
c3:99:95:25:ed:3e:3d:bb:c6:65:d4:df:a0:03:a1:
6e:11:9f:a7:77:c0:bb:85:0b:9f:f0:42:ff:25:e8:
57:c8:cf:f0:3f:c3:09:c0:66:06:d2:01:79:5e:bf:
7b:da:42:f4:2b:1b:9e:83:a0:ba:f9:d4:e0:44:b2:
4d:25:d5:aa:ae:cc:50:89:ac:a0:02:2c:90:88:e3:
0b:a3:52:69:4c:6c:64:de:69:73:23:97:63:e5:e4:
8c:b6:d4:ff:23:a1:da:b9:ea:f9:65:24:c7:95:e9:
4b:56:ba:7b:0d:e2:43:e9:ee:60:86:69:e5:79:d8:
2d:d0:c9:ec:27:07:2b:1c:39:44:9b:76:55:d7:a3:
48:4d:5e:da:c5:9f:40:3f:9d:2c:e6:7e:4b:95:02:
2c:f7:32:83:30:bb:89:08:0f:34:94:e8:92:aa:28:
6d:3f:c0:4c:5f:16:20:46:ea:01:70:1b:1d:44:32:
a3:94:c6:2d:c0:8f:09:2f:28:89:5a:14:11:db:1b:
f2:e1:91:a9:2c:85:72:01:04:8b:58:7a:1c:b3:10:
8c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:54:85:2E:5A:66:5B:1B:3E:71:04:88:AD:8D:41:D0:3E:D8:07:6F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IFSFLlpmWxs-cQSIrY1B0D7YB28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.44.0/24
194.87.51.0/24
194.87.54.0/24
195.58.38.0/24
Signature Algorithm: sha256WithRSAEncryption
19:33:9f:e5:19:0e:c7:9f:70:6a:de:88:50:1b:da:ea:b9:7f:
23:91:f2:71:0d:da:1f:e8:62:f9:f0:9d:fe:2a:e3:42:f4:85:
70:1b:ff:fa:5c:75:97:a7:7d:9c:82:ac:f7:a5:64:94:9e:6f:
62:c3:d8:7b:bc:94:ef:93:3c:96:dc:ea:be:c0:fd:58:73:85:
20:c1:0e:5e:48:c4:a5:c5:6c:ff:b2:9a:53:e3:69:60:cf:b7:
11:f8:85:f7:3f:e9:57:f3:20:3c:55:b5:fe:cb:19:20:33:f8:
89:68:7a:35:be:e1:46:25:ee:70:02:f4:b6:ed:85:96:d0:d9:
55:b5:90:fc:ff:72:71:48:5e:ae:68:ea:0e:8f:39:33:17:18:
44:c0:cc:88:d2:10:2e:66:59:58:e8:ed:a1:32:5a:58:1e:b1:
de:7a:1a:c7:6a:2b:35:ab:f8:fe:6a:d7:9b:3a:73:ec:7b:4e:
6d:f9:76:29:e0:c2:85:d2:72:de:f0:a9:8e:04:26:0c:dd:57:
5f:57:e5:a6:f4:a9:d4:45:a4:a8:d0:6f:e8:6d:14:e8:a4:b3:
5a:be:a2:7e:d9:9a:9f:ba:b2:08:4c:4c:09:ef:dc:06:aa:61:
5b:fb:c1:64:96:19:75:f8:58:8a:62:67:ac:8c:90:ce:d2:9b:
33:68:b6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:12 2024 by rpki-client on console-fra.rpki-client.org