Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/sQTBBNLD0Jkm5sc1B3xDeG1yY_o.roa
File: sQTBBNLD0Jkm5sc1B3xDeG1yY_o.roa (raw, json)
Hash identifier: FDCsWcy4r7Ue/w2U47EQaaLoUB1QgET4jQ36BR+nfHY=
Subject key identifier: B1:04:C1:04:D2:C3:D0:99:26:E6:C7:35:07:7C:43:78:6D:72:63:FA
Certificate issuer: /CN=1e234242957bb1be129681721f9c2cd08df07baa
Certificate serial: 0187D2D2C65B620016CDCAE373F87E85095E
Authority key identifier: 1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/sQTBBNLD0Jkm5sc1B3xDeG1yY_o.roa
Signing time: Sun 30 Apr 2023 15:40:41 +0000
ROA not before: Sun 30 Apr 2023 15:40:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199484
IP address blocks: 195.142.152.0/22 maxlen: 24
195.142.154.0/24 maxlen: 24
195.142.185.0/24 maxlen: 24
195.142.186.0/24 maxlen: 24
195.142.184.0/24 maxlen: 24
195.142.184.0/22 maxlen: 22
185.40.72.0/22 maxlen: 24
195.142.187.0/24 maxlen: 24
195.155.98.0/24 maxlen: 24
195.142.192.0/22 maxlen: 24
195.155.96.0/24 maxlen: 24
195.155.97.0/24 maxlen: 24
195.142.194.0/24 maxlen: 24
195.155.99.0/24 maxlen: 24
2a01:4c20::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d2:d2:c6:5b:62:00:16:cd:ca:e3:73:f8:7e:85:09:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e234242957bb1be129681721f9c2cd08df07baa
Validity
Not Before: Apr 30 15:40:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b104c104d2c3d09926e6c735077c43786d7263fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d3:fe:c4:62:bf:9c:39:11:ab:6e:1f:fe:e1:
c2:21:d1:61:66:25:4c:86:da:3f:fd:6e:5b:45:d3:
53:2d:b8:76:9c:20:f4:8d:2f:c5:d1:a2:ef:3e:5b:
94:80:4c:f4:f2:3b:b7:f8:e2:10:6f:07:88:a9:27:
9d:3c:be:96:c3:e3:ed:e4:16:b3:69:5e:7b:c0:8b:
bc:54:e8:7f:a0:3a:a4:be:17:e7:2d:40:6a:5d:a8:
ee:99:b5:68:45:48:d8:de:09:3e:12:21:2c:3a:cf:
e1:ba:96:48:0e:b4:4e:da:74:93:e1:5e:2e:62:a2:
f2:c7:c1:a5:19:dc:34:79:3f:6e:08:38:b1:fe:16:
cf:ee:d9:90:ca:6d:9a:9f:4c:4a:2a:c0:cf:25:2e:
4a:f7:67:b6:c4:3d:5b:04:60:9e:f0:e8:52:3b:1d:
2b:9a:01:06:84:b1:3a:c9:d7:b0:05:65:62:5c:78:
8a:b8:4a:c7:51:08:4a:67:4f:51:19:54:6d:59:09:
e9:6c:c2:34:53:88:b9:fa:c1:52:43:c4:45:e7:35:
19:db:7a:56:fa:62:de:45:86:2e:2d:b0:78:41:1a:
ac:68:a4:c6:c8:ce:96:5c:aa:18:d0:af:c7:4b:cd:
b6:4a:9e:a4:80:e2:96:c7:35:db:0b:dd:ae:6e:6d:
0d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:04:C1:04:D2:C3:D0:99:26:E6:C7:35:07:7C:43:78:6D:72:63:FA
X509v3 Authority Key Identifier:
keyid:1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/sQTBBNLD0Jkm5sc1B3xDeG1yY_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.72.0/22
195.142.152.0/22
195.142.184.0/22
195.142.192.0/22
195.155.96.0/22
IPv6:
2a01:4c20::/29
Signature Algorithm: sha256WithRSAEncryption
6e:67:61:f4:7d:60:26:33:66:3b:28:f7:12:77:85:bf:d3:25:
87:f0:0a:81:4c:db:b0:99:74:9d:1e:7c:18:1e:12:26:7a:9c:
c8:cf:e5:81:e3:5c:ee:26:c7:6f:f8:66:10:5d:d8:d7:30:bd:
f5:02:b9:0a:a3:77:6a:3e:b1:e6:3a:cc:b1:ec:ef:49:38:fe:
1f:31:c4:2d:08:73:f7:2b:56:28:83:27:af:ed:8f:08:66:1e:
24:8c:2a:14:b6:a8:57:ee:a2:3c:5a:a4:72:73:2c:8f:b1:a4:
85:f5:23:97:34:db:c8:f3:41:9c:97:41:68:3c:a8:6f:db:b6:
4a:44:f5:f1:0e:c5:78:3e:5a:59:9e:19:3b:f5:ba:0e:e0:49:
1d:3d:59:17:c0:33:37:9e:14:d4:e9:f6:ba:a4:43:ef:b2:a5:
59:06:36:d7:76:be:1b:a0:fd:4f:b2:bf:95:ce:4d:38:a3:88:
03:f8:07:4f:e5:a1:e5:42:78:22:f6:fa:af:5a:75:33:56:07:
d3:36:84:49:59:3f:d0:0d:a1:ef:40:ec:a4:3f:9f:a0:7b:7d:
5f:39:c1:8b:e1:63:57:84:cd:c3:91:69:31:33:0a:8f:4c:9f:
18:66:f3:6f:56:87:19:4e:fd:1c:88:23:8c:81:89:3c:c8:59:
59:ec:05:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:03 2024 by rpki-client on console-fra.rpki-client.org