Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/t2iF16tgUyKdypVbAF78I3MMwng.roa
File: t2iF16tgUyKdypVbAF78I3MMwng.roa (raw, json)
Hash identifier: JcqDfHOPOvsQVLE7G2JAINDsTMZr4alpNQp3vos5X90=
Subject key identifier: B7:68:85:D7:AB:60:53:22:9D:CA:95:5B:00:5E:FC:23:73:0C:C2:78
Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial: 0185EFC0304DE0F28C5DEBF48A866248D9FD
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/t2iF16tgUyKdypVbAF78I3MMwng.roa
Signing time: Thu 26 Jan 2023 20:23:47 +0000
ROA not before: Thu 26 Jan 2023 20:23:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206352
IP address blocks: 195.210.98.0/24 maxlen: 24
195.210.110.0/23 maxlen: 23
195.210.124.0/23 maxlen: 23
195.210.122.0/24 maxlen: 24
195.210.126.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 12 Apr 2023 08:35:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ef:c0:30:4d:e0:f2:8c:5d:eb:f4:8a:86:62:48:d9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Validity
Not Before: Jan 26 20:23:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b76885d7ab6053229dca955b005efc23730cc278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1b:a3:30:aa:b2:b4:93:88:1d:34:c1:06:dc:
cb:7f:2e:f3:98:50:03:74:77:2e:d5:b8:8e:52:17:
67:2a:b8:01:ca:59:28:4e:96:d5:a7:cb:43:71:a1:
d6:96:99:d7:5d:f8:80:7a:e4:fc:42:94:02:38:de:
a8:a1:14:5d:e1:0e:2e:26:e2:9c:9f:49:37:66:35:
8e:78:4d:a1:f8:db:10:ce:9b:de:f8:62:c5:a9:83:
67:86:e3:d9:16:6e:2a:6c:c4:c5:e9:e8:1c:9e:f4:
f9:e3:fe:b5:fc:f2:0d:51:dd:37:a1:30:99:47:05:
ef:06:c6:6e:fa:df:c2:a2:16:b1:6c:7c:17:80:0d:
9e:5c:0c:14:f2:d0:8a:8b:6c:dc:fd:f7:a7:e8:4d:
44:8f:30:f2:1c:c0:fe:b3:3e:76:a8:17:b8:be:97:
22:ae:66:f9:ec:b9:99:6a:5e:e4:b0:16:05:0c:f6:
d0:bb:4b:ac:d3:a2:c5:70:cd:8c:06:f5:15:3b:d7:
47:65:bc:67:75:d9:88:fe:e1:57:fe:e9:aa:50:19:
d9:71:a0:48:ed:c9:45:40:a2:2e:26:19:11:a6:ee:
c5:7a:78:99:7f:a0:4d:c0:1e:0d:23:d3:d6:8d:d1:
d4:c7:23:a9:3e:0b:63:0e:20:80:67:c3:c8:e3:c9:
e8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:68:85:D7:AB:60:53:22:9D:CA:95:5B:00:5E:FC:23:73:0C:C2:78
X509v3 Authority Key Identifier:
keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/t2iF16tgUyKdypVbAF78I3MMwng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.98.0/24
195.210.110.0/23
195.210.122.0/24
195.210.124.0/22
Signature Algorithm: sha256WithRSAEncryption
43:64:5a:76:cb:b4:b1:c8:d0:19:95:67:fb:02:64:ab:33:09:
42:91:20:58:6a:8c:1c:33:0c:e6:cc:91:78:dd:60:29:6f:17:
1a:88:eb:ae:b2:6f:73:84:a3:ef:a0:f1:cb:78:2a:93:1a:78:
2e:16:f4:7c:3a:1a:1f:18:d4:e9:7d:ed:00:7f:ae:ec:15:b4:
91:75:32:da:a6:71:a8:cb:01:1a:61:50:7e:ef:49:e9:7e:f3:
92:b5:6e:f0:37:b5:ce:c0:30:1c:8d:5f:75:a3:49:0b:a6:bb:
a7:10:76:e7:8e:68:2b:98:e3:80:e6:ae:49:6b:72:6c:c4:7c:
00:09:6b:af:f5:25:81:c9:e7:67:11:db:06:bc:87:d5:19:99:
7e:6d:bc:ee:1b:a2:72:c2:e6:87:a6:95:01:4f:b6:4d:a5:8b:
7d:86:89:02:67:85:82:fa:84:43:e5:9e:0b:ac:0b:ea:31:57:
cd:28:58:70:9e:0d:af:c9:13:a1:50:9f:42:2b:3e:34:09:1a:
b1:17:d6:14:f5:e8:b3:11:eb:63:cb:af:66:36:20:52:6b:b8:
61:51:18:08:67:dd:26:8a:ae:81:76:7e:18:ae:2e:d2:4d:58:
d8:9e:9d:e6:79:41:76:97:10:b3:f9:dd:f2:f5:7a:d0:c8:d1:
e1:87:75:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:49 2024 by rpki-client on console-fra.rpki-client.org