Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/5KKD0i2XY9ktOdN96eDTTz-PCgI.roa
File: 5KKD0i2XY9ktOdN96eDTTz-PCgI.roa (raw, json)
Hash identifier: ar7l6hDMsWX45ki/npVEtFlqmYuPxAzz/jXeCJbMX/0=
Subject key identifier: E4:A2:83:D2:2D:97:63:D9:2D:39:D3:7D:E9:E0:D3:4F:3F:8F:0A:02
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018C7C2FA5BD87BD243885D7205791E4218C
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/5KKD0i2XY9ktOdN96eDTTz-PCgI.roa
Signing time: Mon 18 Dec 2023 09:09:06 +0000
ROA not before: Mon 18 Dec 2023 09:09:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8474
IP address blocks: 195.138.96.0/19 maxlen: 24
194.50.200.0/23 maxlen: 24
194.50.206.0/23 maxlen: 24
195.138.105.0/24 maxlen: 24
195.138.106.0/24 maxlen: 24
195.138.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7c:2f:a5:bd:87:bd:24:38:85:d7:20:57:91:e4:21:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Dec 18 09:09:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4a283d22d9763d92d39d37de9e0d34f3f8f0a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:eb:e7:da:77:a2:8c:ed:cf:7f:e5:64:24:e2:
39:4d:ed:58:1e:a5:7a:1e:a1:56:ce:17:58:e3:3c:
e3:a4:cd:54:1c:73:78:cd:9f:43:a7:7f:5f:bb:e6:
90:24:c0:f4:d8:43:31:ea:60:38:69:7c:4e:e6:b8:
7f:83:5f:39:33:9e:1f:1a:f2:cb:08:3b:6a:3d:b1:
fd:ad:96:47:8a:82:5e:eb:db:a7:56:17:35:e6:d4:
9a:86:e8:63:4b:91:6a:58:2d:d1:92:40:6f:7c:54:
da:4a:06:dc:85:a6:a0:f2:e1:cb:4d:13:88:71:3f:
96:69:31:fa:17:f4:b0:31:de:95:70:c7:b4:85:e5:
59:e2:91:2c:91:51:3f:46:b3:39:df:5e:2f:19:04:
1c:ca:0d:39:84:b3:05:ca:48:7e:8b:95:fc:10:8f:
3c:4b:73:1d:6f:c5:b3:8c:22:c5:af:42:b6:2e:cf:
fe:a3:87:4f:2a:0c:c3:b4:d4:f0:65:e9:2e:e3:8a:
ec:ec:c0:86:8c:40:91:3e:bc:a5:17:9a:91:18:29:
e9:7b:56:59:78:73:70:77:f2:32:38:f0:5a:59:c2:
5f:75:bf:ed:87:1b:7b:c5:1e:2e:ab:c1:00:b8:de:
ed:fb:7a:62:62:d6:ae:c1:8c:fb:99:c8:6e:0b:01:
77:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A2:83:D2:2D:97:63:D9:2D:39:D3:7D:E9:E0:D3:4F:3F:8F:0A:02
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/5KKD0i2XY9ktOdN96eDTTz-PCgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.200.0/23
194.50.206.0/23
195.138.96.0/19
Signature Algorithm: sha256WithRSAEncryption
93:ec:fa:ad:dd:7b:92:8d:00:1a:a8:b9:d9:33:0f:29:3f:d2:
53:18:ed:83:c4:30:39:a7:24:5e:e8:b0:e3:f7:28:82:2f:28:
04:0e:74:b2:2a:85:b9:f4:43:30:2d:2e:3a:47:2a:af:90:fa:
cf:47:91:14:00:4f:4c:66:79:86:c4:f7:5a:27:f0:51:14:60:
55:da:39:71:c1:f2:7b:92:c3:1d:ba:5f:f3:e9:47:f6:fc:5f:
af:61:72:06:05:d4:93:7f:1b:cc:ae:3a:a8:8b:e3:f9:6a:54:
be:e6:33:69:39:09:64:fd:68:1b:9a:ad:38:02:50:77:18:38:
0f:27:fc:ec:d8:df:f0:db:95:fd:4d:c6:95:70:c3:ff:b6:45:
cd:7c:90:ed:5d:19:d4:be:1b:aa:2d:7b:12:27:4e:ab:39:93:
be:c5:23:ce:e1:c2:44:5f:34:f4:fb:a2:c9:44:c5:49:eb:7c:
f2:5c:39:55:56:c1:48:40:97:f6:73:08:12:02:68:a1:07:fd:
ad:f1:c6:40:01:ec:12:8c:82:a9:5a:1a:54:7c:57:0e:bb:9b:
d3:94:d0:b7:b2:dc:89:66:a9:8d:64:4a:ec:b3:9f:1f:2a:81:
4d:3e:f3:1b:23:47:6b:4f:c1:66:bc:36:49:ce:77:91:72:b4:
46:3d:53:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:21 2024 by rpki-client on console-fra.rpki-client.org