Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-8bkLjs-SndfrCDAJ_eY5NDlphQ.roa
File: 1-8bkLjs-SndfrCDAJ_eY5NDlphQ.roa (raw, json)
Hash identifier: fyomELev6WHhTxfUriS9Gj7nejjV/1fc9AoEsCeLMtY=
Subject key identifier: FB:C6:E4:2E:3B:3E:4A:77:5F:AC:20:C0:27:F7:98:E4:D0:E5:A6:14
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01879F2655321168E4C9EF8B8A153DE737B5
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-8bkLjs-SndfrCDAJ_eY5NDlphQ.roa
Signing time: Thu 20 Apr 2023 14:51:42 +0000
ROA not before: Thu 20 Apr 2023 14:51:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25038
IP address blocks: 194.121.123.0/24 maxlen: 24
62.132.115.0/24 maxlen: 24
194.45.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9f:26:55:32:11:68:e4:c9:ef:8b:8a:15:3d:e7:37:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Apr 20 14:51:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbc6e42e3b3e4a775fac20c027f798e4d0e5a614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:97:a7:54:ba:67:47:ab:3a:8d:b0:b0:7c:7c:
6f:13:c8:70:dd:3c:f0:23:30:0b:92:b0:7c:cb:97:
93:9f:46:74:a5:e3:ff:4e:a1:53:9b:6d:40:44:a3:
d7:94:3d:aa:96:7d:88:36:59:b1:72:62:bc:bc:79:
ab:ed:12:06:b3:54:82:68:83:90:5d:2f:78:08:c3:
3d:84:a1:a8:5e:59:0e:b9:d6:9d:d6:25:49:74:d9:
64:b7:84:17:b3:c0:53:e0:38:99:73:62:08:d8:8a:
36:50:e0:fc:dc:f9:c4:4a:be:e5:11:b9:86:c6:05:
ef:13:c1:44:e9:68:a8:5c:05:dc:06:e2:9d:4a:fa:
d8:26:43:fc:cc:7f:20:de:28:08:c6:c3:12:7e:b1:
66:7d:21:53:eb:59:c2:61:e6:a2:e6:36:bc:e6:c3:
0e:ac:3b:d4:a9:bc:f6:44:1c:1e:a2:71:3b:23:18:
4f:e2:36:1d:b2:49:69:d4:a0:71:5a:a9:f9:e2:69:
19:2d:1a:bf:39:df:f4:c1:78:f4:55:17:37:81:d1:
e0:fb:56:90:63:4f:e5:f3:8f:de:14:ce:80:70:e5:
dd:1c:8d:3a:47:5f:22:d7:08:8f:85:59:a2:98:bc:
7e:a0:fd:da:6a:be:27:96:76:59:9b:af:f8:ef:c4:
9f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C6:E4:2E:3B:3E:4A:77:5F:AC:20:C0:27:F7:98:E4:D0:E5:A6:14
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-8bkLjs-SndfrCDAJ_eY5NDlphQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.132.115.0/24
194.45.13.0/24
194.121.123.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:2f:81:ee:c8:6d:67:11:0c:96:4b:a8:d1:6a:01:11:27:43:
c3:81:84:38:ff:cf:97:dd:7e:ce:c6:03:41:87:ed:45:01:84:
4a:a9:95:bc:0a:71:0c:a0:b5:89:62:aa:a1:90:fe:1e:ff:a8:
6c:fe:d7:91:07:7b:ee:79:25:44:fc:c1:13:cb:4c:7a:9e:e3:
8f:6b:42:70:ac:09:d5:a0:f3:db:b7:01:a2:78:cc:4c:15:d8:
77:be:d1:77:a7:1a:7a:de:ef:45:4e:aa:8b:fa:29:4f:c4:47:
59:e4:61:85:1d:9b:77:4f:6e:22:94:fe:01:9a:40:d0:5b:3d:
f8:6c:53:94:6b:7b:7f:e8:a5:86:0a:ab:56:4b:c9:2c:29:de:
d2:50:4b:5f:6e:a0:0a:18:af:c8:1e:9e:fe:73:ce:c9:a8:c6:
e5:dc:0a:82:17:5a:2f:ec:74:b5:2b:d9:74:77:4f:3f:ec:c8:
39:32:97:99:e4:19:58:8f:3b:7c:e8:ab:b8:20:61:44:96:c0:
8a:ef:f4:23:89:f3:d7:86:b4:29:bb:65:ce:b5:8a:b0:5a:a2:
52:d5:fe:d5:f2:0b:4a:dd:e5:e0:60:ba:67:39:87:f3:5d:be:
3f:3e:d8:2c:74:ff:52:a1:46:68:5c:a8:0e:e0:cd:42:0d:7f:
78:73:b5:0e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:12 2024 by rpki-client on console-fra.rpki-client.org