Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/2Qa6ASL4lJ3kvFFi9mOClZX8jGI.roa
File: 2Qa6ASL4lJ3kvFFi9mOClZX8jGI.roa (raw, json)
Hash identifier: sCeG+59yo9eG0UU5xyLmIH4wKOAJ/+WQ+AMLG6IkyFo=
Subject key identifier: D9:06:BA:01:22:F8:94:9D:E4:BC:51:62:F6:63:82:95:95:FC:8C:62
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 018CC72745B0D18F84E44733966C467DD8C8
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/2Qa6ASL4lJ3kvFFi9mOClZX8jGI.roa
Signing time: Mon 01 Jan 2024 22:31:28 +0000
ROA not before: Mon 01 Jan 2024 22:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20850
IP address blocks: 193.189.96.0/23 maxlen: 24
95.69.248.0/22 maxlen: 23
95.69.250.0/23 maxlen: 24
188.230.118.0/23 maxlen: 24
188.230.120.0/22 maxlen: 23
188.230.124.0/24 maxlen: 24
188.230.125.0/24 maxlen: 24
188.230.126.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Mar 2024 09:44:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:45:b0:d1:8f:84:e4:47:33:96:6c:46:7d:d8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: Jan 1 22:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d906ba0122f8949de4bc5162f663829595fc8c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:02:d4:0b:34:0a:71:bf:d9:f8:6a:88:ea:bb:
71:24:f5:55:67:f4:50:9e:01:e6:8a:f1:fa:d9:b9:
a0:da:76:32:c5:36:b1:f7:41:e9:79:40:a6:1d:29:
34:95:85:73:70:d0:04:49:74:55:62:77:e8:58:f0:
67:bd:5c:e4:e8:63:1d:d4:39:e3:a4:4f:24:f2:70:
12:2b:73:b4:7b:de:79:d4:53:ff:d5:fc:06:80:2c:
28:94:a9:0a:b8:b7:71:92:d8:4d:f5:15:a2:79:64:
f8:0d:b8:52:bc:a6:f6:f9:9a:7a:65:22:46:01:6e:
e4:94:69:32:50:91:27:57:77:6e:30:c1:26:fc:05:
5e:2c:0d:5b:61:ac:86:14:54:ba:5e:b7:e7:98:0f:
de:12:1b:b0:0f:a2:8d:98:8e:f9:28:c7:bd:60:3e:
d7:b1:2d:2f:a1:62:3c:79:ef:e7:8f:47:59:18:72:
f2:b2:11:9e:b1:2d:12:bf:d0:f1:7a:7e:83:10:72:
65:15:29:ac:e0:d2:57:05:84:a3:56:63:e2:a1:ea:
be:07:53:38:8a:39:ca:9d:4b:b7:91:6e:cb:0d:08:
97:fd:2a:23:ec:34:02:fb:dc:80:26:3e:b8:e8:b7:
0e:e1:08:1b:45:8b:35:7b:05:6a:b1:40:52:25:e6:
70:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:06:BA:01:22:F8:94:9D:E4:BC:51:62:F6:63:82:95:95:FC:8C:62
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/2Qa6ASL4lJ3kvFFi9mOClZX8jGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.69.248.0/22
188.230.118.0-188.230.127.255
193.189.96.0/23
Signature Algorithm: sha256WithRSAEncryption
76:2a:18:40:07:1f:2a:0e:ca:9e:05:df:f1:d6:56:80:3a:ec:
f1:4c:de:12:b7:7d:03:7c:ed:4c:00:de:3a:54:cf:12:6e:62:
d9:8f:47:b0:91:bf:7b:4e:26:4c:9e:c0:73:5e:d8:c2:62:d0:
03:e6:47:56:e2:f8:7e:4b:fc:12:78:5f:22:aa:19:c9:fc:4a:
df:e6:79:10:f3:ee:73:62:a5:74:ca:c5:75:db:12:92:f7:32:
09:e7:a3:5f:19:d6:7c:06:77:ef:4f:2c:e3:dc:a5:e9:3e:4b:
b8:f2:d4:19:d7:96:f4:2c:83:ff:8a:e3:a1:dc:58:70:30:cf:
5c:37:da:52:05:22:d9:2a:14:f2:7e:5c:9d:5e:0d:df:16:ff:
35:b4:27:27:8d:c6:9e:ed:46:2c:17:4a:33:65:54:6e:27:fe:
13:11:3e:8a:db:4a:eb:b7:d5:19:16:d1:cb:19:41:74:cf:e6:
16:fc:01:4c:57:86:6d:fc:c0:96:25:07:ed:12:c5:57:ce:5a:
47:46:38:62:f2:6d:56:23:84:84:f5:c1:fd:82:cd:25:70:1b:
2e:33:cb:75:0c:50:10:83:8a:3e:89:73:df:82:f6:64:c8:7a:
e2:c7:2e:5c:8e:41:c0:82:fb:80:94:99:3b:64:81:f0:c2:16:
59:f9:d7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:35 2024 by rpki-client on console-fra.rpki-client.org