Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/1-PzBXKivTJFF-mZuhxLo6M98KM0.roa
File: 1-PzBXKivTJFF-mZuhxLo6M98KM0.roa (raw, json)
Hash identifier: c/3sb7mZsG0UAqndb29PC3vKonfexLfeRmqQSO0aEcw=
Subject key identifier: F8:FC:C1:5C:A8:AF:4C:91:45:FA:66:6E:87:12:E8:E8:CF:7C:28:CD
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01871086420C38D495C28C4BB66D46971680
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/1-PzBXKivTJFF-mZuhxLo6M98KM0.roa
Signing time: Thu 23 Mar 2023 22:10:46 +0000
ROA not before: Thu 23 Mar 2023 22:10:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14576
IP address blocks: 194.110.150.0/24 maxlen: 24
88.218.46.0/24 maxlen: 24
89.19.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Mar 2023 22:19:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:10:86:42:0c:38:d4:95:c2:8c:4b:b6:6d:46:97:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Mar 23 22:10:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8fcc15ca8af4c9145fa666e8712e8e8cf7c28cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:67:8a:ce:47:31:a8:3d:0f:ae:6b:35:de:5b:
4d:06:36:c2:fe:7e:c4:e8:85:42:16:5b:10:69:f2:
94:d0:b7:71:01:b5:23:9f:54:69:57:16:57:8a:94:
14:09:6e:92:59:db:61:0c:86:f6:6b:50:25:78:de:
d8:e0:ec:f9:e0:35:c6:9d:87:9c:b7:13:7e:6a:88:
9a:4c:02:20:30:db:2b:98:75:52:61:81:d6:e5:74:
52:96:d7:59:f9:5b:08:e3:3a:16:2d:34:87:58:50:
79:4b:05:0c:92:e7:c8:4c:f6:aa:cb:e9:3e:61:91:
c2:a5:f0:77:73:7b:94:fb:2a:9d:57:ae:be:ab:e6:
78:9b:b1:90:80:9a:ea:5f:92:88:fd:d9:98:4e:ee:
ea:64:e6:13:28:88:53:92:a1:59:1c:6b:f8:ce:c8:
1a:09:e9:c9:d9:d8:fa:28:c2:bf:71:e2:0d:56:f0:
bb:2e:d4:31:a6:61:00:b5:3c:9d:f4:94:a7:d4:95:
f0:d9:4d:4d:84:d9:b5:2f:19:ba:ec:af:2f:d8:1e:
e4:cb:54:71:ec:c0:47:ce:4f:19:f9:a5:da:33:5e:
2e:07:2b:db:c2:2f:20:4d:2e:71:63:89:37:95:78:
b6:fc:db:a3:63:1d:86:ad:09:94:6d:be:b1:90:f6:
58:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FC:C1:5C:A8:AF:4C:91:45:FA:66:6E:87:12:E8:E8:CF:7C:28:CD
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/1-PzBXKivTJFF-mZuhxLo6M98KM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.46.0/24
89.19.34.0/24
194.110.150.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:07:bb:bc:0b:ae:5f:ff:6b:31:38:88:72:f1:88:b7:bb:cc:
1c:6f:90:96:0f:b8:f3:71:50:80:47:67:a3:d9:87:45:c1:5e:
bd:3f:36:dc:ac:56:5d:b1:67:be:4d:05:92:98:71:31:f0:12:
86:3d:9f:c8:a8:8d:e5:23:1c:ff:32:32:cf:82:f2:a1:d6:11:
0b:b4:6d:9b:c3:ed:87:13:06:95:19:f2:8d:e9:d7:0d:1b:bf:
bb:37:24:91:9d:ed:80:18:02:de:2d:f0:9b:a4:23:a5:ec:55:
98:81:b1:bd:a6:44:08:c9:14:e8:c2:cc:c1:f5:cb:10:e9:4e:
88:83:10:61:d1:b9:23:47:c1:57:35:ad:9e:99:09:3f:60:52:
8f:de:b5:32:7b:05:2d:4a:62:b6:6f:5f:51:76:7c:d8:7c:2a:
8c:b0:93:62:a4:92:88:32:82:af:97:66:2d:0f:a6:0e:6e:76:
3e:e0:ab:a8:d1:33:11:00:61:13:74:a1:52:fe:84:71:87:e2:
40:8f:7e:36:bb:9e:ba:8b:11:b0:3f:90:aa:58:3c:82:19:e5:
af:96:c0:14:a3:70:e1:65:e1:de:12:aa:46:7f:1a:51:4a:0a:
3d:c7:9b:bf:de:28:78:3a:cc:f5:51:b2:d7:aa:1f:e6:ac:e8:
b9:31:e8:31
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:37 2024 by rpki-client on console-fra.rpki-client.org