Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/3JE8jqvv48xokLFzDHF49C-CszI.roa
File: 3JE8jqvv48xokLFzDHF49C-CszI.roa (raw, json)
Hash identifier: vdhBd0e8DwEhNGXaiPRFuQ5RJIF/9Mz9mkro25QCEN8=
Subject key identifier: DC:91:3C:8E:AB:EF:E3:CC:68:90:B1:73:0C:71:78:F4:2F:82:B3:32
Certificate issuer: /CN=b14aba8b60749393478e83c360e6cbd75d156f89
Certificate serial: 01876FD3E4535B2B1A7DDF670613A99A986F
Authority key identifier: B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/3JE8jqvv48xokLFzDHF49C-CszI.roa
Signing time: Tue 11 Apr 2023 10:19:30 +0000
ROA not before: Tue 11 Apr 2023 10:19:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44565
IP address blocks: 188.124.4.0/24 maxlen: 24
188.124.1.0/24 maxlen: 24
188.124.0.0/24 maxlen: 24
188.124.3.0/24 maxlen: 24
188.124.2.0/24 maxlen: 24
188.124.11.0/24 maxlen: 24
188.124.6.0/24 maxlen: 24
188.124.8.0/24 maxlen: 24
188.124.7.0/24 maxlen: 24
188.124.10.0/24 maxlen: 24
188.124.9.0/24 maxlen: 24
188.124.13.0/24 maxlen: 24
188.124.12.0/24 maxlen: 24
188.124.15.0/24 maxlen: 24
188.124.14.0/24 maxlen: 24
188.124.16.0/24 maxlen: 24
188.124.18.0/24 maxlen: 24
188.124.20.0/24 maxlen: 24
188.124.19.0/24 maxlen: 24
188.124.22.0/24 maxlen: 24
188.124.21.0/24 maxlen: 24
188.124.24.0/24 maxlen: 24
188.124.23.0/24 maxlen: 24
188.124.25.0/24 maxlen: 24
188.124.27.0/24 maxlen: 24
188.124.26.0/24 maxlen: 24
188.124.29.0/24 maxlen: 24
188.124.28.0/24 maxlen: 24
188.124.31.0/24 maxlen: 24
188.124.30.0/24 maxlen: 24
79.171.17.0/24 maxlen: 24
79.171.16.0/24 maxlen: 24
79.171.19.0/24 maxlen: 24
79.171.18.0/24 maxlen: 24
79.171.21.0/24 maxlen: 24
79.171.20.0/24 maxlen: 24
93.186.112.0/24 maxlen: 24
93.186.113.0/24 maxlen: 24
93.186.115.0/24 maxlen: 24
93.186.114.0/24 maxlen: 24
93.186.117.0/24 maxlen: 24
93.186.116.0/24 maxlen: 24
93.186.118.0/24 maxlen: 24
93.186.120.0/24 maxlen: 24
93.186.119.0/24 maxlen: 24
93.186.122.0/24 maxlen: 24
93.186.121.0/24 maxlen: 24
93.186.124.0/24 maxlen: 24
93.186.123.0/24 maxlen: 24
93.186.127.0/24 maxlen: 24
93.186.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6f:d3:e4:53:5b:2b:1a:7d:df:67:06:13:a9:9a:98:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aba8b60749393478e83c360e6cbd75d156f89
Validity
Not Before: Apr 11 10:19:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc913c8eabefe3cc6890b1730c7178f42f82b332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:37:80:96:9f:38:b1:bc:8b:7f:8e:b1:80:b1:
6f:71:0c:f0:e4:12:76:e8:0e:5e:22:c6:bd:fa:bd:
fa:79:3f:59:87:5b:af:ae:b2:db:d7:01:dd:5a:78:
17:d0:f6:44:b0:e2:57:ba:0f:ca:af:e5:5d:37:32:
a2:c8:1d:01:66:ca:0d:88:b6:c3:14:7d:8e:bb:09:
25:ff:9e:a5:3d:5f:a3:98:c2:0b:59:67:22:06:c4:
11:e2:1f:0c:d9:88:ba:e8:39:0f:2b:e3:0c:a2:b9:
95:a3:fa:8d:73:84:6d:d5:a0:f2:63:ad:57:c6:18:
c6:65:0a:27:b2:2f:9a:32:3c:63:d0:c2:b8:13:a7:
13:e5:aa:93:e3:38:9b:26:05:db:90:f4:92:84:7a:
ac:00:70:be:5c:c0:ac:3f:c5:77:c6:8b:e9:48:40:
57:cf:60:0d:bd:12:f4:22:c8:cc:c8:e0:ca:b8:2f:
91:27:5f:5e:76:83:d3:44:5a:0d:39:a7:89:45:fa:
ba:6d:2d:f1:9d:05:8e:6e:99:06:c0:e6:3b:fb:6f:
1b:38:5c:95:75:ad:4d:c9:f8:95:f3:05:f5:d2:df:
bc:75:19:45:ae:c0:a7:9f:fc:e6:0e:3c:9f:69:e8:
76:cf:cb:ed:00:bf:b1:59:70:9e:f9:4a:86:50:a8:
c3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:91:3C:8E:AB:EF:E3:CC:68:90:B1:73:0C:71:78:F4:2F:82:B3:32
X509v3 Authority Key Identifier:
keyid:B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/3JE8jqvv48xokLFzDHF49C-CszI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.171.16.0-79.171.21.255
93.186.112.0-93.186.124.255
93.186.126.0/23
188.124.0.0-188.124.4.255
188.124.6.0-188.124.16.255
188.124.18.0-188.124.31.255
Signature Algorithm: sha256WithRSAEncryption
8a:af:1b:b2:cc:e2:b6:db:91:44:de:93:2b:92:3d:8b:ea:e5:
dc:2b:97:bb:cb:6f:7e:53:3e:2b:ad:da:55:2d:d8:40:e5:90:
7d:13:fd:87:4f:0f:ff:bf:bb:2d:48:6a:72:29:de:a6:be:e1:
86:3c:83:8c:fe:46:d8:73:04:ce:59:f1:fd:9d:67:31:fb:cc:
a6:61:be:bb:95:e6:23:d5:bb:d1:2f:a2:20:82:9b:16:0e:e8:
7a:f4:4d:da:4f:fe:c2:c4:3e:4a:e7:5c:4d:d0:75:9a:63:fa:
e5:2b:7e:a7:89:d3:f2:57:13:eb:ed:f5:23:b3:76:d0:30:17:
66:61:52:24:f9:6c:47:46:e8:99:12:fe:dc:f7:60:63:55:d1:
4f:e6:70:77:dd:67:5a:75:75:9d:2e:a1:e3:ad:fa:a7:1e:45:
dd:07:f1:99:21:19:4c:44:51:fc:1a:55:f5:6b:c2:ef:22:bd:
07:4e:d5:35:5d:1f:c2:e1:53:af:47:52:5d:4d:5d:2a:ec:b9:
cd:19:80:67:9f:a5:f3:b5:a3:56:df:fd:8a:d1:b6:ec:5a:74:
0b:0f:13:9a:2e:95:f8:6c:30:b8:f4:5c:4f:b1:47:ae:4f:58:
20:0d:87:58:00:b7:fd:21:44:c6:2b:b9:5e:76:cc:95:0b:6b:
33:87:3d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:49 2023 by rpki-client on console-fra.rpki-client.org