Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/rw_08JaqomhQwBRIkJ-s5PBiKf8.roa
File: rw_08JaqomhQwBRIkJ-s5PBiKf8.roa (raw, json)
Hash identifier: jVsvtno+WJXwQGeYxVEedlrs81SmzU8EF1gRl+HkwN8=
Subject key identifier: AF:0F:F4:F0:96:AA:A2:68:50:C0:14:48:90:9F:AC:E4:F0:62:29:FF
Certificate issuer: /CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Certificate serial: 018BD3D7CE22A327DFE9FDDBFE231240AE3B
Authority key identifier: D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/rw_08JaqomhQwBRIkJ-s5PBiKf8.roa
Signing time: Wed 15 Nov 2023 16:36:57 +0000
ROA not before: Wed 15 Nov 2023 16:36:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8351
IP address blocks: 195.98.192.0/19 maxlen: 19
213.254.32.0/19 maxlen: 19
194.59.16.0/23 maxlen: 23
2a02:320::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d3:d7:ce:22:a3:27:df:e9:fd:db:fe:23:12:40:ae:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Validity
Not Before: Nov 15 16:36:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af0ff4f096aaa26850c01448909face4f06229ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:44:46:4a:59:86:27:cd:7a:d4:e9:1d:7f:30:
67:d1:56:1d:29:b1:c1:94:10:40:f2:fe:26:40:55:
3b:42:47:39:91:59:30:00:e0:a8:af:c2:d5:6f:7c:
9b:d5:98:1b:e4:c3:eb:ef:c9:68:51:d5:a6:97:e1:
be:1d:ff:b1:63:c4:fb:b8:cf:e7:2e:d0:7b:57:71:
4d:e7:e7:c4:83:44:26:59:77:9c:14:9d:29:f5:b3:
1f:8f:5a:19:74:48:af:94:8b:ea:d0:f3:6f:d4:b5:
0f:ec:d6:80:b9:08:c4:15:d6:70:24:34:9e:b5:ad:
73:1f:84:56:ab:68:6d:d6:99:7a:40:b8:58:61:a3:
16:fd:4c:2d:cc:40:26:ee:b4:d8:89:99:66:14:b9:
83:2b:c7:06:33:cb:17:d4:5f:ea:80:6c:4b:ca:e8:
b5:cf:de:1c:a5:03:1b:dd:10:4e:87:36:a1:50:dc:
b7:45:fd:6a:71:8b:f7:05:a1:71:8d:e1:15:a3:0b:
98:3a:f8:3c:5d:4a:b9:b4:41:3d:19:10:b4:50:5e:
1f:a7:2e:a6:3b:74:5e:fe:ef:a3:62:e6:7c:09:47:
8b:5a:a7:5c:e5:1f:bd:00:23:40:d4:96:d0:d5:a1:
2e:33:2f:79:6f:9b:40:75:95:46:c8:91:fb:12:93:
84:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0F:F4:F0:96:AA:A2:68:50:C0:14:48:90:9F:AC:E4:F0:62:29:FF
X509v3 Authority Key Identifier:
keyid:D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/rw_08JaqomhQwBRIkJ-s5PBiKf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.16.0/23
195.98.192.0/19
213.254.32.0/19
IPv6:
2a02:320::/29
Signature Algorithm: sha256WithRSAEncryption
49:23:d5:44:fd:c4:f6:74:b7:5e:31:42:38:3e:4e:fc:69:2b:
d9:1c:57:76:5e:7b:8d:e1:43:e9:d1:04:f5:b7:f3:6c:e1:81:
37:96:ce:26:42:be:46:c7:30:66:20:56:b1:91:a4:6f:9c:a0:
45:7a:06:89:2f:83:c8:c4:3a:5d:05:af:14:49:e0:1f:55:ff:
8d:96:dd:59:c8:84:9b:63:89:c3:95:48:8f:6a:9b:11:6a:1a:
ed:63:36:70:36:c6:5c:6c:96:a0:c8:d8:7f:0c:4e:5e:de:ab:
08:98:8e:21:dc:0d:fc:8e:87:db:3d:f5:96:6a:ff:fe:7d:32:
ef:ae:80:0d:6c:a9:63:2e:40:da:08:9d:13:e0:84:43:90:55:
d7:de:4f:0f:54:11:9c:7c:5a:c6:25:d6:1f:23:6c:4e:bc:6f:
b6:7a:02:28:ce:5f:14:6a:9e:5e:d1:71:81:ac:29:37:06:af:
31:05:cc:de:da:3c:f9:69:e9:95:2b:9f:a4:49:dc:2a:30:4c:
e4:25:d3:eb:90:77:86:e4:f4:67:4d:be:b0:cc:fb:b9:a4:86:
bc:7b:e9:a0:a7:d4:12:9e:af:14:82:cf:64:9d:ef:e6:01:ac:
16:86:94:cd:d4:47:77:9b:4e:49:15:a8:e8:39:06:b2:b9:21:
43:5f:51:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:27 2024 by rpki-client on console-ams.rpki-client.org