Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/jZjlsGXG2zGrMQw6LQMXAcE_hK0.roa
File: jZjlsGXG2zGrMQw6LQMXAcE_hK0.roa (raw, json)
Hash identifier: sdEhE80nBiJ+fJxIH0DFvgs5vBalnLyAz/c5tw68f9s=
Subject key identifier: 8D:98:E5:B0:65:C6:DB:31:AB:31:0C:3A:2D:03:17:01:C1:3F:84:AD
Certificate issuer: /CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Certificate serial: 018CD08AD53E575116DED70B60EEF27B110B
Authority key identifier: FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/jZjlsGXG2zGrMQw6LQMXAcE_hK0.roa
Signing time: Wed 03 Jan 2024 18:16:48 +0000
ROA not before: Wed 03 Jan 2024 18:16:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8245
IP address blocks: 195.26.192.0/19 maxlen: 19
212.236.0.0/18 maxlen: 18
212.236.0.0/16 maxlen: 16
195.26.216.0/22 maxlen: 24
195.26.220.0/22 maxlen: 22
212.236.160.0/19 maxlen: 19
212.236.192.0/18 maxlen: 18
2a02:2750::/32 maxlen: 32
2a02:2750:cafe::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 03 Jul 2024 18:23:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d0:8a:d5:3e:57:51:16:de:d7:0b:60:ee:f2:7b:11:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Validity
Not Before: Jan 3 18:16:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d98e5b065c6db31ab310c3a2d031701c13f84ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4d:85:a9:f6:e2:10:fc:ad:aa:3e:08:d4:46:
5a:16:12:3e:05:20:4f:72:9c:28:02:a0:ad:96:2a:
cf:64:b2:0b:b4:62:ae:fd:0d:a6:4f:0c:11:6d:e5:
ae:4d:99:48:92:26:a0:a6:c1:be:cb:e6:bc:4f:80:
2e:96:9d:e7:bf:c5:b0:ec:b4:ac:36:80:79:03:18:
26:53:4d:69:ac:a7:dc:2e:88:a6:b0:bf:55:14:78:
6d:03:8d:fe:36:dd:1c:f2:4f:9a:b4:80:00:b0:bd:
03:41:0d:cb:d4:48:9e:36:11:b4:77:9a:68:02:5e:
bf:98:2b:03:15:24:f2:96:e7:f5:c0:c3:b0:89:86:
7c:15:3d:ef:d8:d6:97:2c:d2:f0:43:f0:a4:5d:71:
f0:f6:2e:c1:ae:a6:30:97:fb:69:6c:f6:2a:e1:07:
5b:62:a1:9b:ad:ae:2f:f0:61:3a:31:75:a3:95:2a:
10:62:55:c3:ec:86:c4:17:9f:fb:82:ec:f9:ba:e5:
be:ab:b8:6a:38:72:e5:d4:94:58:54:44:a7:b2:e8:
32:ca:4b:1e:c2:3e:75:28:4f:ad:d3:ca:2e:ae:65:
7a:c3:f4:1b:80:68:d8:58:2f:ae:7b:8e:57:49:df:
41:62:7a:8c:d6:75:e2:05:cb:cd:6e:22:ba:b2:77:
b9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:98:E5:B0:65:C6:DB:31:AB:31:0C:3A:2D:03:17:01:C1:3F:84:AD
X509v3 Authority Key Identifier:
keyid:FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/jZjlsGXG2zGrMQw6LQMXAcE_hK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.26.192.0/19
212.236.0.0/16
IPv6:
2a02:2750::/32
Signature Algorithm: sha256WithRSAEncryption
38:e7:4a:b0:f1:18:a7:16:ef:8f:34:2e:14:31:c6:9b:fd:f8:
5d:26:83:02:20:13:39:b1:52:17:3c:ef:98:6e:a6:2c:a3:1d:
22:ed:19:10:c3:47:e3:24:24:97:7e:01:ea:cb:23:66:c4:42:
4e:42:66:b2:d4:fe:55:17:48:55:3f:38:78:52:bd:42:0e:79:
79:06:ec:99:6c:14:be:3c:d2:20:ee:37:a4:bb:a5:93:4d:06:
f6:fa:f9:47:95:d2:7a:5b:bb:5f:44:46:ca:98:e5:47:03:f4:
f0:a4:92:8c:28:3b:47:57:68:4d:aa:57:70:37:70:e4:16:71:
0f:23:ce:81:68:82:af:d2:5b:68:ba:3c:ca:3e:77:0b:f8:a0:
86:e3:2d:1d:b6:df:58:57:9c:00:fc:a4:d1:19:60:2b:a1:2d:
8b:80:b5:11:66:01:e3:5c:4f:b1:3c:43:ae:4b:d4:1e:3d:60:
16:08:64:0e:a8:0c:47:da:0c:cd:27:69:f4:67:01:09:73:f9:
a5:4b:2b:fe:eb:11:a2:11:03:cf:81:65:7f:15:c7:bb:2a:46:
07:8b:7f:5a:31:b5:d6:42:9d:11:9c:f5:68:f7:a6:4f:43:c4:
cb:60:7e:db:d5:53:ea:95:1c:1e:ba:11:ff:d5:f6:5e:0a:1e:
e0:fa:43:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:29 2025 by rpki-client