Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/JiIaWhL69BofXYPNSf7mA66aCi0.roa
File: JiIaWhL69BofXYPNSf7mA66aCi0.roa (raw, json)
Hash identifier: QKUyyapDKuSgPp4o5JUjO+4/5MRCvRCkgVXVxIwp9ss=
Subject key identifier: 26:22:1A:5A:12:FA:F4:1A:1F:5D:83:CD:49:FE:E6:03:AE:9A:0A:2D
Certificate issuer: /CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
Certificate serial: 018CC42487B871666FEE29B66214A64104CD
Authority key identifier: 07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/JiIaWhL69BofXYPNSf7mA66aCi0.roa
Signing time: Mon 01 Jan 2024 08:29:37 +0000
ROA not before: Mon 01 Jan 2024 08:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13236
IP address blocks: 195.234.236.0/22 maxlen: 22
195.234.237.0/24 maxlen: 24
195.234.238.0/24 maxlen: 24
195.234.236.0/24 maxlen: 24
195.234.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:87:b8:71:66:6f:ee:29:b6:62:14:a6:41:04:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
Validity
Not Before: Jan 1 08:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26221a5a12faf41a1f5d83cd49fee603ae9a0a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a3:09:35:ca:49:28:71:4b:d5:38:97:20:3f:
a4:88:e0:69:f5:b7:af:4f:fd:4e:a1:d4:c4:09:39:
45:83:ed:a7:b1:0f:41:95:f9:fa:4e:bc:4f:6c:5b:
b2:83:05:94:be:4e:8f:67:d8:5d:d0:e3:6c:7f:8c:
ed:88:e1:f1:c7:db:07:86:44:69:2c:2f:c3:be:c0:
d2:a3:ec:d4:d8:83:8c:a3:9f:20:8b:07:85:36:7e:
5d:89:e9:c4:c2:f6:bd:b2:23:ec:ca:4c:7b:00:c4:
b2:95:de:36:7c:f3:dc:27:68:e8:15:58:59:65:80:
ea:1a:fc:03:63:69:60:70:3b:24:a0:1d:b3:39:62:
b8:8c:fa:a2:42:17:a8:6c:e3:aa:d9:cc:39:b9:8b:
a3:bb:25:76:21:11:04:e7:32:a0:d1:e3:23:e4:84:
5e:07:cd:38:9d:73:38:5c:b1:72:c0:0c:73:60:4b:
31:eb:2e:45:2b:5d:28:67:80:ed:19:96:ad:44:cc:
4a:b9:a3:e3:37:f9:88:3a:f3:b1:1b:c3:ee:f4:6e:
cd:53:82:5d:2f:ca:33:05:b7:cb:da:8e:7f:ef:40:
68:fe:a9:3a:d4:d0:19:b3:20:19:20:8f:e3:b5:7e:
95:59:06:5f:e1:cd:bf:b6:71:68:95:ab:b0:3b:aa:
66:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:22:1A:5A:12:FA:F4:1A:1F:5D:83:CD:49:FE:E6:03:AE:9A:0A:2D
X509v3 Authority Key Identifier:
keyid:07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/JiIaWhL69BofXYPNSf7mA66aCi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.236.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:d3:64:33:73:f9:80:b4:a3:80:4c:84:68:eb:28:33:60:e2:
a9:03:ea:94:6a:6c:87:e0:0e:ff:c6:0c:8a:d9:ac:4b:0d:b3:
02:d9:9d:70:f0:59:fe:c1:0c:a4:ca:02:92:52:8b:b3:8b:60:
b8:bc:d9:5a:ea:81:4b:28:65:df:a5:01:09:25:7b:fc:61:5d:
26:a6:ee:15:fd:0b:62:72:39:0d:43:9e:fa:70:ca:25:1e:ad:
59:63:49:a4:b9:e0:82:b5:43:0e:66:a7:a3:aa:d3:ef:b8:61:
9b:91:b7:c8:f9:8e:33:b8:6b:5f:f8:92:6f:7a:ab:76:38:72:
ae:a4:1d:c5:db:b9:72:47:33:e1:39:68:8a:1d:65:89:a7:97:
42:fc:dd:7a:67:1d:cd:66:a9:7b:0d:2c:1b:14:7f:75:95:17:
00:fa:25:77:80:b9:1b:46:a4:c4:02:26:64:f8:ca:b0:68:d7:
96:a9:77:2e:64:e4:75:9f:ee:6e:36:c9:a3:f6:ab:74:b8:ba:
c5:c0:0b:89:a5:4b:60:60:1e:89:3d:17:f2:ca:b3:c6:d1:81:
6f:d0:52:ac:db:f5:73:ba:dd:8e:1c:78:6c:3b:c4:db:ed:da:
c3:e9:f1:a5:1c:6d:f1:65:a9:5c:84:8a:01:9c:0f:5c:3b:0e:
47:85:d7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:33 2025 by rpki-client