Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lJDg1ghKpntBb8AiFO_BYGFubKw.roa
File: lJDg1ghKpntBb8AiFO_BYGFubKw.roa (raw, json)
Hash identifier: VUiv1wku8iadMm9B8+B5IdHecY3HAiHD911j4k8Tnc4=
Subject key identifier: 94:90:E0:D6:08:4A:A6:7B:41:6F:C0:22:14:EF:C1:60:61:6E:6C:AC
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0188C3A7A78F26A5B86E7467CE70D7FB14E5
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lJDg1ghKpntBb8AiFO_BYGFubKw.roa
Signing time: Fri 16 Jun 2023 10:02:04 +0000
ROA not before: Fri 16 Jun 2023 10:02:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62331
IP address blocks: 95.47.244.0/24 maxlen: 24
95.47.189.0/24 maxlen: 24
95.47.191.0/24 maxlen: 24
31.148.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:a7:a7:8f:26:a5:b8:6e:74:67:ce:70:d7:fb:14:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jun 16 10:02:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9490e0d6084aa67b416fc02214efc160616e6cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7c:82:f5:69:52:f3:6d:3f:53:e3:f9:a0:96:
7e:72:f9:5b:e5:18:b3:27:7a:cd:5f:01:c9:9e:28:
85:84:ca:88:2c:6f:fc:a5:d6:2d:e0:b9:88:65:32:
3a:7c:90:63:c5:b5:64:25:34:dd:ec:e6:81:b8:bb:
3d:90:65:7c:8f:4c:28:ee:4d:00:b9:69:ec:eb:51:
a9:54:0a:f8:96:22:39:81:17:09:59:8e:5f:4f:f9:
df:cb:51:8c:29:ee:f3:d4:8a:69:ea:d3:09:c2:d4:
1d:02:71:d6:af:5b:4e:cc:85:23:3c:48:1b:84:f4:
21:c1:36:ba:34:58:72:5e:4d:4a:e3:82:07:ea:97:
49:ea:71:25:f1:43:ca:0a:15:e1:73:87:14:7d:d5:
2c:a8:98:0e:48:ed:87:41:32:ca:a4:49:ee:30:13:
d8:4e:53:b5:a6:f0:28:f1:b3:60:2f:8a:f2:a3:dd:
d4:bb:ff:9e:b0:59:e2:58:06:ab:fb:36:76:24:27:
37:59:71:d7:f7:7d:26:f8:3d:ff:3d:21:a8:5e:84:
9c:a7:c3:c8:c4:d9:38:da:08:a0:e8:b5:7d:f7:49:
5a:9a:0c:8f:f6:e0:a9:cd:64:a7:c8:65:1c:45:32:
ea:51:83:26:c3:ee:e6:0e:55:83:ea:74:e7:3c:52:
c9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:90:E0:D6:08:4A:A6:7B:41:6F:C0:22:14:EF:C1:60:61:6E:6C:AC
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lJDg1ghKpntBb8AiFO_BYGFubKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.205.0/24
95.47.189.0/24
95.47.191.0/24
95.47.244.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:83:26:40:16:68:c4:d3:65:06:e6:1b:d1:9d:cb:35:2b:40:
d4:cc:58:f6:60:18:c0:c5:4b:07:14:af:64:59:24:fd:14:e1:
f4:e1:2f:62:7c:05:e8:ea:80:07:16:45:54:92:cf:c7:61:4f:
b9:bd:b3:17:78:b3:49:db:0a:ec:d1:ab:1d:54:d9:64:c7:7f:
00:99:d7:d6:e3:30:ab:ee:a8:00:a9:fa:81:a0:73:b9:36:9c:
2c:83:d0:c3:ee:cf:5c:6f:7d:03:e1:89:4d:d6:07:56:0e:b8:
82:df:9c:ac:8a:f0:73:70:9d:7a:32:8f:a6:5e:74:d5:c0:a4:
ce:03:da:3d:6c:3f:8a:ed:a7:06:40:dc:0c:a3:bd:7e:fd:12:
cf:ed:90:0d:43:45:6b:50:1b:3c:04:51:b1:ed:5a:cb:25:f9:
01:01:ae:dd:48:56:a2:d4:e9:d3:45:76:7c:8d:90:cd:ee:ed:
5f:6e:71:88:d9:93:02:81:59:b7:de:ca:85:bd:72:94:07:24:
98:48:98:ae:93:23:cf:35:db:a0:cc:d5:c2:f4:93:b4:e9:2b:
cc:9e:a4:ae:fa:25:c3:2b:bf:05:62:39:20:f1:06:75:cd:8f:
dd:60:44:02:c6:c2:ce:d7:db:ad:7f:ed:5d:ea:ee:37:35:dc:
25:31:bd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:51 2024 by rpki-client on console-ams.rpki-client.org