Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/3jqlSWcWCm_s4ZNHsRHrm304Q28.roa
File: 3jqlSWcWCm_s4ZNHsRHrm304Q28.roa (raw, json)
Hash identifier: wGv4Zucw5J2goxrIztSAZmCUYXgUs287pQpie1tVfH4=
Subject key identifier: DE:3A:A5:49:67:16:0A:6F:EC:E1:93:47:B1:11:EB:9B:7D:38:43:6F
Certificate issuer: /CN=61e6ea83926bc478c785471d805a5c1210a8c993
Certificate serial: 0185735F0738EBE58B5F7C4213D866548E27
Authority key identifier: 61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/3jqlSWcWCm_s4ZNHsRHrm304Q28.roa
Signing time: Mon 02 Jan 2023 16:44:45 +0000
ROA not before: Mon 02 Jan 2023 16:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57460
IP address blocks: 195.238.112.0/22 maxlen: 22
195.238.112.0/24 maxlen: 24
195.238.115.0/24 maxlen: 24
195.238.113.0/24 maxlen: 24
195.238.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:5f:07:38:eb:e5:8b:5f:7c:42:13:d8:66:54:8e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e6ea83926bc478c785471d805a5c1210a8c993
Validity
Not Before: Jan 2 16:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de3aa54967160a6fece19347b111eb9b7d38436f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:34:1c:25:27:1a:c1:10:e2:f1:e7:9d:8a:49:
8f:be:07:ef:2d:4d:a9:fb:a1:fc:b2:7f:61:aa:fe:
b2:eb:21:65:84:a4:ff:4f:2a:c5:c2:eb:b4:a0:de:
42:17:02:83:32:62:c9:7e:24:06:d5:e8:ad:1a:a8:
3d:44:4b:d8:8b:39:f3:d8:f7:5c:cd:9e:aa:92:83:
4d:02:fa:3d:b3:67:58:c7:26:9d:f1:2b:9e:ca:8c:
31:a1:ef:6e:ce:53:94:fc:f5:cf:6b:c5:66:f7:41:
74:f3:0f:5f:e5:57:e6:ec:12:ae:be:64:b6:ac:b5:
cf:da:a4:ef:ba:16:e6:af:a1:87:16:ae:be:94:8f:
eb:a9:c6:38:fc:15:27:94:51:2e:47:e1:ea:a0:4e:
24:d6:7b:20:5f:c9:f2:bc:b6:9f:f0:a7:25:69:d3:
80:81:49:e3:1e:ad:b5:d9:ad:5d:ce:d3:00:5a:6c:
d9:68:3f:46:40:c4:d3:20:d5:4b:74:07:31:a1:ed:
69:f7:b6:19:ef:a6:43:63:7b:a7:b8:86:28:45:7e:
ec:42:05:1f:1d:20:7e:17:7b:0a:1a:4d:04:0f:7d:
f8:81:ce:29:7f:d2:e1:3c:7e:ae:0b:b6:97:78:55:
62:c0:19:83:8d:3c:ec:32:79:b4:f4:2a:28:67:a6:
9a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:3A:A5:49:67:16:0A:6F:EC:E1:93:47:B1:11:EB:9B:7D:38:43:6F
X509v3 Authority Key Identifier:
keyid:61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/3jqlSWcWCm_s4ZNHsRHrm304Q28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.112.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:36:cf:d8:f1:5f:2a:bd:1d:28:3b:37:03:b0:b5:5c:14:37:
62:4e:51:f2:86:60:8f:71:0f:3b:46:85:90:c1:06:2f:9b:80:
d6:75:3d:cb:d9:58:65:bf:3d:8a:e1:24:77:a4:99:a9:6a:59:
cc:c6:1a:f1:a0:15:da:ea:64:84:13:67:de:29:a6:12:48:a3:
cd:2f:02:77:e4:a1:f6:73:0e:62:20:aa:e3:27:1e:0a:ff:e5:
15:8c:3c:13:c9:1e:aa:ad:09:54:ff:91:0b:9e:69:49:89:99:
25:fa:22:28:74:00:08:45:dd:e8:59:d9:7b:47:40:88:5c:10:
40:5e:12:0a:61:95:f0:51:c7:f1:d5:41:c9:ca:da:8e:18:92:
17:74:ed:06:0a:9a:cf:b7:55:da:09:ac:6e:e8:5f:f5:36:66:
c1:34:18:f1:3e:2c:63:78:d0:7a:e7:04:61:9f:09:4d:f7:1e:
c2:c3:5b:8d:c7:c2:f2:c4:9b:e5:40:f7:95:92:a8:59:49:3c:
d3:f6:e4:cb:ed:c0:b2:c3:32:6b:08:5b:9e:70:7e:e0:9a:7a:
f1:8e:7b:bb:dc:57:1a:9a:31:d4:63:dd:b1:98:f7:3d:cb:0c:
10:a0:3b:61:9e:9c:cc:c6:fe:d0:ad:9d:c2:d6:6d:d0:d7:e9:
66:89:94:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:56 2024 by rpki-client on console-ams.rpki-client.org