Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/iqWxPK5SVWTYa12bz1i1-0lFcDU.roa
File: iqWxPK5SVWTYa12bz1i1-0lFcDU.roa (raw, json)
Hash identifier: Y/7kDJzps4c08F1y+naRr2ixB2kdYE3GEA3hJclhJBo=
Subject key identifier: 8A:A5:B1:3C:AE:52:55:64:D8:6B:5D:9B:CF:58:B5:FB:49:45:70:35
Certificate issuer: /CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Certificate serial: 01857315D3A4479085AA3E8DB91D0F1EC8DA
Authority key identifier: 26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/iqWxPK5SVWTYa12bz1i1-0lFcDU.roa
Signing time: Mon 02 Jan 2023 15:24:48 +0000
ROA not before: Mon 02 Jan 2023 15:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39029
IP address blocks: 87.238.32.0/19 maxlen: 19
185.47.40.0/22 maxlen: 22
194.31.39.0/24 maxlen: 24
2a02:c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:d3:a4:47:90:85:aa:3e:8d:b9:1d:0f:1e:c8:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Validity
Not Before: Jan 2 15:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8aa5b13cae525564d86b5d9bcf58b5fb49457035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c9:04:9f:e7:c9:ad:de:73:3f:84:b4:db:05:
1f:e9:ab:d0:6d:80:85:0b:1f:1d:9d:e2:8a:54:fa:
b5:1c:92:2e:55:80:e0:61:ae:61:c0:dd:37:c2:70:
d4:e4:f2:7f:7b:29:63:0d:2a:11:a2:26:01:24:f8:
70:fa:6a:bf:2c:a4:e0:b0:f3:24:f8:81:75:f0:84:
79:c7:f7:94:e1:48:69:d9:03:cb:92:fe:1d:a0:eb:
9e:10:a1:b9:37:0d:ba:e9:39:a3:6c:09:e5:3b:7e:
85:c0:0e:40:f8:ed:c5:57:68:a2:aa:8e:fd:dc:f7:
79:78:99:fd:74:75:d3:41:c3:3e:9e:38:03:14:7e:
a3:ee:9c:02:87:5a:34:d1:b2:b1:21:bc:4b:f8:c7:
31:ba:19:c7:be:a8:ef:b7:75:bd:13:02:91:ac:d6:
52:10:c7:9b:da:ab:7d:f8:b7:25:a2:91:e1:25:18:
b1:83:ae:5f:d3:e2:01:b4:3a:28:4f:19:45:db:a1:
2d:67:cf:ff:a0:e4:94:a3:48:07:93:c2:12:35:fd:
95:fa:5c:b5:10:9e:17:b8:90:59:07:86:7d:11:aa:
00:cd:88:2d:40:1c:0f:a4:10:c1:23:48:ae:0c:e5:
0c:cc:2c:a2:17:96:0f:55:8f:b8:2d:00:53:91:76:
c5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A5:B1:3C:AE:52:55:64:D8:6B:5D:9B:CF:58:B5:FB:49:45:70:35
X509v3 Authority Key Identifier:
keyid:26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/iqWxPK5SVWTYa12bz1i1-0lFcDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.32.0/19
185.47.40.0/22
194.31.39.0/24
IPv6:
2a02:c0::/32
Signature Algorithm: sha256WithRSAEncryption
7a:bb:25:f3:d9:bf:89:16:66:4c:75:af:40:58:30:b7:42:a5:
9b:6c:c3:95:36:f6:a2:cc:4e:c1:bc:49:a8:23:1e:b6:36:3c:
51:f9:94:71:6a:90:84:e6:7b:36:2d:23:e7:ff:94:29:aa:f3:
71:df:47:b7:0f:d2:41:d9:0b:f7:ab:63:a2:18:c5:9f:f7:93:
33:39:dd:71:79:d6:a2:fe:09:c8:64:f9:11:b7:f1:48:4d:5c:
19:70:61:0b:46:8a:08:2e:6f:a7:3b:35:d7:3c:21:b4:3d:1f:
58:c0:29:8c:b0:3b:12:61:4b:8b:53:0d:7a:ff:74:2c:f5:32:
b6:80:dd:fd:0a:1e:b4:7e:c6:ae:8b:ea:7b:99:78:fd:26:c1:
33:67:51:b5:74:c5:1c:23:36:a7:17:38:cb:3a:5d:b1:40:c8:
1f:db:6b:d6:c4:eb:d5:a3:34:54:ac:eb:b5:ef:fb:8d:e8:86:
35:3b:1a:50:a5:79:51:3d:ad:6b:fd:4a:04:a9:26:d4:5e:af:
a5:e9:a8:d0:6d:37:64:dd:5f:2f:99:5e:07:86:e9:32:b9:16:
77:e1:e6:b8:b3:f0:d7:06:ed:d7:f6:f0:82:8b:6e:af:60:92:
b6:6a:6e:0f:6b:c4:58:75:36:95:d1:6b:0d:d7:45:4e:ab:a4:
d7:e8:05:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:27 2024 by rpki-client on console-fra.rpki-client.org