Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/PO1ZQWFG2CfQMn8LHzd7VYc_5L8.roa
File: PO1ZQWFG2CfQMn8LHzd7VYc_5L8.roa (raw, json)
Hash identifier: fset/KnWb9dPgvFfV+mZ2zJ8FvUfSMFZz5xAyLBR12o=
Subject key identifier: 3C:ED:59:41:61:46:D8:27:D0:32:7F:0B:1F:37:7B:55:87:3F:E4:BF
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0189B6A8B95A319AAD1D1CCD656A4BFBBF4E
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/PO1ZQWFG2CfQMn8LHzd7VYc_5L8.roa
Signing time: Wed 02 Aug 2023 14:30:57 +0000
ROA not before: Wed 02 Aug 2023 14:30:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30738
IP address blocks: 195.211.53.0/24 maxlen: 24
46.8.46.0/24 maxlen: 24
188.130.182.0/24 maxlen: 24
2001:1468:8000::/36 maxlen: 36
2001:1468::/32 maxlen: 33
Validation: Failed, certificate revoked on Wed 02 Aug 2023 15:16:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b6:a8:b9:5a:31:9a:ad:1d:1c:cd:65:6a:4b:fb:bf:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Aug 2 14:30:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ced59416146d827d0327f0b1f377b55873fe4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c2:43:78:de:76:64:97:c6:dd:23:a1:39:7f:
6a:fa:4c:34:38:b3:f4:bb:c6:fc:8f:55:b7:eb:57:
e8:83:4e:3c:a2:23:32:68:38:8a:34:f6:c6:b6:8f:
c2:40:c2:ba:88:37:7f:50:6b:dd:7d:2f:16:17:a0:
e0:57:5a:96:6a:db:28:fd:4c:8e:4f:d4:48:f9:f0:
a4:c0:82:fd:02:b4:c9:c1:b6:94:f7:8c:97:a6:5f:
cc:0f:1e:3b:c7:e6:af:5d:d9:fe:ee:c6:47:7b:2b:
e1:50:f7:9f:32:16:03:82:97:0f:96:43:91:4e:6d:
de:7f:0c:d1:1d:84:1c:1b:48:73:b7:fb:aa:24:6d:
99:90:07:f5:1b:25:0c:c1:08:e8:b8:69:77:88:11:
7b:64:09:e5:6f:96:ff:0a:4f:12:f9:ea:0c:4b:96:
c8:cf:f8:ba:aa:81:b2:ad:b7:e9:73:c1:e8:db:ca:
34:a4:18:8d:ca:03:df:f9:86:e2:ee:eb:e7:09:68:
46:dc:d0:a7:d6:eb:56:bf:19:72:4c:97:0b:17:af:
d0:1b:40:2c:60:c7:65:1f:3b:5d:0f:c9:4c:15:54:
c8:4f:72:a0:01:1f:f4:64:66:77:81:4c:c6:8c:cf:
a6:c4:1a:19:64:88:4b:47:e4:25:85:09:ca:0b:6a:
59:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:ED:59:41:61:46:D8:27:D0:32:7F:0B:1F:37:7B:55:87:3F:E4:BF
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/PO1ZQWFG2CfQMn8LHzd7VYc_5L8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.46.0/24
188.130.182.0/24
195.211.53.0/24
IPv6:
2001:1468::/32
Signature Algorithm: sha256WithRSAEncryption
0d:01:48:66:bb:25:ed:a0:15:af:94:77:29:dd:04:d8:dd:95:
03:61:c4:b6:42:71:2a:3f:b8:33:01:5b:5f:32:75:f4:45:02:
5f:3b:93:a1:ac:2d:74:c1:1d:5b:58:c0:ea:6e:d7:26:f0:dd:
ab:44:96:d3:23:61:73:2d:83:58:42:0d:ee:be:52:ff:c6:65:
db:53:a2:55:4a:11:79:b2:d2:f9:e8:33:3a:b2:40:fe:ea:54:
38:e1:a7:2d:e1:39:fe:2f:7b:4d:38:2d:b8:b9:57:82:05:df:
4c:d5:5f:46:10:f0:75:b4:66:1b:1f:48:3f:5b:ed:78:69:67:
e1:ba:20:7f:1a:29:04:ff:76:3b:10:fa:b5:1d:c9:d6:1b:76:
0d:d9:16:a6:b3:4e:b5:43:57:0d:74:28:fb:42:8a:07:1a:69:
e4:b8:57:4e:8d:83:af:9a:75:36:30:e0:43:64:e6:dd:78:5d:
50:b8:16:dc:5c:81:c0:21:8c:d4:05:2d:80:d0:a2:47:42:76:
ec:67:e2:0a:ce:f0:c2:32:86:0f:57:d3:79:41:6d:32:0d:f3:
17:6d:ea:c3:11:82:7d:2a:e0:7c:f3:7a:41:72:3a:4b:3a:6d:
a9:1f:c9:c3:80:c0:25:2b:67:42:41:c7:7e:60:b7:a5:54:01:
ed:0e:5e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:57 2024 by rpki-client on console-fra.rpki-client.org