Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/SJ1jdGmv0jfIdmy7T-zxgyptuV4.roa
File: SJ1jdGmv0jfIdmy7T-zxgyptuV4.roa (raw, json)
Hash identifier: HN1bDOlR794a2RcDjmrxTXt9az+aPXWD7EbtkyLUNuU=
Subject key identifier: 48:9D:63:74:69:AF:D2:37:C8:76:6C:BB:4F:EC:F1:83:2A:6D:B9:5E
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0186162020461DCFFF97B96DDAFB0B56F8FC
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/SJ1jdGmv0jfIdmy7T-zxgyptuV4.roa
Signing time: Fri 03 Feb 2023 07:14:09 +0000
ROA not before: Fri 03 Feb 2023 07:14:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30738
IP address blocks: 195.211.53.0/24 maxlen: 24
188.130.254.0/24 maxlen: 24
188.130.182.0/24 maxlen: 24
2001:1468:8000::/36 maxlen: 36
2001:1468::/32 maxlen: 33
Validation: Failed, certificate revoked on Wed 22 Feb 2023 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:16:20:20:46:1d:cf:ff:97:b9:6d:da:fb:0b:56:f8:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Feb 3 07:14:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=489d637469afd237c8766cbb4fecf1832a6db95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9e:99:c3:4c:5f:85:2c:1d:73:89:c6:02:d9:
a2:0c:a1:f8:e4:39:91:82:4a:09:ed:45:4c:80:46:
ec:59:3d:15:6b:65:ea:e2:f8:45:39:15:47:6d:74:
36:c9:17:a1:bb:be:17:cb:c2:58:65:15:8c:35:d8:
94:0f:d9:82:5d:a4:99:fc:24:d2:b5:0c:0f:c9:b8:
f1:c9:82:8a:6e:7e:5d:d7:d8:ba:5b:95:11:e8:ff:
55:1e:7c:a5:7c:23:62:cb:2f:0c:87:e5:93:ed:4f:
7a:eb:78:6d:ee:11:d3:91:91:c4:5c:de:99:19:a0:
7b:ca:15:27:92:7e:2f:0b:ce:1f:9f:3c:fa:0c:9b:
d2:31:da:ff:34:d4:05:5a:b6:d8:1c:d6:a1:66:3e:
96:1d:44:04:8e:a6:54:cf:b7:85:3f:6c:5e:7b:f6:
6d:16:c0:6b:bc:78:9f:8b:30:5d:ae:72:e4:b6:06:
68:5d:c9:7e:5d:58:ae:84:71:30:9a:07:e1:c4:65:
5d:38:63:2a:67:1a:e7:d3:36:88:0b:7a:a5:ef:e5:
bc:06:e1:81:f4:97:d0:7c:bd:b1:ae:eb:c6:18:fa:
6b:84:4b:d8:5b:2f:c8:e6:62:c7:7d:32:aa:5f:0e:
50:e8:87:e4:56:70:bf:14:9f:d1:13:f9:90:11:40:
6a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9D:63:74:69:AF:D2:37:C8:76:6C:BB:4F:EC:F1:83:2A:6D:B9:5E
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/SJ1jdGmv0jfIdmy7T-zxgyptuV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.182.0/24
188.130.254.0/24
195.211.53.0/24
IPv6:
2001:1468::/32
Signature Algorithm: sha256WithRSAEncryption
04:03:0b:a4:0d:4b:e3:e3:a6:9d:ba:a7:e9:07:2d:0f:84:09:
bc:a6:90:be:3f:f4:82:df:41:cb:f9:47:e6:7a:2f:9c:2b:80:
df:2a:19:4d:19:97:70:8f:38:91:be:a0:81:a2:e9:93:fc:21:
8e:99:78:08:64:aa:8f:05:16:ee:09:fe:bf:9d:da:bc:04:b3:
c0:e0:38:27:58:61:47:0c:5a:5a:2e:87:0e:c8:81:6f:8b:bf:
12:ef:84:ab:12:99:89:93:33:c0:25:9d:87:05:3c:3e:8d:79:
46:42:6a:de:eb:87:02:15:c6:ff:8e:cd:6b:8c:cc:62:84:f8:
fe:01:12:81:39:65:ca:7b:18:8e:ab:1d:f3:b3:f7:fe:82:5a:
ab:8b:65:50:7d:f9:e7:50:85:05:94:18:5f:d0:89:3e:50:18:
e6:28:14:3c:cd:22:87:59:78:80:8b:ae:04:29:d6:b1:be:32:
07:44:b5:5c:b2:4f:7d:b7:f5:09:3e:e6:d2:4c:4b:bb:2e:d7:
b2:1b:c0:21:1f:2a:6d:a7:c0:1e:a1:2f:d7:b5:43:14:02:72:
6d:14:8f:ce:99:12:90:b9:1e:dc:2c:f0:ef:d3:3b:10:6c:af:
1f:dd:ea:b7:2a:65:cb:6e:76:3f:8c:c4:34:da:64:7e:32:4a:
b7:e8:07:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:00 2024 by rpki-client on console-ams.rpki-client.org