Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/j4hz76vP4uUGGiNyxCfog4-ELas.roa
File: j4hz76vP4uUGGiNyxCfog4-ELas.roa (raw, json)
Hash identifier: kjs4Q4z9KlIa8D6YAGDYiyfiyWHWXBfR/zQkhQZZkJA=
Subject key identifier: 8F:88:73:EF:AB:CF:E2:E5:06:1A:23:72:C4:27:E8:83:8F:84:2D:AB
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0189DF94328CD3F595671DAEFBC30A537CE5
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/j4hz76vP4uUGGiNyxCfog4-ELas.roa
Signing time: Thu 10 Aug 2023 13:12:58 +0000
ROA not before: Thu 10 Aug 2023 13:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30738
IP address blocks: 195.211.53.0/24 maxlen: 24
188.130.182.0/24 maxlen: 24
2001:1468:8000::/36 maxlen: 36
2001:1468::/32 maxlen: 33
Validation: Failed, certificate revoked on Mon 25 Sep 2023 22:28:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:df:94:32:8c:d3:f5:95:67:1d:ae:fb:c3:0a:53:7c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Aug 10 13:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f8873efabcfe2e5061a2372c427e8838f842dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f3:c5:5a:21:bf:5a:96:79:e1:0f:0d:6a:b9:
ae:76:17:36:3a:92:33:6a:7f:12:dd:4c:c4:eb:98:
35:77:66:47:c6:f8:69:0d:a9:90:32:f6:7d:76:be:
fb:59:e5:58:1b:a2:90:b7:c2:4b:b3:5e:25:8f:7a:
ed:ad:ac:13:f4:a9:3c:55:7e:c3:06:cb:a2:59:cb:
62:cb:fe:0a:77:05:43:5f:f3:02:3c:88:48:6c:ba:
c1:2b:85:23:7a:bd:f6:75:8e:c1:c4:36:72:56:14:
60:f2:13:03:cf:b2:48:65:7e:f2:25:25:05:6f:db:
11:33:2b:82:ec:91:8d:12:cc:47:a5:e3:f2:f2:0d:
65:68:25:4c:67:7c:15:0d:69:9f:64:9f:cb:ec:b1:
6c:8c:7c:e2:1f:17:6b:a4:8a:28:37:b7:42:5b:8e:
57:20:50:e9:54:1e:13:76:13:0c:fe:82:79:15:f0:
cf:0b:52:60:e5:27:25:16:59:54:78:7a:11:08:85:
f8:7e:01:b1:84:4f:af:a0:a2:1d:cd:f2:60:d9:e5:
e6:2f:e0:b4:b6:77:cc:ad:69:e0:7b:60:8e:08:11:
b2:03:37:09:e2:ed:36:87:d7:5b:45:98:bb:eb:4c:
b2:51:b3:cd:2f:0b:f5:17:39:a8:ce:d7:50:40:76:
d5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:88:73:EF:AB:CF:E2:E5:06:1A:23:72:C4:27:E8:83:8F:84:2D:AB
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/j4hz76vP4uUGGiNyxCfog4-ELas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.182.0/24
195.211.53.0/24
IPv6:
2001:1468::/32
Signature Algorithm: sha256WithRSAEncryption
7f:5a:b8:db:e5:47:89:2d:41:07:57:e8:d7:7d:1b:9a:57:14:
e6:62:22:99:f8:55:10:bd:78:4c:c4:ee:25:be:9b:46:db:09:
0c:e7:9b:d8:c4:ad:fb:9b:7c:33:bf:c8:d4:51:d9:67:58:38:
66:ef:d9:17:a1:27:43:63:15:4b:a8:bd:a5:5c:7a:09:ef:d3:
05:95:51:af:72:18:ff:75:a0:c1:5d:a5:70:34:a3:a9:44:67:
9b:31:d5:36:c2:0d:31:52:55:2a:85:e3:22:c8:a2:e3:5c:95:
85:a3:5e:ab:db:a6:cb:4d:51:48:87:0c:81:43:a6:61:77:24:
27:e3:03:9f:83:e5:aa:71:ce:40:95:24:c9:09:fb:e6:3b:5a:
05:e7:ff:3a:e9:f5:74:29:c5:36:6f:5b:c7:e7:fc:de:a4:93:
c4:04:71:72:f8:97:01:de:d2:32:45:9b:42:46:52:db:5b:64:
06:98:98:07:90:54:34:e5:16:d5:3e:94:f3:06:29:00:38:c4:
39:53:98:57:d6:77:bd:27:74:f6:f6:29:91:8d:2b:44:c4:17:
13:3e:59:5c:cf:30:bf:98:7d:29:35:39:c7:ff:e8:dc:ff:de:
dd:4b:b6:75:5b:ef:c7:54:80:98:f1:47:6e:b5:10:38:3a:1f:
a5:39:61:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:57 2024 by rpki-client on console-fra.rpki-client.org