Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/x1SjPN9nFlxTwdboCGtVYRi-xFU.roa
File: x1SjPN9nFlxTwdboCGtVYRi-xFU.roa (raw, json)
Hash identifier: rRNzd0fobQPee3K8wtnQ38SzcfkFWt2PK8VtWp/T8x8=
Subject key identifier: C7:54:A3:3C:DF:67:16:5C:53:C1:D6:E8:08:6B:55:61:18:BE:C4:55
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018896C6A99385912FB85A03ED1059BD5C54
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/x1SjPN9nFlxTwdboCGtVYRi-xFU.roa
Signing time: Wed 07 Jun 2023 16:53:01 +0000
ROA not before: Wed 07 Jun 2023 16:53:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30738
IP address blocks: 195.211.53.0/24 maxlen: 24
46.8.37.0/24 maxlen: 24
109.248.44.0/24 maxlen: 24
188.130.182.0/24 maxlen: 24
2001:1468:8000::/36 maxlen: 36
2001:1468::/32 maxlen: 33
Validation: Failed, certificate revoked on Sat 10 Jun 2023 05:45:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:96:c6:a9:93:85:91:2f:b8:5a:03:ed:10:59:bd:5c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jun 7 16:53:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c754a33cdf67165c53c1d6e8086b556118bec455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3c:16:93:90:bd:fd:c7:90:bb:91:82:60:95:
40:ad:53:96:25:03:6e:99:32:0d:44:ba:49:fd:d5:
69:55:1f:05:fa:03:40:c9:a6:b0:d8:b7:0f:f9:df:
d7:f6:20:4a:40:c3:0c:97:a4:dc:17:ff:ac:91:cc:
f8:e9:c1:cc:18:2f:e5:61:b5:3b:51:77:ff:66:6f:
2d:40:52:d6:34:62:8c:d9:5d:2c:78:ae:0b:fc:8e:
c2:fc:28:a6:d4:f0:04:ba:56:dd:f6:65:24:82:62:
99:fc:83:43:5d:04:ff:9c:bb:33:2a:b8:ef:46:af:
91:62:ad:a5:36:90:c3:4f:fd:28:e6:90:91:e8:43:
cb:10:4d:14:a7:c5:21:c6:e3:6f:27:a7:9b:e8:c1:
b5:8e:c2:b3:4a:42:e4:07:24:d1:eb:b9:e9:fd:c9:
77:f0:df:20:19:07:c7:94:a9:44:5e:ae:61:26:bc:
72:5d:d2:8d:3e:13:ea:b2:b6:f1:71:a3:d6:d3:c2:
db:42:10:64:e5:d0:2f:6d:01:5d:43:bf:09:a4:9c:
5f:21:cb:82:c1:87:6a:a9:b4:58:d6:4b:5f:18:aa:
ea:54:e7:34:08:23:6c:a0:29:c9:e8:c2:95:9c:82:
10:12:29:dd:a2:66:e6:98:b1:15:6d:30:46:de:62:
f5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:54:A3:3C:DF:67:16:5C:53:C1:D6:E8:08:6B:55:61:18:BE:C4:55
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/x1SjPN9nFlxTwdboCGtVYRi-xFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.37.0/24
109.248.44.0/24
188.130.182.0/24
195.211.53.0/24
IPv6:
2001:1468::/32
Signature Algorithm: sha256WithRSAEncryption
7b:ac:75:e5:5a:0e:1e:ea:a5:53:5a:52:6a:d3:dc:3e:21:c2:
e4:36:cc:07:ec:01:7b:bb:f0:f7:6b:7f:a9:b2:70:9d:d7:e4:
85:8d:4b:7b:fb:f5:94:2c:cb:6b:4d:6a:84:43:5c:d7:f6:ac:
0c:c4:94:30:eb:3c:b0:11:3d:7a:0e:59:5d:7a:87:57:06:16:
ab:18:15:bb:46:72:dc:36:d6:1b:96:c5:1a:b9:b3:78:f1:f9:
83:e1:33:a0:29:5f:21:7d:ee:3e:7b:f0:79:e1:9f:9a:1a:39:
60:46:f4:79:90:e8:00:65:17:9a:d8:cb:ca:79:43:ae:8b:62:
2a:15:c3:ea:ca:4a:0b:d9:af:f4:3c:81:fb:e6:5d:8e:c8:60:
c5:ad:dd:8a:41:eb:31:4e:32:5b:f3:4d:06:53:74:91:6d:a9:
a4:3c:a9:be:6e:b3:70:bd:82:86:84:c0:d1:ab:f7:d4:81:54:
66:f0:bf:88:67:a1:27:3a:ea:5c:f6:0b:48:6e:03:fc:99:d3:
9c:de:dd:26:3f:8a:d6:53:bb:29:b8:5f:ba:2e:23:c2:0e:6f:
76:37:f0:55:22:75:cc:c4:5d:96:87:11:43:b6:2e:86:5a:7c:
91:27:0c:b4:7b:9f:6a:04:ff:ab:34:3b:89:95:1f:df:57:45:
54:a4:5d:4c
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYiWxqmThZEvuFoD7RBZvVxUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0
MjAzYjQwHhcNMjMwNjA3MTY1MzAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzU0YTMzY2RmNjcxNjVjNTNjMWQ2ZTgwODZiNTU2MTE4YmVjNDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzwWk5C9/ceQu5GCYJVArVOWJQNu
mTINRLpJ/dVpVR8F+gNAyaaw2LcP+d/X9iBKQMMMl6TcF/+skcz46cHMGC/lYbU7
UXf/Zm8tQFLWNGKM2V0seK4L/I7C/Cim1PAEulbd9mUkgmKZ/INDXQT/nLszKrjv
Rq+RYq2lNpDDT/0o5pCR6EPLEE0Up8UhxuNvJ6eb6MG1jsKzSkLkByTR67np/cl3
8N8gGQfHlKlEXq5hJrxyXdKNPhPqsrbxcaPW08LbQhBk5dAvbQFdQ78JpJxfIcuC
wYdqqbRY1ktfGKrqVOc0CCNsoCnJ6MKVnIIQEindombmmLEVbTBG3mL1XQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFMdUozzfZxZcU8HW6AhrVWEYvsRVMB8GA1UdIwQY
MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt
MTY2OTljOTZkZDVlLzEveDFTalBOOW5GbHhUd2Rib0NHdFZZUmkteEZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl
LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQALgglAwQA
bfgsAwQAvIK2AwQAw9M1MA0EAgACMAcDBQAgARRoMA0GCSqGSIb3DQEBCwUAA4IB
AQB7rHXlWg4e6qVTWlJq09w+IcLkNswH7AF7u/D3a3+psnCd1+SFjUt7+/WULMtr
TWqEQ1zX9qwMxJQw6zywET16DlldeodXBharGBW7RnLcNtYblsUaubN48fmD4TOg
KV8hfe4+e/B54Z+aGjlgRvR5kOgAZRea2MvKeUOui2IqFcPqykoL2a/0PIH75l2O
yGDFrd2KQesxTjJb800GU3SRbamkPKm+brNwvYKGhMDRq/fUgVRm8L+IZ6EnOupc
9gtIbgP8mdOc3t0mP4rWU7spuF+6LiPCDm92N/BVInXMxF2WhxFDti6GWnyRJwy0
e59qBP+rNDuJlR/fV0VUpF1M
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:57 2024 by rpki-client on console-fra.rpki-client.org