Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/mK1CxbV0bXHOXQ21oCOJmNN2sKc.roa
File: mK1CxbV0bXHOXQ21oCOJmNN2sKc.roa (raw, json)
Hash identifier: e8JLWHB+lPHYb36lUxOxF13Bqv/82GuaNs/fgQQa5OM=
Subject key identifier: 98:AD:42:C5:B5:74:6D:71:CE:5D:0D:B5:A0:23:89:98:D3:76:B0:A7
Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial: 018AE224D72CA096A5A62E1460C6B4B6665D
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/mK1CxbV0bXHOXQ21oCOJmNN2sKc.roa
Signing time: Fri 29 Sep 2023 18:12:59 +0000
ROA not before: Fri 29 Sep 2023 18:12:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62563
IP address blocks: 188.212.39.0/24 maxlen: 24
176.126.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e2:24:d7:2c:a0:96:a5:a6:2e:14:60:c6:b4:b6:66:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Validity
Not Before: Sep 29 18:12:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98ad42c5b5746d71ce5d0db5a0238998d376b0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1c:16:77:1d:98:b9:93:70:dc:b3:c5:8e:a9:
e5:ac:01:3c:ce:c2:2e:8b:65:f0:23:4c:82:9c:de:
d7:22:d5:c0:aa:db:fa:64:07:2e:47:40:39:18:34:
b0:ca:ef:eb:77:8d:04:2c:b0:a6:02:40:4c:d7:5d:
97:65:eb:ad:22:25:9c:78:ab:a2:dc:a6:a2:b3:09:
0f:d8:41:d8:8c:e3:38:07:3d:9d:d7:d2:95:02:f7:
00:f5:5f:90:68:ba:04:1d:39:72:3b:1a:09:fa:30:
bb:ce:cd:a6:80:07:eb:7e:36:fb:79:36:2d:1c:75:
fd:dd:26:ce:a4:77:4f:a6:df:c6:5f:3c:d6:51:ab:
f4:6c:33:a0:6a:18:2c:0e:97:c9:5a:30:5d:4e:95:
fa:e0:4e:f2:cf:05:ed:84:0d:31:10:9c:b5:0d:44:
5d:d0:48:16:d7:99:0d:61:9c:c8:36:64:75:76:1f:
50:2c:49:b8:41:c1:f7:c1:7f:fe:5d:08:5f:ba:91:
c2:fa:be:86:5c:0c:94:5e:f7:da:31:8f:a0:fe:c7:
7c:5a:de:1a:14:59:5e:c1:af:04:2b:d5:55:ae:a9:
39:ae:d5:33:f7:50:8f:80:0f:7a:b8:0d:cb:42:3c:
b9:b0:c6:48:76:2d:70:9f:2e:bf:f5:80:ad:bd:73:
10:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AD:42:C5:B5:74:6D:71:CE:5D:0D:B5:A0:23:89:98:D3:76:B0:A7
X509v3 Authority Key Identifier:
keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/mK1CxbV0bXHOXQ21oCOJmNN2sKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.222.0/24
188.212.39.0/24
Signature Algorithm: sha256WithRSAEncryption
69:b7:f2:5b:19:7d:bd:7b:58:a7:c0:50:40:fb:72:64:cc:7a:
ee:e9:45:11:4f:10:22:7b:6b:50:00:3f:af:4d:61:43:3c:e8:
45:b7:b5:3e:6b:2b:6b:d5:68:98:c3:32:21:5d:59:67:94:8a:
0f:77:53:be:15:af:ee:23:b0:6c:ce:84:90:ca:19:63:fd:67:
c7:b4:91:53:8b:8a:47:15:07:c7:76:fc:0a:2c:5a:8e:d3:c0:
9b:d4:38:44:95:fb:a6:0c:5c:c3:04:1a:06:3b:34:b9:b1:2f:
42:98:6f:95:9a:97:57:99:cf:27:d9:8b:73:74:08:95:75:c8:
d5:1e:ae:7d:fa:90:50:b2:77:88:cd:38:d7:dd:76:7b:1b:01:
8c:00:dd:43:2d:e3:c6:9c:02:b0:4b:28:67:d2:87:30:9e:28:
f5:de:82:9b:be:4f:f7:2d:d7:84:b0:a0:26:49:ad:1f:8f:6e:
f4:ac:ec:5d:d1:83:01:a5:27:22:4c:5b:5e:ca:f6:af:74:03:
27:83:cd:f9:c6:7b:ed:54:2c:d7:93:4e:c4:2b:fd:c2:8d:62:
0e:f0:9c:38:9d:cd:2b:1d:7c:5c:91:47:8a:9c:85:a3:10:ea:
b8:dc:48:bd:5f:d5:69:7f:71:49:37:c6:e8:60:c1:86:c1:2f:
bc:1a:4b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:26 2024 by rpki-client on console-fra.rpki-client.org