Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ix1iYCRPA8yVXtBHOq7G361v2Sw.roa
File: ix1iYCRPA8yVXtBHOq7G361v2Sw.roa (raw, json)
Hash identifier: ySjWhwIUg0dS7oHqGYA/WNi7C3QWLNm4/2193219t94=
Subject key identifier: 8B:1D:62:60:24:4F:03:CC:95:5E:D0:47:3A:AE:C6:DF:AD:6F:D9:2C
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018C15EA8C14BC8965A4FE9AE5615B6CD688
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ix1iYCRPA8yVXtBHOq7G361v2Sw.roa
Signing time: Tue 28 Nov 2023 12:32:22 +0000
ROA not before: Tue 28 Nov 2023 12:32:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 159.255.32.0/21 maxlen: 24
188.253.12.0/22 maxlen: 22
82.115.4.0/22 maxlen: 24
188.214.236.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:15:ea:8c:14:bc:89:65:a4:fe:9a:e5:61:5b:6c:d6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Nov 28 12:32:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b1d6260244f03cc955ed0473aaec6dfad6fd92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:26:22:48:26:cc:d5:80:56:0b:56:93:db:24:
48:c1:e8:d7:04:62:38:4f:f4:a7:ac:0e:0a:7c:86:
65:93:1a:13:8b:31:6b:00:b7:a5:3c:59:42:76:21:
41:d7:80:a3:91:aa:c7:b0:fd:97:0e:9f:f7:1a:9b:
b0:13:2d:b9:3c:7f:71:33:92:18:22:6e:d1:68:8d:
08:d2:bf:ce:a7:4f:78:52:cc:d7:c2:ee:82:9a:c5:
f1:1c:6e:34:bf:d9:d2:d8:5c:d1:91:ef:58:3f:d9:
d8:53:2b:3b:ff:f7:0c:09:76:6e:d3:aa:19:a8:7e:
4b:76:af:86:ca:59:af:7b:ea:0e:fa:1e:45:d3:e7:
7b:c7:a8:18:10:72:13:73:b9:3b:fc:54:ef:4a:ca:
e4:eb:8a:69:b6:dd:65:bd:0a:62:a8:0d:86:65:29:
2f:e3:3e:49:51:2b:ee:16:73:d7:61:c5:88:02:97:
37:a5:71:0e:26:68:0a:ee:7d:e0:5e:da:1a:fb:7c:
2c:0d:f1:e5:ed:dc:5e:33:64:1d:33:c9:96:8a:ec:
92:17:de:49:2a:90:e2:c3:7f:4c:91:34:5c:53:5a:
e6:ff:4c:50:15:23:c6:2e:e7:3b:79:3b:76:61:2e:
52:01:b8:5d:77:6b:c5:3b:3f:bb:dd:af:37:1b:81:
b3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1D:62:60:24:4F:03:CC:95:5E:D0:47:3A:AE:C6:DF:AD:6F:D9:2C
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ix1iYCRPA8yVXtBHOq7G361v2Sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.4.0/22
159.255.32.0/21
188.214.236.0/22
188.253.12.0/22
Signature Algorithm: sha256WithRSAEncryption
39:ed:0b:8b:6a:4d:22:21:54:78:75:0e:2e:27:64:8d:5c:e0:
64:60:f3:2b:cb:b0:e2:47:8b:b1:ec:3d:5c:69:4f:e1:2c:c6:
9d:d6:e7:a5:3b:4d:e9:2f:c4:c9:23:cb:63:20:8e:50:1e:f9:
ff:0d:8c:63:cb:c8:a4:8f:2e:95:97:da:06:1a:e4:08:e3:6a:
62:c5:ce:8a:79:a6:47:74:96:e4:eb:a3:24:75:37:da:bd:bd:
ca:de:46:0e:37:42:b6:12:2f:96:13:6e:8e:60:8b:a1:12:63:
39:8c:c2:7f:9c:b2:f9:04:8a:df:58:92:98:31:74:7e:ff:58:
2e:38:ad:19:fc:9e:44:09:d7:ca:ca:b7:9d:8a:e3:25:f7:cd:
88:ce:6b:77:b1:0e:dc:1d:eb:2a:99:f4:6c:25:ed:51:23:46:
f9:3f:23:f2:72:de:10:98:18:40:68:ef:cb:ec:aa:1f:07:6c:
0a:df:cf:a5:0e:91:50:4b:7b:3f:87:0a:c9:7c:3c:b5:b3:1a:
df:d2:08:2b:46:a9:ba:d0:02:f1:5e:15:3a:62:a1:de:19:db:
03:2a:cf:3f:7a:66:6a:01:e4:44:1c:b6:e1:83:15:00:45:c7:
3c:3e:14:fa:88:be:c5:d8:2d:20:0f:69:78:75:15:f3:74:e6:
17:61:f8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:48 2024 by rpki-client on console-fra.rpki-client.org