Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/30IQFQPQ_-vXetusy1ruYB_xT2g.roa
File: 30IQFQPQ_-vXetusy1ruYB_xT2g.roa (raw, json)
Hash identifier: YberdEOq6DgapzCaLIUUIvrsJj99U4maLhnJIAAXGdg=
Subject key identifier: DF:42:10:15:03:D0:FF:EB:D7:7A:DB:AC:CB:5A:EE:60:1F:F1:4F:68
Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Certificate serial: 0189500D39D9FBB9A7E7C689370C67B87051
Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/30IQFQPQ_-vXetusy1ruYB_xT2g.roa
Signing time: Thu 13 Jul 2023 16:19:51 +0000
ROA not before: Thu 13 Jul 2023 16:19:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8258
IP address blocks: 195.64.224.0/22 maxlen: 22
195.64.228.0/24 maxlen: 24
195.64.254.0/23 maxlen: 23
2a02:2540::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 16 Aug 2023 14:45:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:50:0d:39:d9:fb:b9:a7:e7:c6:89:37:0c:67:b8:70:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Validity
Not Before: Jul 13 16:19:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df42101503d0ffebd77adbaccb5aee601ff14f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:92:91:c2:aa:3e:25:5b:cd:a6:b3:d7:65:94:
96:85:2d:af:a9:c2:76:b7:ff:13:37:39:ab:ef:b0:
ea:e0:53:64:0f:f1:85:a1:68:f1:57:43:15:c1:11:
67:4a:07:e0:ea:d9:0d:19:f2:23:ed:61:fb:c2:01:
c3:da:10:4c:1e:f3:50:d2:8f:61:58:d0:fd:2f:06:
5d:2f:62:cb:51:a4:59:fe:42:e9:03:ed:01:a7:bc:
a3:6c:8c:d7:0f:e2:86:01:7f:b3:13:33:5d:a1:1d:
2d:f5:ff:02:80:d4:7f:cb:19:67:5c:98:aa:5c:5a:
7e:eb:00:ee:df:00:30:86:78:e0:d2:d4:9d:4c:24:
0d:08:7b:41:6a:78:65:79:48:2f:64:f4:4b:e2:34:
a5:07:de:b0:07:15:09:ad:5d:da:19:1f:80:a5:b7:
62:f9:8b:4c:ad:76:11:bb:1b:1a:5e:fe:0f:ca:14:
a2:d6:53:4c:05:85:f2:2f:7e:b0:10:6a:d7:5a:40:
fd:2e:44:5c:e9:1e:b6:1e:4c:0d:35:b4:ff:0d:80:
3d:30:3c:95:c3:3b:22:a2:23:30:05:24:b2:a7:83:
67:2f:5e:59:62:38:21:7b:d4:8a:30:40:74:9c:73:
26:32:61:d7:d8:d6:3a:7d:4e:27:93:4d:c0:cd:ad:
cf:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:42:10:15:03:D0:FF:EB:D7:7A:DB:AC:CB:5A:EE:60:1F:F1:4F:68
X509v3 Authority Key Identifier:
keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/30IQFQPQ_-vXetusy1ruYB_xT2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.224.0-195.64.228.255
195.64.254.0/23
IPv6:
2a02:2540::/32
Signature Algorithm: sha256WithRSAEncryption
51:94:f3:e9:29:0f:61:86:50:6d:f3:2e:a7:c4:0d:5e:bb:a4:
3c:98:8b:d2:79:17:6f:65:ad:6b:9f:d2:6c:c1:1b:0c:99:51:
bf:37:f9:b5:5e:2d:25:7c:91:cd:46:dd:5b:b2:ca:ac:40:11:
86:7e:e5:bf:7a:a1:62:e9:3b:e8:59:10:d0:50:38:3b:eb:38:
11:b2:f0:e3:39:27:3f:ab:62:1c:d9:5d:62:f3:17:95:b2:9c:
1f:ef:87:a8:f3:3d:e0:a8:64:c2:51:b7:fc:0d:0d:20:f6:a7:
df:ab:dd:48:a8:ea:51:bd:9a:b2:1b:82:b9:ee:84:3e:86:5c:
46:55:48:b6:05:58:7c:fc:ef:ea:a7:1a:6c:dd:aa:78:af:0b:
9a:6c:be:ab:74:cf:48:93:fe:7e:80:ad:ea:c5:fd:92:c5:43:
f8:78:85:75:eb:24:92:08:0e:72:c2:5c:f3:ea:f4:a9:42:f7:
d6:d7:4b:bb:79:58:5c:d6:70:9d:f1:83:95:a3:8a:3a:11:ee:
51:82:44:bb:75:e5:09:56:8e:e3:37:08:1b:16:a4:f9:56:a9:
89:45:5e:2d:08:ac:f1:e7:fd:b0:b9:4d:2d:4b:a6:aa:72:ac:
3f:39:f4:08:86:3c:b4:39:19:16:3f:08:78:4a:a1:13:11:99:
d5:86:d8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:52 2024 by rpki-client on console-ams.rpki-client.org