Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/ICbsPKkR7XPr6OsSE7Bord6gU4A.roa
File: ICbsPKkR7XPr6OsSE7Bord6gU4A.roa (raw, json)
Hash identifier: YgSbWBxjqeaE2hhsP09wTqg4VUbnqkrIHsnCbdFv74Q=
Subject key identifier: 20:26:EC:3C:A9:11:ED:73:EB:E8:EB:12:13:B0:68:AD:DE:A0:53:80
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 0185703065B387B8768B3BC17FB3084B3B5D
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/ICbsPKkR7XPr6OsSE7Bord6gU4A.roa
Signing time: Mon 02 Jan 2023 01:54:58 +0000
ROA not before: Mon 02 Jan 2023 01:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41313
IP address blocks: 195.228.11.0/24 maxlen: 24
84.1.240.0/24 maxlen: 24
84.1.240.0/21 maxlen: 21
84.1.246.0/24 maxlen: 24
84.1.44.0/22 maxlen: 22
84.1.42.0/23 maxlen: 23
84.1.44.0/24 maxlen: 24
195.228.43.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:65:b3:87:b8:76:8b:3b:c1:7f:b3:08:4b:3b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 2 01:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2026ec3ca911ed73ebe8eb1213b068addea05380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3a:7e:7d:92:4c:d7:ec:64:9f:a8:10:e6:3f:
1b:b1:2e:3e:01:f0:b0:67:f9:80:ff:80:aa:a4:b9:
78:1d:45:39:c1:67:6e:a8:26:98:f5:21:b3:b3:e1:
20:21:ad:ca:f2:d2:75:d3:59:47:a0:ff:02:dd:be:
f1:95:3e:d6:24:2a:39:51:ee:6f:77:e7:09:4f:42:
78:75:0e:5f:dd:6d:74:77:22:3c:ed:71:6d:20:c6:
26:af:39:65:0d:48:27:d8:70:4b:6d:74:3f:a6:1e:
2f:3c:24:9f:58:82:fb:c7:93:be:0e:14:93:47:2a:
db:56:f0:42:2a:27:2e:b2:5f:e2:3c:1c:64:cf:1f:
38:65:cb:a3:cc:48:60:f7:4d:47:ac:54:e7:28:a8:
40:58:65:dc:5b:57:d2:72:55:da:e8:5b:19:ca:5c:
8b:6b:89:b0:f7:87:5c:77:67:7a:94:14:9a:d4:00:
a7:9b:d8:85:45:cd:6c:cb:f4:43:9e:b2:dd:b5:b5:
53:94:f7:d9:dc:fc:aa:26:b7:fb:f9:f8:bd:e3:69:
25:2b:64:6f:b8:73:5d:1d:78:3b:30:3f:78:c2:29:
49:04:b4:c4:86:2d:90:e4:89:84:08:b1:1b:47:59:
bb:e0:73:dd:19:09:df:bf:c7:58:86:38:2e:6c:da:
3c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:26:EC:3C:A9:11:ED:73:EB:E8:EB:12:13:B0:68:AD:DE:A0:53:80
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/ICbsPKkR7XPr6OsSE7Bord6gU4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.1.42.0-84.1.47.255
84.1.240.0/21
195.228.11.0/24
195.228.43.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:6e:60:69:40:7f:80:2a:41:24:36:7e:dd:9f:8f:f8:eb:f1:
31:c5:b2:8f:4c:b6:68:c8:3e:09:4f:d4:be:79:04:d2:46:b8:
c6:01:ed:91:25:a6:18:1b:10:1c:b0:ed:14:b6:ef:66:ad:2d:
f5:8a:4f:64:d5:61:49:c2:79:8f:9d:3d:d6:f4:66:8b:04:59:
b6:85:44:d5:ad:c4:8a:8f:e2:9e:4b:43:51:00:31:f7:d1:35:
22:b7:bb:ce:31:7f:b7:19:91:d6:4c:5f:dc:d7:c3:e5:9a:ba:
7a:7b:e9:14:3b:9a:73:f1:80:6b:f0:cb:f3:2c:1d:a2:fd:99:
e1:19:e0:6f:59:44:8b:2b:44:7e:2b:b2:d2:de:b6:37:db:aa:
8e:d6:e8:10:5f:a2:15:cb:a4:4d:b1:4d:e6:79:cd:4d:37:a0:
d4:a8:32:13:b7:66:67:17:b8:af:9d:cc:66:7f:15:9a:29:9f:
e9:fa:1c:de:36:23:9d:8a:56:48:fc:ce:35:87:ab:61:ab:21:
1e:46:c5:10:f7:f8:6c:2e:bd:3a:80:fb:9a:5a:89:54:5d:dd:
63:c9:da:00:1f:25:76:94:3b:90:50:81:ec:4d:26:fd:cf:71:
0b:7c:e2:d0:e1:2d:85:e9:0e:f5:ee:e2:6c:a7:17:f0:19:0d:
a5:83:52:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:04 2024 by rpki-client on console-fra.rpki-client.org