Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/SOXryjPLO4a-xCCWxeOJZK9lN4g.roa
File: SOXryjPLO4a-xCCWxeOJZK9lN4g.roa (raw, json)
Hash identifier: gYBjmfktDHN0gnnL+tbDFjr2skGh93WmOBRx8jBRUkM=
Subject key identifier: 48:E5:EB:CA:33:CB:3B:86:BE:C4:20:96:C5:E3:89:64:AF:65:37:88
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 018570305DEBE42B78881CAFFDE48621BBA6
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/SOXryjPLO4a-xCCWxeOJZK9lN4g.roa
Signing time: Mon 02 Jan 2023 01:54:55 +0000
ROA not before: Mon 02 Jan 2023 01:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 195.228.112.0/24 maxlen: 24
195.228.4.0/24 maxlen: 24
84.1.236.0/24 maxlen: 24
195.56.199.0/24 maxlen: 24
84.2.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:5d:eb:e4:2b:78:88:1c:af:fd:e4:86:21:bb:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 2 01:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48e5ebca33cb3b86bec42096c5e38964af653788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:20:fe:ff:29:98:12:56:a5:9a:13:ce:36:e9:
7b:d0:2d:57:63:83:62:30:db:30:87:5b:1a:8a:db:
59:bb:bb:6a:6a:e8:d4:06:24:c0:dd:d1:a2:be:c7:
49:58:38:54:7e:b1:4a:e2:e9:8f:a5:b5:d4:c1:24:
8a:f1:ea:a2:ae:2b:a8:72:51:5c:00:19:01:28:a8:
a7:91:1a:c1:51:75:57:f9:23:d8:a5:80:39:db:73:
c7:9c:68:35:4e:07:d2:b3:ac:8d:1e:f2:c4:c5:b4:
52:8c:5d:df:64:fc:fd:1c:2b:fb:fe:2d:a1:44:46:
f2:38:9f:de:77:55:93:15:dd:00:cc:62:41:0e:0b:
05:99:8f:c8:b4:0b:95:9a:f4:e0:57:12:6a:9f:42:
70:8f:d8:f0:ef:00:9e:08:8e:59:c4:83:48:1d:ca:
5c:b8:9e:ec:3d:4c:f8:30:6c:6b:d1:60:2c:47:fb:
88:5f:4d:7c:a9:4e:3b:55:bd:4e:81:2f:8f:54:be:
52:5a:7c:e4:19:80:c1:34:ab:15:6d:53:79:ac:03:
bf:82:c6:a2:e2:2f:2c:f0:17:3c:ff:43:73:af:a3:
5b:fe:17:e9:a0:e1:56:88:66:7d:e4:90:08:d0:9e:
61:47:62:2a:50:4c:70:7f:76:af:56:01:f7:e4:a6:
56:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E5:EB:CA:33:CB:3B:86:BE:C4:20:96:C5:E3:89:64:AF:65:37:88
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/SOXryjPLO4a-xCCWxeOJZK9lN4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.1.236.0/24
84.2.54.0/24
195.56.199.0/24
195.228.4.0/24
195.228.112.0/24
Signature Algorithm: sha256WithRSAEncryption
34:4a:09:6d:ed:17:06:87:2e:47:d8:0f:6a:2f:8a:cf:9e:19:
6f:38:10:74:3e:65:7b:bf:2d:ad:e5:d3:83:32:d2:9f:b3:05:
26:57:fe:96:44:92:0f:ae:ac:69:2b:11:8b:6c:25:73:e9:fa:
7e:b7:07:50:d5:64:da:e3:3f:79:cd:a3:09:3e:25:84:88:0d:
d5:12:38:04:a1:06:e7:ae:97:e1:8e:7f:48:a6:32:6d:b1:9a:
64:51:7c:ae:7d:78:1f:82:52:66:60:35:f7:df:3a:50:7f:08:
a6:62:f3:7d:4e:f8:b0:f8:70:35:15:b2:4c:eb:39:cd:d0:87:
34:57:d7:0c:2c:17:d8:f7:d8:27:ec:6b:8b:c9:2b:25:58:9d:
0f:a6:2b:e3:cb:d7:d6:b5:ec:b3:99:48:70:a9:84:68:63:62:
a9:75:43:ce:17:99:e6:9b:6a:96:86:8b:30:a0:12:21:2d:81:
b3:79:75:07:ac:cd:b1:b7:02:77:09:85:fd:7d:b6:ce:fd:82:
5b:6c:12:56:db:53:b0:de:b4:a7:b2:cf:41:f3:ba:ef:f7:f4:
c0:71:01:0b:8a:e6:86:6c:5c:2b:1b:72:97:11:cf:bf:51:4e:
eb:d9:ac:3c:48:7e:18:a8:2e:f0:13:e1:45:d7:bb:3f:b5:01:
7a:86:56:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:51 2024 by rpki-client on console-ams.rpki-client.org