Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/iq1ar5SA7Uqi0lvCrtOSthLGluE.roa
File: iq1ar5SA7Uqi0lvCrtOSthLGluE.roa (raw, json)
Hash identifier: LQsGCmaMa5H8r3voT9J7IXPlnG3e+oVj8uiu4EJ2bsM=
Subject key identifier: 8A:AD:5A:AF:94:80:ED:4A:A2:D2:5B:C2:AE:D3:92:B6:12:C6:96:E1
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 01857030623E34C265DF5A71C33095A9D663
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/iq1ar5SA7Uqi0lvCrtOSthLGluE.roa
Signing time: Mon 02 Jan 2023 01:54:57 +0000
ROA not before: Mon 02 Jan 2023 01:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29582
IP address blocks: 188.6.241.0/24 maxlen: 24
195.228.1.0/24 maxlen: 24
84.1.154.0/24 maxlen: 24
84.2.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:62:3e:34:c2:65:df:5a:71:c3:30:95:a9:d6:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 2 01:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8aad5aaf9480ed4aa2d25bc2aed392b612c696e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:21:6f:43:69:ed:52:9e:b7:a3:1f:88:a6:7f:
0d:17:4f:3e:6e:76:cb:21:ca:d3:61:e1:a1:f9:ec:
d9:f5:c5:98:7e:49:0d:b8:41:ac:81:8c:01:5f:a1:
ba:18:db:95:23:72:0c:9b:7b:39:94:f7:40:0c:3d:
fe:79:5c:77:fb:22:ec:23:ce:d8:ca:dd:87:4e:a7:
1f:fd:41:ea:b3:c8:93:91:ef:cd:7e:a1:5f:9d:be:
eb:fa:30:db:ec:0c:c4:07:68:38:4b:b7:73:8a:38:
1b:ea:55:88:48:5c:a8:a8:5a:d3:b9:d5:c9:33:15:
b6:c7:09:ad:4a:57:2b:e9:49:1e:69:5f:8e:01:61:
10:1c:71:e6:2c:73:5b:fa:ab:4a:2a:ce:65:74:fb:
e6:ec:91:54:52:1f:18:b5:15:bf:e9:12:6a:66:74:
28:f1:97:75:69:c0:e3:31:6a:d3:aa:3b:e5:e8:d4:
47:e9:9d:da:6e:44:33:75:4b:02:25:39:94:fa:88:
31:51:f8:b3:92:cb:3c:bc:64:74:d1:1d:32:06:44:
87:1d:01:ad:05:3f:e8:4f:af:ba:51:17:3c:4a:08:
fe:be:73:e9:a1:ed:34:7d:31:db:62:57:3a:f8:72:
c3:e6:c6:41:3a:4f:af:76:62:4e:4d:51:36:3c:bc:
59:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AD:5A:AF:94:80:ED:4A:A2:D2:5B:C2:AE:D3:92:B6:12:C6:96:E1
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/iq1ar5SA7Uqi0lvCrtOSthLGluE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.1.154.0/24
84.2.74.0/24
188.6.241.0/24
195.228.1.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:6d:6e:bd:74:f2:5d:df:78:8a:9d:3b:eb:b0:e7:2f:c8:12:
9a:48:b7:2e:d5:0c:f5:b1:f9:d1:e7:11:f6:4b:ba:8a:0f:e4:
30:81:de:9b:3b:38:50:15:c9:9c:0a:60:69:0d:9e:8f:1d:cc:
a1:cf:5a:dc:fd:fe:f4:0a:0c:b9:46:89:29:bd:01:f7:f7:81:
d8:05:ca:ae:d7:61:04:e5:5f:53:7e:cc:0c:0b:23:a6:aa:7b:
d5:03:56:f1:2e:5e:92:13:ed:4e:b1:8d:1a:f6:d4:5f:a5:19:
e5:67:4a:3b:c9:57:59:f1:8c:bf:3e:94:2b:ff:f4:29:4d:f6:
5c:1b:83:7a:22:f5:5b:3e:9a:f8:78:a2:a0:f5:16:6a:fa:fc:
9d:bd:4e:94:55:8c:9e:e9:70:8a:c8:86:d0:e9:fc:5f:0d:5e:
41:94:f4:63:60:b5:6f:2c:fe:3f:50:04:e6:79:83:63:37:0c:
35:d8:a9:33:e3:84:bf:2e:b4:e3:4a:fb:d0:1e:ab:63:d5:b6:
e4:ee:17:53:5e:0a:8c:eb:e4:d0:25:10:57:e6:89:f5:0a:42:
aa:00:80:a6:15:e1:48:db:24:8d:a6:74:4e:62:8c:64:64:4d:
7d:a3:18:e3:35:ef:98:25:11:2c:4d:84:13:44:8c:4a:cd:24:
8e:08:76:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:51 2024 by rpki-client on console-ams.rpki-client.org