Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/sbOW-uKWlxeLzaKeWgFFdPuaBOc.roa
File: sbOW-uKWlxeLzaKeWgFFdPuaBOc.roa (raw, json)
Hash identifier: QEwx1PweC0Qptj7OD1DzJa0NNNxRdJEqiSgk1HxgxAs=
Subject key identifier: B1:B3:96:FA:E2:96:97:17:8B:CD:A2:9E:5A:01:45:74:FB:9A:04:E7
Certificate issuer: /CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Certificate serial: 018CC42499F2F5020DD6E9623542B7CB0774
Authority key identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/sbOW-uKWlxeLzaKeWgFFdPuaBOc.roa
Signing time: Mon 01 Jan 2024 08:29:42 +0000
ROA not before: Mon 01 Jan 2024 08:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21343
IP address blocks: 195.234.112.0/22 maxlen: 24
91.223.19.0/24 maxlen: 24
2a02:2278:ff00::/40 maxlen: 56
2a02:2278:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 15 May 2024 09:44:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:99:f2:f5:02:0d:d6:e9:62:35:42:b7:cb:07:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Validity
Not Before: Jan 1 08:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1b396fae29697178bcda29e5a014574fb9a04e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:61:e3:c5:5e:0a:97:97:11:c4:e3:68:41:61:
47:8d:53:d3:08:f3:be:36:7a:8d:56:78:08:4c:e4:
58:f0:34:10:b6:17:6a:01:2c:81:32:cd:0d:81:be:
1b:2c:c9:e7:e7:14:f3:69:69:61:b1:00:25:6a:f0:
ad:c6:a0:35:f7:6f:9b:2f:01:41:44:d7:1e:6b:02:
00:c8:61:d3:0e:cf:f0:9d:85:37:bb:cb:88:7d:67:
17:80:5f:d0:c6:db:25:e7:07:17:29:e6:17:5c:b7:
e9:ff:ca:1d:b4:57:b6:87:16:79:39:21:04:bb:04:
2c:1d:93:9c:50:eb:75:4c:36:c5:52:f5:28:24:74:
ed:cd:f7:f2:76:71:65:2e:8e:bd:02:40:54:e6:89:
86:da:93:3d:1b:3c:34:16:65:97:da:cd:70:46:3a:
2f:96:6c:53:e7:5d:52:35:b3:bb:bb:eb:54:fe:f3:
4f:22:a8:7f:71:2c:76:63:05:59:f0:43:62:f3:09:
cf:f5:bf:47:4f:a1:3f:72:81:34:38:bb:f2:49:a9:
99:6b:9e:50:26:e2:c2:a5:e5:3d:6c:88:ba:ae:ae:
9c:97:86:08:f7:2a:49:4d:e4:10:d0:f8:bf:c6:92:
cc:de:44:56:f8:e7:c6:cd:6c:b9:e5:fa:72:27:01:
63:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B3:96:FA:E2:96:97:17:8B:CD:A2:9E:5A:01:45:74:FB:9A:04:E7
X509v3 Authority Key Identifier:
keyid:DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/sbOW-uKWlxeLzaKeWgFFdPuaBOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.19.0/24
195.234.112.0/22
IPv6:
2a02:2278:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
c1:7e:5e:69:7d:aa:24:27:6f:f8:2e:3b:1e:29:0a:51:00:02:
cb:7c:5d:7b:fa:67:40:25:d0:97:05:df:10:28:e3:5c:ad:05:
1b:69:e4:91:fc:ed:2d:f0:e6:46:73:3c:d8:7d:6a:a0:66:da:
77:8a:64:93:84:1a:00:78:cb:0e:b1:61:e7:83:92:4c:dc:5f:
a4:06:a9:4e:6f:59:a7:fe:c5:6c:fb:8a:61:fe:2e:a0:4d:b0:
cc:41:5b:28:f9:d9:2a:08:9b:0b:e5:f1:11:b8:d6:fa:27:e8:
54:0a:5b:ae:23:c8:27:10:d1:8f:a6:a3:d8:95:96:2d:9e:38:
02:9d:ca:74:1e:10:21:c8:2e:3c:37:a6:bf:63:df:3e:b9:a5:
ca:23:47:2f:6c:02:95:55:c9:6a:79:92:de:d5:82:4f:d8:c0:
63:5b:64:54:74:f4:33:0b:59:4e:7f:da:bb:54:cd:1e:30:ec:
49:f9:ab:1a:96:ec:7a:0b:03:bc:39:28:43:0c:46:d6:67:f7:
b2:f8:f9:55:76:f7:55:b0:cf:9a:74:35:1f:e0:a2:1d:1d:bb:
38:aa:02:a0:da:fc:4c:a8:42:55:62:d9:dd:d5:c3:23:ef:5a:
90:3b:0e:32:49:15:31:99:c7:f7:3d:7d:f3:b6:84:21:58:77:
93:18:56:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 12:48:15 2024 by rpki-client on console-ams.rpki-client.org