Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/j71MxV_xTZkDsZELT261fSwvAMQ.roa
File: j71MxV_xTZkDsZELT261fSwvAMQ.roa (raw, json)
Hash identifier: Jj4uJ+9c9LXeKwVhzm6272ACdf9TZMj6w+LvtuHkUxI=
Subject key identifier: 8F:BD:4C:C5:5F:F1:4D:99:03:B1:91:0B:4F:6E:B5:7D:2C:2F:00:C4
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 0188D84FBC8B6BC28FB80E1AA073E1837763
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/j71MxV_xTZkDsZELT261fSwvAMQ.roa
Signing time: Tue 20 Jun 2023 10:18:04 +0000
ROA not before: Tue 20 Jun 2023 10:18:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 195.191.102.0/23 maxlen: 24
37.148.220.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d8:4f:bc:8b:6b:c2:8f:b8:0e:1a:a0:73:e1:83:77:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: Jun 20 10:18:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fbd4cc55ff14d9903b1910b4f6eb57d2c2f00c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:52:c6:88:63:1a:35:02:f9:c4:da:1f:a4:b8:
c7:28:eb:29:64:93:02:fe:81:da:31:af:c5:4b:ff:
c1:2c:d3:2a:f2:59:ae:d0:03:8d:18:fc:c1:28:7f:
20:57:cf:80:2d:26:5f:65:e1:3f:e1:64:58:6e:fb:
ba:14:57:3c:d6:82:6a:6e:7e:94:e0:0e:e0:f1:48:
75:da:6a:aa:ac:1e:93:2c:a2:06:7b:61:c9:50:41:
5d:cb:75:5e:8e:92:2d:a9:4a:89:a9:63:8e:64:25:
61:7d:e6:8b:ec:b0:20:c0:67:42:c1:cc:0d:97:f1:
37:c8:9f:9b:22:25:b3:7f:e3:99:58:41:3d:cb:b9:
4b:39:aa:d2:4a:26:d0:12:bf:b4:fd:b9:20:af:99:
d6:6c:7c:84:99:b3:85:89:17:c3:63:80:69:8d:1b:
07:69:49:38:71:83:92:d5:d2:ad:e6:07:6f:21:85:
2b:4d:5b:f2:ec:0a:26:94:5d:62:7a:24:eb:66:cd:
f7:dd:9b:4f:5a:16:c0:16:90:50:e4:00:1f:59:5f:
c0:53:9c:3f:61:cb:59:07:0d:82:be:90:49:7c:a3:
92:09:c9:23:f1:df:06:55:bd:22:e9:30:df:63:03:
23:70:39:a6:0b:30:97:1d:90:c2:82:74:fb:3e:e1:
f1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BD:4C:C5:5F:F1:4D:99:03:B1:91:0B:4F:6E:B5:7D:2C:2F:00:C4
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/j71MxV_xTZkDsZELT261fSwvAMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.220.0/23
195.191.102.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:2d:96:c9:2b:bf:93:a4:50:be:4e:de:da:3c:c0:0e:fc:3b:
bd:f2:bb:ca:db:ad:40:72:91:76:a6:82:3c:ce:ed:06:fd:99:
35:55:64:0d:9c:b0:44:a7:24:3e:bc:19:d2:74:28:0a:fa:8b:
b2:bb:f3:b3:0c:7d:26:5f:09:44:3d:7b:54:77:4e:84:29:c8:
41:4b:3b:18:87:2e:c3:98:d0:07:58:6c:04:79:88:e4:b7:e8:
43:c2:ae:20:57:cc:c3:98:68:fb:82:16:c2:50:29:77:7d:e2:
bd:33:d9:5f:ce:eb:81:f6:2f:fe:f6:2d:a5:4b:9c:69:30:c5:
32:a9:09:b1:17:1e:5c:4e:f7:d6:6d:83:3b:af:a7:d8:a2:36:
d3:b8:60:fd:bc:b1:46:86:57:25:26:c6:65:6b:5a:c6:80:a5:
e9:47:2b:7c:6d:e3:94:e4:56:a9:a9:58:46:f5:a0:9f:38:c6:
d0:8d:6c:17:1c:e8:df:9e:22:6c:1d:31:d5:33:4d:85:1d:15:
ae:db:4d:a6:60:97:fd:23:e3:9e:ba:c3:0d:8d:b5:02:20:06:
78:fd:a6:18:f4:0e:17:b5:30:81:63:bb:74:ce:89:04:e7:3f:
f6:b9:38:2c:ec:ef:48:06:35:2c:cb:f8:79:b5:3b:0a:40:50:
45:ac:93:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:08 2024 by rpki-client on console-fra.rpki-client.org