Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/JXIuViwhgf_oRWsUKUwBWwRu1Bk.roa
File: JXIuViwhgf_oRWsUKUwBWwRu1Bk.roa (raw, json)
Hash identifier: bkeGfiyhpuxzrdFMvnVild+2OqPD2DLcE030MVKDrOg=
Subject key identifier: 25:72:2E:56:2C:21:81:FF:E8:45:6B:14:29:4C:01:5B:04:6E:D4:19
Certificate issuer: /CN=b2a48af3d96931bd90c3bfd55f1fa3047b356014
Certificate serial: 01856C6F07503B7491EB91ACCFD093E6DEC8
Authority key identifier: B2:A4:8A:F3:D9:69:31:BD:90:C3:BF:D5:5F:1F:A3:04:7B:35:60:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/JXIuViwhgf_oRWsUKUwBWwRu1Bk.roa
Signing time: Sun 01 Jan 2023 08:24:53 +0000
ROA not before: Sun 01 Jan 2023 08:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34515
IP address blocks: 185.95.186.0/24 maxlen: 24
185.95.184.0/24 maxlen: 24
185.95.185.0/24 maxlen: 24
185.95.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Mar 2023 19:18:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:07:50:3b:74:91:eb:91:ac:cf:d0:93:e6:de:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2a48af3d96931bd90c3bfd55f1fa3047b356014
Validity
Not Before: Jan 1 08:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25722e562c2181ffe8456b14294c015b046ed419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:58:22:18:64:1b:b8:c2:92:d4:8e:c5:17:
47:ac:9b:a8:d0:9b:76:be:c0:24:8f:13:aa:73:b2:
76:34:ce:f6:56:55:fd:c6:66:85:6d:94:c8:bd:ef:
48:4f:81:3c:6b:0d:19:93:a1:ff:17:b1:9f:d3:06:
1f:f7:05:7c:45:21:be:27:b5:5f:88:df:a7:b8:a8:
0c:97:20:89:3e:ef:ff:15:eb:78:1d:0a:e9:be:6b:
33:21:62:e3:3e:6a:d5:87:02:32:57:5c:59:55:fd:
01:c1:44:4c:90:20:17:ad:a2:8c:78:e8:cc:47:0a:
ae:2a:f4:d4:18:f6:da:31:63:94:c8:96:5b:51:01:
6e:30:af:b5:41:4f:ef:ca:2c:13:47:58:d4:48:76:
92:fd:31:77:56:75:11:2d:73:6a:87:75:12:2a:30:
87:1d:85:b7:06:81:e3:2b:e1:23:8d:43:14:32:66:
f1:fd:13:f6:af:85:3e:f1:fb:80:e6:5f:cd:f7:77:
87:71:ed:ba:af:f4:57:04:c7:76:0d:92:8f:56:4f:
30:f5:6f:e6:55:3c:a0:67:39:51:57:30:f9:57:98:
0e:43:26:4d:f8:6a:1f:84:af:08:96:ed:b5:b3:77:
73:78:22:5d:9e:e4:04:e9:40:71:3a:a4:b2:27:eb:
86:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:72:2E:56:2C:21:81:FF:E8:45:6B:14:29:4C:01:5B:04:6E:D4:19
X509v3 Authority Key Identifier:
keyid:B2:A4:8A:F3:D9:69:31:BD:90:C3:BF:D5:5F:1F:A3:04:7B:35:60:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/JXIuViwhgf_oRWsUKUwBWwRu1Bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.184.0/22
Signature Algorithm: sha256WithRSAEncryption
57:51:51:b3:88:01:16:c4:30:09:ae:db:3d:f3:47:57:a5:b1:
0b:47:bf:ca:ff:37:b1:0d:ff:80:80:f7:f5:a5:c3:29:2e:fa:
a9:f0:8c:6f:14:94:3c:51:8e:14:dc:f8:c6:7a:96:e5:a3:0d:
ba:2c:0f:23:23:3f:fb:cc:b7:9b:69:f4:2d:5a:2a:86:ae:5a:
b9:f8:81:58:1d:e9:31:d7:9f:9a:e6:34:b3:0d:fb:5d:1b:95:
9a:0f:14:88:cc:98:95:0b:fb:68:b3:f0:70:c7:c7:30:01:90:
1f:80:a4:18:b3:21:3d:5a:c3:86:eb:0a:e5:19:4b:7f:60:75:
2e:48:b9:64:20:06:b7:79:19:c4:d1:76:14:60:4c:b4:59:22:
ab:10:52:1b:d9:f6:45:5c:d5:6a:ec:53:95:e3:01:3f:2b:31:
ea:a6:4c:7f:ac:c7:0f:e5:ad:8a:74:27:94:2f:e7:79:ae:d3:
08:71:41:dd:d9:ee:37:37:66:58:32:36:4e:38:e7:ad:97:63:
ee:1b:bb:88:b3:00:69:3e:ca:1e:15:6c:35:09:b2:48:53:62:
8d:93:59:69:f1:a6:ec:d2:a5:a0:fd:d1:84:74:ab:ba:25:04:
03:9b:dc:71:ab:a0:19:5f:86:0c:e7:ce:e1:3c:d8:8f:f2:f9:
14:6b:51:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:51 2024 by rpki-client on console-fra.rpki-client.org