Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/eTnbfdmUk_xvf4iOi-BizhOE3tM.roa
File: eTnbfdmUk_xvf4iOi-BizhOE3tM.roa (raw, json)
Hash identifier: rvVhhi1DW0OgAfn/I82e8eSf89UPs6M2VKXb5WBU+DU=
Subject key identifier: 79:39:DB:7D:D9:94:93:FC:6F:7F:88:8E:8B:E0:62:CE:13:84:DE:D3
Certificate issuer: /CN=2421ffb68eab97e24a90626d90498be7ed7066f0
Certificate serial: 018CC871260AABC456E38494E82E32670D4C
Authority key identifier: 24:21:FF:B6:8E:AB:97:E2:4A:90:62:6D:90:49:8B:E7:ED:70:66:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/eTnbfdmUk_xvf4iOi-BizhOE3tM.roa
Signing time: Tue 02 Jan 2024 04:31:47 +0000
ROA not before: Tue 02 Jan 2024 04:31:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1850
IP address blocks: 195.130.211.0/24 maxlen: 24
193.4.58.0/23 maxlen: 23
185.93.156.0/22 maxlen: 22
2001:67c:6c::/48 maxlen: 48
2001:7f8:48::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:26:0a:ab:c4:56:e3:84:94:e8:2e:32:67:0d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2421ffb68eab97e24a90626d90498be7ed7066f0
Validity
Not Before: Jan 2 04:31:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7939db7dd99493fc6f7f888e8be062ce1384ded3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:64:7a:42:55:68:6e:9d:5b:79:3b:e2:57:13:
1e:69:f5:24:fa:7d:12:92:af:72:67:b0:b5:e4:3b:
14:e7:09:7f:76:3d:29:a5:75:ef:d6:b7:08:2f:0b:
8c:3c:0e:10:ff:b8:3b:73:73:95:f6:33:08:47:6a:
62:67:c6:ac:8a:82:44:c7:5c:93:e2:4b:af:65:c3:
5b:8f:0f:fb:55:ff:b1:18:4a:b5:46:e5:f8:ae:da:
f8:18:3c:38:c4:f2:83:d1:2e:25:4e:e9:c7:67:a4:
34:b6:e5:f4:05:21:fb:df:41:90:c3:6d:25:47:ff:
a3:7b:f0:3b:42:af:65:a1:4b:f1:ff:0a:e3:7d:da:
fa:db:3e:2e:8b:2b:5d:29:0f:60:b8:18:51:e9:81:
aa:bf:ff:35:71:f1:6e:7d:50:38:43:99:e5:e3:db:
ef:b8:92:af:ab:9d:1f:ce:7b:f8:87:db:b1:3f:3d:
02:c9:15:88:7f:f4:db:9a:d3:0f:ee:63:2b:10:9d:
ff:79:ba:4c:92:9e:48:6d:b6:66:8b:d3:5c:fd:9f:
61:ec:55:3c:c6:93:86:56:a2:5d:29:bb:d2:7d:cf:
37:de:70:de:f5:33:e4:25:09:0c:9e:ab:f9:30:88:
30:5b:e9:81:05:aa:29:69:a9:57:89:aa:e5:5e:5b:
63:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:39:DB:7D:D9:94:93:FC:6F:7F:88:8E:8B:E0:62:CE:13:84:DE:D3
X509v3 Authority Key Identifier:
keyid:24:21:FF:B6:8E:AB:97:E2:4A:90:62:6D:90:49:8B:E7:ED:70:66:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/eTnbfdmUk_xvf4iOi-BizhOE3tM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.156.0/22
193.4.58.0/23
195.130.211.0/24
IPv6:
2001:67c:6c::/48
2001:7f8:48::/48
Signature Algorithm: sha256WithRSAEncryption
6c:86:8d:a5:1a:de:31:8f:46:9f:84:89:2a:18:58:f6:17:ca:
8f:fb:f3:a7:33:e3:09:74:a3:7d:a7:0a:d6:01:2c:81:53:67:
02:21:ab:20:c0:0b:d7:44:a0:93:08:a8:d7:63:b1:8f:f6:ab:
81:36:e8:07:28:6e:00:5d:b2:23:ff:f6:b4:4e:72:7c:81:31:
c4:2c:60:b5:3a:ed:61:29:9a:2e:8d:41:50:dd:a4:07:21:1f:
c8:e3:42:39:62:91:f8:ab:5f:d8:3d:6c:01:6c:5f:c8:7c:42:
b4:b0:7d:36:4e:d6:1a:bb:88:84:db:00:16:47:91:00:a4:27:
e2:aa:3b:dd:3a:cb:e7:dd:f3:f6:89:68:73:5d:c5:7c:0d:b2:
33:73:af:ac:8e:d9:80:dc:c7:0c:58:9d:99:4a:fc:f1:18:57:
a3:de:bd:03:3a:74:cd:68:c5:db:57:1b:72:0b:51:2a:e7:21:
a8:34:fd:13:03:45:1e:9b:71:b5:ed:6a:02:cb:b0:7f:dd:1c:
d7:8f:bc:7e:bd:77:80:b0:cf:c2:1e:6f:bf:ae:09:d1:e5:99:
56:14:a1:e8:11:f4:53:bc:86:5b:c8:3a:88:d3:e6:20:b6:02:
1c:31:45:cd:e9:2e:b7:5f:b1:ae:25:a9:d8:cc:48:60:33:b5:
8d:0b:ae:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:42 2025 by rpki-client