Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/x2mCl9DSHbNsqloYeWRof5_4gE4.roa
File: x2mCl9DSHbNsqloYeWRof5_4gE4.roa (raw, json)
Hash identifier: iSrLGMyvWzGD05J7Jcg4VFv3KyXtEshbpLz/PZoiqZY=
Subject key identifier: C7:69:82:97:D0:D2:1D:B3:6C:AA:5A:18:79:64:68:7F:9F:F8:80:4E
Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial: 018A1BC9C5DC839A9610BE491AD2EE5C7DBD
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/x2mCl9DSHbNsqloYeWRof5_4gE4.roa
Signing time: Tue 22 Aug 2023 05:48:42 +0000
ROA not before: Tue 22 Aug 2023 05:48:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12325
IP address blocks: 195.245.82.0/23 maxlen: 23
194.8.80.0/24 maxlen: 24
195.78.124.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 11 Sep 2023 01:12:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1b:c9:c5:dc:83:9a:96:10:be:49:1a:d2:ee:5c:7d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Validity
Not Before: Aug 22 05:48:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7698297d0d21db36caa5a187964687f9ff8804e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:59:41:d2:71:63:36:24:9f:a7:5d:a6:c2:51:
aa:c9:ae:99:4a:80:b9:07:dc:0e:9a:99:81:dd:74:
c1:0c:1b:6f:24:49:a5:d2:22:73:e5:66:30:44:ad:
2a:fe:f0:c1:d7:d1:cf:a2:3d:9a:37:81:c6:76:9e:
a8:62:bf:6c:e7:8a:9f:fc:97:e5:87:56:00:2e:b3:
cd:a8:13:7e:75:c5:2d:a9:66:cc:23:58:be:af:e5:
cd:0b:3f:3b:3f:27:b5:69:db:69:34:b4:2d:07:44:
e0:76:55:11:9f:28:4c:79:3b:cb:ad:83:bc:28:a3:
00:ef:0a:36:2d:2d:ad:0f:5a:43:82:65:66:f1:e7:
22:2c:8c:01:4b:d5:04:f6:c0:c7:7c:4b:70:c2:66:
f2:32:6d:45:b7:2d:3b:34:c5:6b:74:76:e3:67:9b:
ce:66:3c:fb:cc:c4:4f:a3:d1:90:74:72:ee:86:dc:
7b:c5:e6:b1:85:91:3f:da:a4:7d:fd:73:33:76:cb:
e3:56:f2:79:04:a9:64:d4:5f:02:10:d3:28:7c:dd:
81:99:dc:73:8c:f9:15:67:ed:89:a9:4b:56:43:b5:
81:95:b1:b1:86:ef:f8:97:fb:3e:e1:91:a5:0b:12:
f6:b3:33:84:fb:ec:a1:1c:33:8b:f5:ba:16:78:52:
05:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:69:82:97:D0:D2:1D:B3:6C:AA:5A:18:79:64:68:7F:9F:F8:80:4E
X509v3 Authority Key Identifier:
keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/x2mCl9DSHbNsqloYeWRof5_4gE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.80.0/24
195.78.124.0/23
195.245.82.0/23
Signature Algorithm: sha256WithRSAEncryption
06:d8:90:36:78:7f:68:8e:51:10:cc:9b:df:a0:ae:80:e7:63:
02:0a:a6:31:b6:f4:6a:1c:d7:4a:b2:d8:26:0d:5f:b6:cd:e4:
5c:33:6a:f9:7f:84:1e:5c:d5:d7:19:76:59:15:1a:3a:4c:1e:
05:6c:d1:ba:a4:ca:70:b7:43:95:5d:fe:35:4e:8c:63:f6:ae:
8c:c3:6c:ef:25:01:6f:d1:b7:71:76:81:17:fc:81:9d:8e:ff:
92:0e:8b:57:34:e3:1a:82:26:40:86:c5:57:b1:86:62:d0:b1:
5e:4d:e0:76:d2:32:2f:09:e2:7f:88:14:4f:64:0f:a2:b8:4d:
ca:f4:7f:3c:d5:52:9f:c8:eb:a7:6c:21:3a:f7:45:6a:74:a7:
3d:a9:ec:51:5f:03:74:70:a9:14:04:97:86:3e:dc:93:21:f9:
27:55:70:6a:ec:e5:eb:0a:2c:26:c3:e2:6b:fd:98:99:ee:88:
57:f6:e2:90:43:c0:b5:36:db:72:b7:aa:30:2a:f3:4d:3d:87:
ab:fa:4a:61:bd:34:2a:1d:d4:1e:42:d1:8e:36:27:20:4f:7d:
e6:f0:00:54:81:13:57:78:5e:25:6e:30:e1:cc:e0:5f:d7:5b:
f7:f5:04:da:97:28:18:ed:ec:9b:dc:6b:a3:05:6b:30:38:01:
84:01:14:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:46 2024 by rpki-client on console-fra.rpki-client.org