Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/JqONuBx4wFLpW0kL0coOAEbJ9xs.roa
File: JqONuBx4wFLpW0kL0coOAEbJ9xs.roa (raw, json)
Hash identifier: eqfzytYImSh5rZEVsoDRvZPFUWyUzp5elEgWaMwnURw=
Subject key identifier: 26:A3:8D:B8:1C:78:C0:52:E9:5B:49:0B:D1:CA:0E:00:46:C9:F7:1B
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 018571D7C274D1730943FEF5583B793A2EDC
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/JqONuBx4wFLpW0kL0coOAEbJ9xs.roa
Signing time: Mon 02 Jan 2023 09:37:23 +0000
ROA not before: Mon 02 Jan 2023 09:37:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60248
IP address blocks: 195.110.38.0/24 maxlen: 24
195.110.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:c2:74:d1:73:09:43:fe:f5:58:3b:79:3a:2e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jan 2 09:37:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26a38db81c78c052e95b490bd1ca0e0046c9f71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ca:2c:8c:63:a1:2c:be:6a:a3:77:07:5c:c1:
df:a7:14:44:45:c6:e2:ac:10:31:7a:ac:12:f3:96:
db:16:6c:97:ff:c9:b1:a1:ab:2f:80:ff:5f:e9:89:
42:81:ac:c2:25:be:b1:5b:68:3c:14:78:62:b6:e4:
4f:c2:ab:85:3b:8b:ad:2c:f5:29:1a:45:c8:dd:ae:
57:15:06:28:39:44:af:cd:15:54:ee:c7:23:4c:ba:
de:3b:1d:ca:62:3d:d4:cf:05:cd:7e:23:d8:83:f0:
ae:1c:10:8d:a2:77:d0:71:61:70:cf:c4:c6:f1:ac:
80:2e:d2:f9:02:cb:31:e2:83:90:2b:3c:1f:ed:51:
6a:23:ce:5b:9f:87:ab:24:d3:ed:62:49:3c:09:f3:
ba:80:e1:e6:11:b7:5f:f4:d5:f4:3c:89:2a:21:5d:
96:2d:3c:2d:56:06:29:d5:ab:65:19:36:c8:37:26:
bc:ea:6a:f2:fc:d1:52:c3:0e:14:fb:45:f0:94:1c:
b8:3b:06:b9:cc:a0:50:e0:e4:d4:90:e0:fa:10:51:
75:5d:fe:55:73:0a:c7:1d:22:36:78:6d:3d:53:c8:
b8:e0:cd:66:32:f2:97:95:5e:47:c3:69:d2:18:fa:
3e:e7:ab:e1:4b:ac:58:c8:d5:e3:78:3d:7c:54:99:
b1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A3:8D:B8:1C:78:C0:52:E9:5B:49:0B:D1:CA:0E:00:46:C9:F7:1B
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/JqONuBx4wFLpW0kL0coOAEbJ9xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.110.38.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:2f:a1:d7:78:75:6f:5d:53:69:5d:f2:be:17:58:39:b7:57:
ee:11:c5:ec:14:44:73:2a:aa:57:85:71:2d:19:2a:d6:ec:d0:
ba:2e:dc:1b:2e:ed:6d:25:e6:d6:97:db:cc:98:5f:97:6d:a7:
b6:9d:0f:18:60:98:b6:0a:33:ad:99:bf:dc:fa:e0:32:d5:c0:
98:22:34:1f:04:a4:e5:d5:ce:06:3b:1f:60:32:70:0b:96:cc:
1c:f6:1c:62:65:76:ad:e3:15:cd:b1:09:0c:ae:45:be:af:d4:
4d:6c:e5:10:a5:50:ba:07:74:63:84:3f:aa:38:a9:b0:d4:72:
c6:e2:7b:cc:9b:7b:ec:c4:07:f0:52:95:07:1e:d7:2f:f6:f2:
e5:7b:38:09:98:37:e2:d4:a2:6f:ef:2b:b3:05:bb:3d:54:1e:
df:5f:e3:de:12:07:ca:51:2e:c8:43:78:a7:fb:e3:ad:b3:2a:
73:8c:54:bc:7b:17:8a:2c:21:47:40:49:5c:e3:1f:c2:57:e9:
92:70:26:30:54:b5:cf:bf:3b:72:c1:81:19:c6:64:06:b7:6e:
f3:07:9b:d3:ec:79:75:60:75:6c:f9:da:7c:c7:d2:c6:7d:4f:
27:4c:be:91:7f:74:83:79:8a:6f:03:3e:2a:62:ec:b3:21:56:
dd:39:cb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:22 2024 by rpki-client on console-fra.rpki-client.org