Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/8XhX0SAr_N3W8dlQ-8jSi2T5ZY4.roa
File: 8XhX0SAr_N3W8dlQ-8jSi2T5ZY4.roa (raw, json)
Hash identifier: /jKZ7zrdtx7uU8wZ+IrLGcRToJmLpt/n4j4B15nB0Q0=
Subject key identifier: F1:78:57:D1:20:2B:FC:DD:D6:F1:D9:50:FB:C8:D2:8B:64:F9:65:8E
Certificate issuer: /CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Certificate serial: 018570E76572BA969CCA46A77FC154845A79
Authority key identifier: 0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/8XhX0SAr_N3W8dlQ-8jSi2T5ZY4.roa
Signing time: Mon 02 Jan 2023 05:14:51 +0000
ROA not before: Mon 02 Jan 2023 05:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44574
IP address blocks: 193.150.34.0/24 maxlen: 24
91.230.181.0/24 maxlen: 24
193.104.113.0/24 maxlen: 24
95.215.174.0/24 maxlen: 24
95.215.175.0/24 maxlen: 24
2001:678:498::/48 maxlen: 48
2001:678:4a0::/48 maxlen: 48
2001:67c:16d1::/48 maxlen: 48
2001:67c:1954::/48 maxlen: 48
2001:678:4a4::/48 maxlen: 48
2001:678:49c::/48 maxlen: 48
2001:67c:16d0::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 22 Jun 2023 16:32:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:65:72:ba:96:9c:ca:46:a7:7f:c1:54:84:5a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Validity
Not Before: Jan 2 05:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f17857d1202bfcddd6f1d950fbc8d28b64f9658e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2e:7d:9a:6e:dd:8a:8f:d5:14:14:5f:5e:0a:
53:c7:28:af:e6:96:f9:3c:e3:04:c6:d0:c0:65:90:
70:e3:f4:38:6a:6e:2a:3c:57:e8:ea:04:45:8e:8f:
5a:7d:a3:84:e5:bf:b6:bf:f9:8b:65:3a:df:33:5a:
d8:7d:f2:d8:d9:4d:c2:a2:61:c8:fa:5b:35:39:47:
1a:80:a6:4f:6d:b4:f6:ed:cf:a8:35:86:72:cd:d1:
b3:7f:3f:64:bb:e3:59:21:e5:1f:58:5b:66:84:82:
81:24:64:12:b1:24:b0:d4:d9:5c:ff:93:fd:93:74:
63:e3:6d:18:9d:02:77:d0:05:ce:04:b2:20:13:ed:
d9:ee:5b:b1:f1:fa:f6:3d:13:1d:99:a5:1d:60:7f:
27:af:bf:41:e8:1a:24:05:28:83:c3:08:39:76:72:
65:a8:93:4f:e4:8a:69:e3:58:a0:72:e6:73:d1:c8:
ce:4d:8c:14:d8:89:34:03:3e:f3:7d:d5:d4:1d:9c:
b9:92:02:96:1d:4e:66:05:7a:9e:ac:1d:6c:af:cb:
35:73:17:4d:6e:7f:74:eb:9e:0e:fb:68:04:92:03:
d2:b5:22:44:f2:71:bf:e6:3c:2d:fd:88:b3:25:60:
a5:dc:e8:4d:01:c6:bc:82:da:7b:4b:17:0a:e0:c5:
65:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:78:57:D1:20:2B:FC:DD:D6:F1:D9:50:FB:C8:D2:8B:64:F9:65:8E
X509v3 Authority Key Identifier:
keyid:0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/8XhX0SAr_N3W8dlQ-8jSi2T5ZY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.181.0/24
95.215.174.0/23
193.104.113.0/24
193.150.34.0/24
IPv6:
2001:678:498::/48
2001:678:49c::/48
2001:678:4a0::/48
2001:678:4a4::/48
2001:67c:16d0::/47
2001:67c:1954::/48
Signature Algorithm: sha256WithRSAEncryption
4e:ab:7a:22:41:43:30:f6:9f:d0:eb:82:49:fa:a7:3e:9a:3e:
81:3b:8e:9d:ed:f5:c0:3b:ea:a0:a3:9c:fa:72:fb:72:95:36:
7a:7d:b3:e1:ac:43:e3:2e:62:0c:8b:30:59:e2:c4:cb:94:ea:
59:6c:48:52:ab:47:62:a9:55:97:ef:d8:34:3a:b0:54:ef:75:
b7:94:32:71:c3:fe:eb:8b:85:21:d5:ab:06:e2:a6:44:42:4c:
21:02:1e:e9:22:b7:0e:a5:0a:88:a4:21:4e:b2:0f:ba:43:c9:
bf:16:d8:99:5f:13:ed:41:95:cf:39:9c:7c:0e:b6:a7:d5:d8:
15:85:b5:98:f3:ed:89:87:14:a2:5a:09:b0:a3:c8:c7:6d:27:
e9:99:b1:6f:2e:41:9a:89:dd:55:9a:39:01:fc:28:6d:57:d2:
92:00:15:06:6c:da:e1:d9:d6:67:09:73:7f:d8:e2:0a:9b:6a:
ef:21:0d:76:84:02:3b:75:50:f4:a3:9f:95:57:82:39:7a:ab:
a1:1a:93:45:74:d1:22:bb:fb:d1:73:16:19:7b:f9:90:ff:df:
f1:28:7b:10:c4:79:fb:e5:3a:36:67:35:b3:66:99:33:57:67:
03:d1:b4:c9:b3:03:88:c5:73:1a:9f:e1:31:58:27:30:ab:7e:
3e:e0:fb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:23 2024 by rpki-client on console-fra.rpki-client.org