Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/IJX3LznWSCFggt45Iu118x3pAFg.roa
File: IJX3LznWSCFggt45Iu118x3pAFg.roa (raw, json)
Hash identifier: a2WmZDaAC7w1ZD0W1VDAT3dOfddq0tMJoY3IAmE4Uq8=
Subject key identifier: 20:95:F7:2F:39:D6:48:21:60:82:DE:39:22:ED:75:F3:1D:E9:00:58
Certificate issuer: /CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Certificate serial: 018571FA1B817950E8480AB02C7A1EF44978
Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/IJX3LznWSCFggt45Iu118x3pAFg.roa
Signing time: Mon 02 Jan 2023 10:14:54 +0000
ROA not before: Mon 02 Jan 2023 10:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211100
IP address blocks: 185.53.34.0/24 maxlen: 24
2a10:fa40::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 15 Jun 2023 17:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:1b:81:79:50:e8:48:0a:b0:2c:7a:1e:f4:49:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Validity
Not Before: Jan 2 10:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2095f72f39d648216082de3922ed75f31de90058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:46:f0:18:c1:60:ab:c7:e6:61:67:36:4e:89:
bf:fe:1a:bb:a6:a2:8a:27:68:f3:49:d2:6f:c8:a8:
8b:b6:5a:62:b5:e5:f5:af:d3:77:43:63:6f:f6:94:
c4:8c:6d:23:16:2e:ff:6d:6f:52:ed:ad:26:21:6c:
75:01:87:e8:ee:a4:6a:49:a7:5f:86:41:67:a2:ce:
80:0c:73:a3:8c:34:79:79:86:3d:3f:39:ae:d0:b0:
72:6d:a9:28:a9:9e:ec:e5:0f:7b:f6:ce:c9:e8:e9:
25:1a:86:f5:6f:53:65:dd:f2:d5:ff:66:6e:76:01:
7b:d5:72:4b:39:3e:23:ed:ab:e4:63:8f:e7:6d:d3:
84:4b:18:dd:71:cc:aa:f2:c6:e9:6b:f6:57:17:7c:
e7:f8:f2:19:91:09:15:7f:36:5c:38:e8:61:4b:f4:
03:41:e3:15:74:09:f1:33:5a:ba:e0:24:1e:d1:7c:
bb:ca:23:80:30:5c:1e:42:80:ef:1b:09:66:f8:9f:
84:a1:e7:59:d3:34:f5:10:35:ce:65:4d:f0:df:1b:
83:f9:71:aa:16:21:e7:be:f1:1d:22:75:8a:a7:ee:
9b:ea:44:97:54:db:41:cf:5d:2c:df:87:76:91:a7:
51:6b:9e:f5:4a:02:07:7d:0d:1f:cd:75:51:06:68:
5d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:95:F7:2F:39:D6:48:21:60:82:DE:39:22:ED:75:F3:1D:E9:00:58
X509v3 Authority Key Identifier:
keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/IJX3LznWSCFggt45Iu118x3pAFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.34.0/24
IPv6:
2a10:fa40::/32
Signature Algorithm: sha256WithRSAEncryption
c9:9d:fe:95:8c:e9:48:29:f7:86:6c:7a:5c:b9:4a:45:2f:40:
e4:d7:59:ac:3b:6f:3a:f1:60:64:66:68:9f:86:53:c2:1d:54:
39:4e:ed:88:b9:e7:f8:49:58:6e:5b:1a:09:a9:33:4c:57:87:
6c:27:15:74:1e:52:4a:98:56:06:9d:18:34:2c:9e:f4:e4:ad:
9b:1a:61:ad:cf:85:3d:2a:dd:82:f9:67:2d:f6:1a:56:8c:5d:
31:e4:ec:4f:32:7c:05:30:f5:29:cb:4e:cb:16:28:c5:8e:ef:
5d:64:98:de:26:27:bd:12:73:e1:3b:a1:ef:88:4a:b3:1c:13:
9d:99:f0:a4:a8:91:14:9f:e6:d1:a8:2a:4f:5c:6c:9c:4d:f5:
45:b1:85:43:15:ae:d9:cd:8b:17:82:0b:41:7f:34:81:bc:1a:
cd:5c:24:bd:e6:82:6e:ae:02:7f:2d:ea:e6:26:5d:4a:2f:1a:
dc:d3:1d:93:cf:f6:60:82:47:91:f1:2f:a2:bb:4b:4b:fe:91:
f8:d3:d9:32:64:b5:d8:8a:9e:ea:5d:17:02:b7:9e:41:35:98:
73:93:ca:e4:1e:c5:e2:b5:77:35:bb:c8:35:d8:f4:4c:d7:20:
7e:64:d9:d0:4b:45:78:76:46:61:0b:20:a9:4e:46:5c:a0:1c:
f2:db:01:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:42 2024 by rpki-client on console-ams.rpki-client.org