Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/1OazdVOgkU5T438tbeIQCHHgsp8.roa
File: 1OazdVOgkU5T438tbeIQCHHgsp8.roa (raw, json)
Hash identifier: 69p/o3UkOviD2hamDxlDKKKNauiR1UO+JB0sI8TlaHo=
Subject key identifier: D4:E6:B3:75:53:A0:91:4E:53:E3:7F:2D:6D:E2:10:08:71:E0:B2:9F
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018CD68350FC1EB885EB77D701B683659C62
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/1OazdVOgkU5T438tbeIQCHHgsp8.roa
Signing time: Thu 04 Jan 2024 22:06:19 +0000
ROA not before: Thu 04 Jan 2024 22:06:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 195.133.202.0/23 maxlen: 24
194.88.96.0/21 maxlen: 24
89.37.216.0/23 maxlen: 24
84.234.16.0/20 maxlen: 24
194.88.112.0/20 maxlen: 24
62.112.12.0/23 maxlen: 24
194.58.64.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 19:11:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d6:83:50:fc:1e:b8:85:eb:77:d7:01:b6:83:65:9c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jan 4 22:06:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4e6b37553a0914e53e37f2d6de2100871e0b29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:78:41:b2:34:fa:35:3b:e1:63:27:35:25:23:
bd:e7:74:be:3e:c6:55:d7:d9:18:81:2f:63:c3:a2:
07:fc:04:ec:f1:cc:4f:49:14:d4:08:78:64:94:fd:
a8:6b:b5:fa:ec:8a:d2:a4:c4:20:57:9d:3b:43:31:
7b:09:20:66:16:6d:b5:22:b6:13:af:01:69:2b:d5:
81:dc:72:cc:ea:85:f0:72:60:d9:1f:5b:59:53:be:
ed:06:95:b7:eb:6c:cd:92:f5:2c:20:c2:b2:8e:65:
84:b9:44:9b:18:40:27:56:83:08:83:a9:f8:8c:36:
de:eb:b6:16:69:ca:f8:3d:7d:ee:5e:3c:d7:b2:50:
c6:01:5d:07:6b:50:9d:39:4c:48:29:4a:03:be:e7:
68:c7:d1:fb:09:36:d5:00:68:46:09:78:bf:59:47:
4e:88:83:2a:58:13:44:ec:b6:4b:28:1c:cc:09:0b:
66:95:0e:58:01:d5:15:3c:7b:2f:84:5f:b9:2a:09:
8e:8e:d2:99:96:9a:fa:d9:7a:ba:79:c5:d6:f7:c6:
11:4c:18:c1:75:da:84:1b:06:08:fd:39:e8:31:ec:
24:5f:fb:14:db:0e:5f:53:a6:d0:2b:a8:18:4d:6d:
b2:52:94:e9:33:9b:56:d6:54:b8:7a:50:48:a4:d4:
6b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E6:B3:75:53:A0:91:4E:53:E3:7F:2D:6D:E2:10:08:71:E0:B2:9F
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/1OazdVOgkU5T438tbeIQCHHgsp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.12.0/23
84.234.16.0/20
89.37.216.0/23
194.58.64.0/23
194.88.96.0/21
194.88.112.0/20
195.133.202.0/23
Signature Algorithm: sha256WithRSAEncryption
39:33:f8:fd:e4:bd:73:30:08:16:73:b2:e3:1d:72:a2:24:e2:
d0:19:15:f7:87:11:96:2c:27:69:ab:75:ad:11:76:a1:6b:df:
ba:37:d2:48:b2:4e:59:fd:82:5d:4b:7f:15:55:6b:02:11:6a:
f3:0b:42:84:bd:55:9e:43:60:11:cd:aa:04:d9:d2:12:b0:39:
4c:f3:2f:36:21:97:06:4e:49:97:3b:97:9b:ff:e1:d1:e8:06:
f9:87:f1:24:38:58:51:4f:f6:79:ab:8c:7a:28:86:51:7c:8e:
0c:d1:dc:3a:cc:63:36:1d:2d:93:df:a1:87:42:ec:55:3b:9c:
9d:35:4e:48:cc:92:a6:12:af:d4:1e:f9:9f:ea:9c:f1:b2:77:
c7:34:9e:29:46:37:fd:d7:3a:0a:fa:aa:12:2c:16:bf:f6:a3:
3f:1e:11:4e:dd:67:49:e3:6c:58:ae:98:72:f1:ee:f6:a4:0a:
ac:d8:6d:8f:73:de:eb:3b:71:03:7d:29:10:06:16:d2:5b:25:
b7:3a:f3:f9:74:13:25:f1:36:6f:03:68:2e:5e:d1:b7:d9:b6:
5c:0a:78:f0:8f:89:d7:67:16:2b:31:68:f1:b1:37:3c:c3:2b:
aa:4a:20:07:8e:34:99:39:d7:d0:c6:c7:94:22:df:87:28:08:
ae:80:4b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 21:43:21 2024 by rpki-client on console-fra.rpki-client.org