Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/po1iHJw_M73fuMWF_4EcIfB1cRU.roa
File: po1iHJw_M73fuMWF_4EcIfB1cRU.roa (raw, json)
Hash identifier: pvKai4PowdvWrWjpPCGt5uhct/HLWaLU2EG5MUGtKo0=
Subject key identifier: A6:8D:62:1C:9C:3F:33:BD:DF:B8:C5:85:FF:81:1C:21:F0:75:71:15
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018D884F4A0FA62D04EF5D11800DCEFFCD70
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/po1iHJw_M73fuMWF_4EcIfB1cRU.roa
Signing time: Thu 08 Feb 2024 10:41:54 +0000
ROA not before: Thu 08 Feb 2024 10:41:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 194.135.26.0/23 maxlen: 24
195.133.208.0/23 maxlen: 24
213.159.10.0/23 maxlen: 24
213.159.12.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 Feb 2024 19:37:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:88:4f:4a:0f:a6:2d:04:ef:5d:11:80:0d:ce:ff:cd:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Feb 8 10:41:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a68d621c9c3f33bddfb8c585ff811c21f0757115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c4:f1:40:b8:10:6b:98:0f:32:ec:4b:4f:ac:
53:68:42:33:33:a5:c2:76:ff:5f:4f:23:cb:95:c4:
d7:02:3c:18:13:51:ee:48:e6:87:81:a2:2a:99:76:
3e:f8:60:6a:b1:12:86:45:5e:a6:9c:a1:4e:16:8a:
d5:35:e1:19:96:f3:85:48:aa:f3:05:c7:8f:97:b0:
df:e6:3c:c5:5c:19:88:b8:f9:a4:1a:ea:37:d1:80:
6c:a9:58:79:92:f1:9b:d2:42:2b:c1:e8:6e:74:ea:
08:f2:cf:08:ca:84:35:7a:c9:84:f7:76:c0:08:85:
94:73:c6:cd:c1:5c:cc:84:01:90:01:ab:fa:14:b1:
f6:e3:7e:02:dc:27:9a:b1:a0:ee:a8:c1:cd:ea:35:
67:bf:61:31:28:07:26:3c:09:b5:55:e1:18:26:df:
fd:2c:50:c6:84:57:a5:75:dd:6d:0e:a7:fb:cb:ea:
40:38:08:48:7c:f6:a6:5b:81:08:ee:8e:da:ef:e2:
9f:ef:60:4e:2f:5b:c0:0c:e4:8b:1c:ef:11:68:96:
eb:23:5d:b8:bb:d1:70:29:b2:87:49:ba:45:c1:90:
a4:57:5e:74:d2:01:af:8a:51:ee:d0:cc:cf:27:af:
91:58:11:d7:8e:39:27:33:f5:51:11:95:4b:02:5a:
bc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8D:62:1C:9C:3F:33:BD:DF:B8:C5:85:FF:81:1C:21:F0:75:71:15
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/po1iHJw_M73fuMWF_4EcIfB1cRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.135.26.0/23
195.133.208.0/23
213.159.10.0-213.159.13.255
Signature Algorithm: sha256WithRSAEncryption
75:11:4a:10:c7:da:7d:eb:c4:7f:86:93:8d:df:85:62:fc:cd:
b8:29:71:a7:22:e6:68:aa:fe:c1:1c:8b:6a:df:d5:9f:ff:46:
99:bd:af:20:dc:da:e6:d9:2d:69:e6:7e:4d:35:4e:a4:c3:bb:
20:b2:3c:cc:0b:1c:1d:4b:4e:db:e0:5e:f6:e5:8e:4c:83:d8:
a4:fa:50:d7:5a:6a:10:02:2d:35:1d:b8:ad:74:4e:69:4e:95:
2c:c7:2a:1f:12:13:83:64:7e:3e:d3:39:ef:af:e3:4b:7d:4f:
9d:4e:9a:31:ea:d2:e6:62:91:c2:3b:40:c4:17:e9:7f:eb:22:
33:27:8b:72:a9:d3:88:b8:da:13:8e:8a:c6:1d:a3:39:89:33:
da:f6:ea:31:11:4f:59:96:8d:e9:3f:a0:b4:ac:38:48:f9:d6:
94:ff:c5:8f:c5:27:7d:87:58:e1:ad:fd:cd:ad:d7:b0:48:c6:
a2:b2:a0:7b:d7:b6:35:7f:77:b2:82:e7:a0:a8:8f:79:a6:ec:
84:ee:bc:3c:43:ec:b8:40:97:e5:ca:51:af:fd:22:2e:23:67:
4d:09:3c:ca:22:5d:b1:94:a4:a5:06:91:84:ea:71:c4:fe:e7:
ee:9f:45:52:36:c1:d8:89:5b:ce:f6:30:76:85:da:9e:49:a5:
d5:38:c6:ed
-----BEGIN CERTIFICATE-----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Generated at Sun Feb 18 22:08:58 2024 by rpki-client on console-ams.rpki-client.org