Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/P-3rqn9Be6yeUiqDIUT1Vs_wicA.roa
File: P-3rqn9Be6yeUiqDIUT1Vs_wicA.roa (raw, json)
Hash identifier: zr+ENUS1z7WjgDp61zInoQ0dEYsaAO5IFMUjIivFq2g=
Subject key identifier: 3F:ED:EB:AA:7F:41:7B:AC:9E:52:2A:83:21:44:F5:56:CF:F0:89:C0
Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial: 018CD423D8A03B868D78EC9AFBD4A5BC54E2
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/P-3rqn9Be6yeUiqDIUT1Vs_wicA.roa
Signing time: Thu 04 Jan 2024 11:02:48 +0000
ROA not before: Thu 04 Jan 2024 11:02:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216319
IP address blocks: 195.10.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 20:11:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d4:23:d8:a0:3b:86:8d:78:ec:9a:fb:d4:a5:bc:54:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Validity
Not Before: Jan 4 11:02:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fedebaa7f417bac9e522a832144f556cff089c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e1:06:10:ec:36:02:6f:5b:f7:f2:47:8d:f2:
c8:9d:62:9f:22:e0:36:d2:18:39:9a:6b:43:97:ac:
7d:7b:5f:70:e9:6a:c0:06:9a:9d:61:05:cd:dc:82:
a6:80:56:02:4e:38:21:90:d1:35:9d:de:8f:6d:13:
eb:95:55:b5:46:88:e1:d7:b8:3a:81:b5:35:d3:32:
32:bf:df:26:5c:fc:81:44:25:87:a0:02:bf:dd:78:
78:52:97:ae:13:37:02:d0:64:fc:71:ac:61:1c:cc:
2d:af:b1:ba:23:c8:20:b9:f6:c9:6f:e0:1e:87:49:
7d:f1:d1:53:31:4c:28:e5:d7:b5:e1:d5:76:cd:e2:
f9:7f:f4:da:00:0e:a9:bd:be:b3:9d:00:9f:e8:c4:
37:db:09:f2:56:da:53:e8:81:64:83:87:3e:98:fe:
ff:68:16:fb:e2:22:b4:99:7e:59:55:d8:b8:4c:7f:
71:7a:35:ee:c7:0e:8c:b3:93:6c:fb:9b:40:3c:93:
2c:6c:55:27:f1:3f:68:68:40:fe:de:10:e3:1c:26:
0f:74:50:ad:a2:36:e5:da:a3:44:e7:0e:b9:dc:0d:
26:02:62:3b:cd:04:71:60:12:2d:65:42:fe:4b:4e:
b3:73:f7:0a:80:c4:6d:46:99:87:38:ad:62:23:e3:
5a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:ED:EB:AA:7F:41:7B:AC:9E:52:2A:83:21:44:F5:56:CF:F0:89:C0
X509v3 Authority Key Identifier:
keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/P-3rqn9Be6yeUiqDIUT1Vs_wicA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.10.205.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:ab:24:3f:dc:d7:5d:b7:41:3c:61:bf:2d:cd:b3:42:c8:99:
75:ee:cd:37:1a:e0:f8:65:25:63:d2:f2:60:e6:73:1b:e5:b6:
c6:4c:90:a8:cb:61:ed:2d:80:5a:76:93:f0:3d:61:26:57:a8:
07:2e:10:a4:7d:c8:43:b4:ff:8d:6e:64:f7:5a:d4:36:e3:ca:
83:de:b1:ae:15:2c:48:e0:1f:a1:36:38:51:41:86:ff:1f:0a:
21:5d:7b:f3:6a:83:94:3c:b5:27:32:e7:d0:61:28:d6:fb:32:
62:ed:96:b1:aa:bd:42:55:ca:ba:49:f5:53:6e:71:02:e7:21:
c0:c4:1a:99:9c:24:6f:66:5f:7f:82:cc:22:da:8d:0c:d1:75:
62:a8:71:1a:22:d8:1f:53:20:14:bb:4c:39:b1:50:3a:df:72:
ea:03:2e:3f:6d:86:95:fe:58:4c:7b:8e:45:44:17:52:98:34:
c3:a4:1b:48:9e:d6:1b:64:75:9d:1c:2d:1c:0d:b8:1d:ec:78:
2f:70:bc:7e:e7:ad:4f:a1:81:78:4e:c3:8e:db:cc:36:7d:6d:
be:22:95:99:8f:a3:5e:72:f2:fd:21:95:49:4d:4c:0a:54:33:
0f:15:92:e5:03:01:6e:76:ec:ca:47:7a:8a:1b:cc:00:e9:28:
8c:2b:f0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:29 2024 by rpki-client on console-ams.rpki-client.org