Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/VqqjOAt5U6C2pEOhkifEG_zG4rU.roa
File: VqqjOAt5U6C2pEOhkifEG_zG4rU.roa (raw, json)
Hash identifier: bkifuPRi0qbg8rv9fKsBvTNnJgp8CNELD6YQA/HmUtU=
Subject key identifier: 56:AA:A3:38:0B:79:53:A0:B6:A4:43:A1:92:27:C4:1B:FC:C6:E2:B5
Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial: 018ABE64E2D9A82442435FD9ADCEFC6E8A43
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/VqqjOAt5U6C2pEOhkifEG_zG4rU.roa
Signing time: Fri 22 Sep 2023 19:36:37 +0000
ROA not before: Fri 22 Sep 2023 19:36:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199417
IP address blocks: 195.10.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Nov 2023 15:57:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:be:64:e2:d9:a8:24:42:43:5f:d9:ad:ce:fc:6e:8a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Validity
Not Before: Sep 22 19:36:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56aaa3380b7953a0b6a443a19227c41bfcc6e2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ef:98:f6:f7:73:10:dc:5b:c3:c9:dd:b3:df:
53:dc:e0:11:20:11:0e:5d:1f:1f:fb:50:64:3d:0f:
70:1a:01:11:9d:5e:db:2c:d6:74:63:e4:d8:bf:1f:
40:ad:2e:d2:65:e7:c2:dc:f4:fb:22:29:6c:68:a5:
2f:e9:3a:f2:52:97:bc:79:08:ab:1b:70:38:79:8c:
32:03:32:55:75:36:c4:d0:23:52:d7:7c:38:14:4b:
1f:07:b6:45:bb:a5:9e:dc:c9:32:f5:53:af:97:35:
29:32:19:da:71:d6:de:6b:b4:02:76:54:79:56:74:
9b:04:fb:4c:0c:6d:30:02:f3:58:c4:30:d9:f9:b9:
e6:8a:db:aa:fc:93:83:d5:8a:d3:05:9f:80:22:2f:
b8:94:10:a0:42:56:e3:48:6a:d0:2a:4f:c4:49:94:
4d:d2:18:2d:84:84:81:53:11:14:c4:16:89:db:43:
82:80:a2:1d:f6:fd:f9:5f:38:3b:ff:43:16:cd:3a:
a7:c0:2e:0d:84:04:97:51:1f:65:66:3a:e2:97:d7:
27:d7:18:94:b6:cf:09:2d:0b:28:96:56:ad:f7:c8:
8b:96:a1:99:6b:e5:54:7c:17:9c:0a:2f:4e:bd:3b:
24:6b:fe:33:b5:18:5a:53:10:de:1f:4a:bd:df:38:
2a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AA:A3:38:0B:79:53:A0:B6:A4:43:A1:92:27:C4:1B:FC:C6:E2:B5
X509v3 Authority Key Identifier:
keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/VqqjOAt5U6C2pEOhkifEG_zG4rU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.10.205.0/24
Signature Algorithm: sha256WithRSAEncryption
62:36:c6:f4:f4:83:ef:c6:ba:7c:4c:11:67:e8:d0:70:78:d4:
88:03:a2:8b:15:a2:84:7f:5f:57:22:1d:a6:dd:a5:bc:5f:7d:
e1:5c:59:75:9c:9c:a2:a4:1a:d7:cb:37:04:7d:7a:13:ad:b8:
d2:c5:c1:d9:f2:41:30:19:f2:60:24:e4:29:df:45:d2:b3:2a:
ba:82:bb:aa:dd:62:5f:39:c7:d6:5d:d5:b9:4e:a3:0a:3f:e3:
cc:c5:63:7b:50:2e:2b:97:10:f9:cb:a3:ba:d3:e8:94:bb:48:
42:d3:3c:fb:7b:2f:cb:7f:66:92:4f:af:d1:2c:88:34:6d:71:
6d:4b:76:32:03:1e:a5:6a:0a:93:28:c6:3f:35:77:49:bf:79:
46:86:a7:8b:30:f7:0d:fd:cf:82:63:be:30:dc:d9:48:86:de:
be:f7:ea:56:bf:7a:2b:f7:e2:b7:3d:c8:6f:ec:19:74:10:67:
13:f6:54:0f:97:c2:9e:e8:36:c8:d2:24:c5:dd:a4:b4:6a:b7:
bd:39:98:ef:53:50:a1:76:d9:2f:25:6c:45:02:09:b0:2b:9c:
c6:1d:a5:5e:bf:72:ee:29:10:59:04:3d:5a:64:72:4d:f9:f3:
84:ff:36:5f:25:b8:0d:f4:c0:09:52:99:35:87:46:e9:f3:fd:
1e:0b:4f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:29 2024 by rpki-client on console-ams.rpki-client.org