Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/7tSGOQRGVsqIddlKsfRl-utKob4.roa
File: 7tSGOQRGVsqIddlKsfRl-utKob4.roa (raw, json)
Hash identifier: uhnixiO93ggTejqXebsJHiUR/uvjoTtaeMA/lwWhiC8=
Subject key identifier: EE:D4:86:39:04:46:56:CA:88:75:D9:4A:B1:F4:65:FA:EB:4A:A1:BE
Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial: 018ACC75A78410E5055290A4A0C926FDF762
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/7tSGOQRGVsqIddlKsfRl-utKob4.roa
Signing time: Mon 25 Sep 2023 13:09:37 +0000
ROA not before: Mon 25 Sep 2023 13:09:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42298
IP address blocks: 195.219.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cc:75:a7:84:10:e5:05:52:90:a4:a0:c9:26:fd:f7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
Validity
Not Before: Sep 25 13:09:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eed48639044656ca8875d94ab1f465faeb4aa1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e9:01:62:d5:58:3f:3a:c8:b9:ba:fa:91:93:
e9:fd:67:37:9d:d8:d6:62:16:1a:39:8f:13:29:ec:
2f:85:5f:3f:36:38:e2:32:98:01:fd:2e:a9:86:50:
c6:07:fd:95:30:11:4f:39:72:e2:75:1f:e0:9a:c3:
5f:f2:89:b3:9c:ae:fe:ed:0b:96:9c:fe:13:3d:72:
0f:1e:61:79:6d:69:5d:83:b4:3f:03:50:3d:b8:33:
c5:fa:f6:18:f1:24:18:9b:4d:fa:b8:c2:a7:6e:e9:
9c:f0:91:29:b8:b2:3d:08:ca:67:55:75:1a:f4:5d:
3c:b0:c9:bc:c1:db:37:be:99:2d:35:67:4d:33:8f:
a3:34:09:b5:d9:5b:b0:c1:9b:95:55:d0:7e:85:97:
bd:be:fe:6d:42:73:9d:34:93:22:fa:40:d8:77:d1:
8c:4e:79:c8:84:59:aa:ba:43:a9:fd:d6:f2:1a:a2:
13:24:09:9f:f1:ca:b5:6a:c1:cd:71:20:11:4a:fe:
df:69:6d:26:29:96:97:30:4c:0d:4b:a5:f9:e7:9e:
fa:09:4f:0d:1f:34:61:c3:f3:78:44:6a:a3:e5:cd:
8f:56:3d:f0:b2:27:83:31:4f:07:ab:24:dc:97:ce:
17:0a:13:f6:93:59:bf:c5:74:c7:62:c7:64:92:16:
2d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D4:86:39:04:46:56:CA:88:75:D9:4A:B1:F4:65:FA:EB:4A:A1:BE
X509v3 Authority Key Identifier:
keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/7tSGOQRGVsqIddlKsfRl-utKob4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.219.42.0/24
Signature Algorithm: sha256WithRSAEncryption
ec:93:7b:e4:51:8d:d5:a7:42:87:6e:21:b5:fd:10:59:9e:3b:
72:72:c3:80:6d:7b:51:b5:a0:9b:97:76:31:50:28:62:d3:67:
f3:03:e2:80:61:c1:b3:b3:34:81:fa:58:d5:3b:7d:84:e9:d7:
0c:3d:d8:09:4b:15:7f:b3:87:4a:f5:ef:0e:94:c3:2c:e5:73:
7a:cb:c8:ef:56:92:5d:5e:f0:cc:be:9f:99:e5:6e:08:ad:ba:
04:46:d6:af:ca:5c:5a:f4:76:00:ec:74:b0:63:c3:38:07:37:
a8:6e:5c:77:43:06:60:64:ad:62:ed:8d:6d:d8:4c:15:a8:bb:
08:5c:b7:b1:95:1e:96:fe:fe:56:23:fa:3c:9b:fc:9e:ed:a6:
7e:65:da:98:01:1f:03:0d:55:b3:35:57:ac:9b:a3:3c:d7:4d:
ee:40:58:45:d4:0c:cb:64:29:1d:32:a8:7e:a0:8d:19:29:76:
43:0d:7f:57:c8:a8:1a:44:db:99:52:7a:79:d9:c0:83:5f:d3:
4c:e5:e8:c6:5d:f9:1e:77:64:30:cb:88:6a:c1:89:12:76:c8:
d5:e6:c3:02:a1:bc:01:68:ef:49:80:be:c5:36:f1:09:84:fb:
c4:2b:1c:be:09:af:09:37:73:88:8d:b3:3b:b2:4d:0a:74:83:
bd:e0:e0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:19 2024 by rpki-client on console-ams.rpki-client.org