Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/Czc-OSth8MiUdNeDFth6Obrh4a4.roa
File: Czc-OSth8MiUdNeDFth6Obrh4a4.roa (raw, json)
Hash identifier: lrX0XmaQlhqhJsiQbLgqrplGvxMDUgoGFbbmL1PZoxs=
Subject key identifier: 0B:37:3E:39:2B:61:F0:C8:94:74:D7:83:16:D8:7A:39:BA:E1:E1:AE
Certificate issuer: /CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Certificate serial: 01856F024ADCA505CFFFE7E937C488DF2AD4
Authority key identifier: 4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/Czc-OSth8MiUdNeDFth6Obrh4a4.roa
Signing time: Sun 01 Jan 2023 20:24:59 +0000
ROA not before: Sun 01 Jan 2023 20:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 195.82.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:4a:dc:a5:05:cf:ff:e7:e9:37:c4:88:df:2a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Validity
Not Before: Jan 1 20:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b373e392b61f0c89474d78316d87a39bae1e1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:4e:5c:16:73:f5:cf:f4:91:50:a2:76:03:
7d:b9:f4:54:40:42:06:ff:e0:a5:e6:b2:06:04:e7:
67:5a:a5:09:e0:41:b0:a3:ec:e7:c6:b8:40:6a:19:
02:05:5b:f3:cf:60:9d:04:67:d6:99:1e:b6:d0:5f:
48:2b:75:2b:a0:a4:b8:a7:74:b1:ce:9c:bd:82:96:
c9:7d:4f:c3:99:4a:a4:c0:cf:b4:47:02:5e:74:fc:
6c:7a:20:f5:2c:e8:0f:b8:2d:a4:35:c1:64:20:4e:
41:4d:7b:1a:06:db:94:19:45:32:a9:cc:9e:12:b0:
87:d7:a6:f5:50:c5:7d:b4:bd:40:eb:92:0b:77:5a:
f2:82:a2:46:41:94:32:53:70:68:5d:f0:6b:a7:17:
86:c8:b7:54:be:85:66:7a:e3:20:fa:6d:17:17:cc:
47:5f:b4:6a:ae:50:a2:49:5a:cb:d5:64:4b:58:5e:
9e:be:00:a7:e4:08:d4:fe:ca:fd:be:c5:03:12:f7:
69:6d:b9:6c:38:1a:ba:ae:2e:85:87:1a:83:9a:ba:
81:dd:a7:41:54:00:0d:c4:43:e8:a0:9f:b1:d7:14:
af:df:79:49:f3:e8:c8:2b:6d:62:af:b1:b1:98:cf:
14:1f:2b:16:30:0b:ed:f7:e5:5f:d4:1a:30:6b:59:
ee:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:37:3E:39:2B:61:F0:C8:94:74:D7:83:16:D8:7A:39:BA:E1:E1:AE
X509v3 Authority Key Identifier:
keyid:4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/Czc-OSth8MiUdNeDFth6Obrh4a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.82.97.0/24
Signature Algorithm: sha256WithRSAEncryption
13:1e:d9:ab:38:5f:f1:19:3d:cc:a7:da:aa:03:34:a6:49:ae:
2f:de:fc:40:1c:4d:a6:61:f8:4a:28:4c:2e:a4:d7:7b:30:b4:
1b:e0:ac:4d:84:d9:c7:6f:2e:49:bc:95:f1:0f:67:82:09:54:
b0:f3:19:9d:21:9c:af:74:46:93:98:aa:21:c3:dc:f2:70:88:
f9:2a:82:93:5c:f7:ae:e0:09:20:98:20:2b:e3:70:d2:eb:a9:
84:31:ba:91:b9:ad:8a:1a:46:e6:36:f4:11:fa:8a:41:c2:0f:
6a:8b:cb:17:5f:b7:d4:ac:90:e1:b0:13:b0:5a:08:ed:e8:10:
a5:6b:85:49:a6:6c:73:5a:04:ff:82:c4:8e:f0:58:a6:64:ab:
56:1a:c3:f7:de:78:91:32:3a:8b:72:cf:c2:9d:db:9f:a8:a1:
66:82:a5:2c:5d:18:5e:2b:df:e3:89:c3:d7:67:91:b5:63:0c:
4f:3e:32:ea:ee:bc:03:a9:48:05:f6:1a:fc:b2:c4:01:81:84:
e8:21:9f:88:b0:d2:44:a0:53:a7:b5:00:29:bf:61:5d:60:89:
c9:a5:fb:2f:d5:14:5b:f8:c6:3c:70:5e:95:60:31:d4:72:4e:
19:22:6f:71:ec:78:b3:90:d7:e0:68:6b:78:3d:54:bd:01:d1:
a5:a1:75:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:51 2024 by rpki-client on console-fra.rpki-client.org