Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/rNDipcwOPOkMtUfzVrSFcL78d4A.roa
File: rNDipcwOPOkMtUfzVrSFcL78d4A.roa (raw, json)
Hash identifier: jEE8hrjUXJOX39bFaww/0awzWejMt/MsgjIXh7aMHAs=
Subject key identifier: AC:D0:E2:A5:CC:0E:3C:E9:0C:B5:47:F3:56:B4:85:70:BE:FC:77:80
Certificate issuer: /CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Certificate serial: 01856F02499221876FE64D4EAA11860CC236
Authority key identifier: 4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/rNDipcwOPOkMtUfzVrSFcL78d4A.roa
Signing time: Sun 01 Jan 2023 20:24:58 +0000
ROA not before: Sun 01 Jan 2023 20:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 195.82.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:49:92:21:87:6f:e6:4d:4e:aa:11:86:0c:c2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Validity
Not Before: Jan 1 20:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=acd0e2a5cc0e3ce90cb547f356b48570befc7780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:75:ae:6b:0f:69:08:6b:d0:69:78:5f:90:8f:
6c:e4:ad:da:68:57:2e:20:2d:2d:6a:e0:7f:b5:63:
7c:4c:ba:23:fd:37:2b:86:88:29:83:40:72:28:52:
42:03:0e:8d:05:01:3c:a1:d4:4d:39:0b:57:27:da:
9c:c5:7e:61:2e:fb:92:47:f8:c0:58:f9:0a:2d:c3:
12:37:a8:56:da:8c:13:ce:87:3f:b9:64:2a:86:ea:
83:87:af:27:d0:28:42:d7:2e:52:ed:18:14:03:14:
81:e6:6b:aa:20:36:43:ef:17:1f:46:ec:d0:3c:75:
da:0f:c5:de:c1:a2:52:a1:6b:a6:80:60:8c:ff:aa:
5a:dd:e6:68:53:cf:bc:09:c8:7d:82:50:0d:68:7c:
93:99:28:e8:04:cf:d6:de:a1:29:dd:81:57:6f:c7:
c3:0d:af:7d:a5:05:8f:b7:3d:5a:37:58:1b:52:05:
e0:4e:c3:d0:bf:b6:99:c3:39:fb:fc:16:cf:be:a1:
aa:b7:c9:87:39:ed:49:cd:47:03:58:63:c7:6b:3a:
59:81:5c:35:b5:2c:84:7a:7f:03:85:64:e3:54:c3:
d1:e4:c5:35:28:4d:e0:b5:89:be:63:7c:39:b4:41:
a3:c0:42:7a:98:77:19:9e:46:82:15:b2:54:8f:4f:
45:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D0:E2:A5:CC:0E:3C:E9:0C:B5:47:F3:56:B4:85:70:BE:FC:77:80
X509v3 Authority Key Identifier:
keyid:4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/rNDipcwOPOkMtUfzVrSFcL78d4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.82.97.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:90:ef:46:eb:96:c7:ab:d9:bb:88:3b:49:97:af:6f:c5:31:
1c:9c:8b:0e:ee:3c:47:74:f9:67:2d:fb:2f:77:75:07:d2:57:
2c:b9:f6:c2:6e:9d:75:18:b7:d8:1a:c0:88:9a:db:99:0f:40:
50:4c:96:ec:2e:af:81:2b:0d:c0:c1:56:e2:16:d0:bc:bc:b6:
65:c6:cd:00:51:d0:7a:a7:b0:b8:46:fc:47:3d:af:47:75:07:
7d:48:84:52:03:ac:82:38:b9:8b:59:1b:59:db:87:57:8e:34:
04:c6:d5:f3:84:2b:18:99:66:21:63:45:b7:8f:5f:e8:5c:c3:
1b:0a:5b:5a:ae:28:13:76:30:52:fc:13:6e:22:21:b4:82:cf:
d6:62:81:e8:3f:2c:7a:f3:79:5b:fa:d9:94:b9:f6:f9:29:38:
38:9e:2e:84:ee:c2:bd:ad:d4:21:d2:83:47:de:ea:89:68:e1:
4e:47:b2:0e:3e:99:c1:62:07:38:d6:b9:28:ae:c3:51:79:87:
9b:b8:ee:99:4f:09:69:4b:1b:5d:1a:8c:47:14:ae:b3:13:c8:
e6:fb:1d:ac:94:64:73:02:d2:4f:b9:71:99:d3:43:a8:81:a2:
2f:b1:2d:14:ba:d8:99:3a:1a:86:88:4f:0b:85:b8:f9:b7:3e:
73:89:fc:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:09 2024 by rpki-client on console-ams.rpki-client.org