Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/DysHb7t28Pa5uErCE2vPjTzApps.roa
File: DysHb7t28Pa5uErCE2vPjTzApps.roa (raw, json)
Hash identifier: 3/ZZNr9L4V3QSl/+D2ahVUzg6GMO3K/Fp3VnE1ClGes=
Subject key identifier: 0F:2B:07:6F:BB:76:F0:F6:B9:B8:4A:C2:13:6B:CF:8D:3C:C0:A6:9B
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 01856C53F378AF6508DFCC6C75EFA1B77001
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/DysHb7t28Pa5uErCE2vPjTzApps.roa
Signing time: Sun 01 Jan 2023 07:55:19 +0000
ROA not before: Sun 01 Jan 2023 07:55:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35123
IP address blocks: 195.225.52.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:f3:78:af:65:08:df:cc:6c:75:ef:a1:b7:70:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jan 1 07:55:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f2b076fbb76f0f6b9b84ac2136bcf8d3cc0a69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2c:27:13:ce:59:a5:f6:d3:84:7c:66:8c:25:
57:21:c2:4b:f0:d2:94:4f:6f:7f:6c:46:7c:79:61:
8a:8e:7e:bf:9e:a4:07:5a:a4:a3:36:61:48:f4:66:
b4:3a:3b:5f:23:d8:56:e1:f7:05:b9:1b:14:f0:ee:
0f:56:60:c7:8f:7e:7c:bc:e6:ae:83:7b:38:38:c4:
2b:03:23:e9:9d:d5:a0:2f:2f:79:f3:85:18:7a:bd:
2b:f4:38:94:5c:6c:61:ee:27:c0:07:13:31:65:63:
6f:67:6f:a5:04:cb:f3:77:de:a6:48:b5:c3:5a:16:
99:17:37:19:96:69:d2:50:ec:a2:05:fd:6d:18:fc:
da:4e:24:c0:c2:f4:16:b7:cd:79:35:4d:38:69:e9:
e3:4d:d2:61:90:91:b7:5e:48:1f:a6:50:53:e2:60:
46:7c:3c:2e:e2:7d:6b:d0:2b:55:17:cb:8a:ea:3e:
32:5b:dd:43:65:72:25:b2:11:e0:97:3e:a8:f4:c6:
e2:58:2b:c3:18:f5:d6:bb:a7:8a:09:56:c3:76:13:
27:07:7a:e5:0c:39:fb:f5:b8:2b:d3:25:f1:f5:b3:
36:83:23:12:3f:3b:70:41:0c:8e:a5:4b:a4:28:ce:
de:3d:6f:b5:d5:57:19:96:df:39:4e:08:ff:0b:a5:
f5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2B:07:6F:BB:76:F0:F6:B9:B8:4A:C2:13:6B:CF:8D:3C:C0:A6:9B
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/DysHb7t28Pa5uErCE2vPjTzApps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.52.0/23
Signature Algorithm: sha256WithRSAEncryption
70:1b:9e:f0:33:56:9e:40:fe:f9:4f:31:e3:1f:c6:f6:b4:ea:
11:19:0f:27:ab:8d:ce:48:0f:cf:ba:18:8f:5e:bc:6c:5b:6a:
4b:a2:0a:48:79:48:77:3f:66:ba:a8:65:e2:05:75:54:c4:96:
82:3e:24:f7:ad:e8:1c:94:2a:04:ed:bb:12:49:f0:a2:ac:01:
ca:17:61:98:cb:2a:d6:ca:19:df:fa:b7:7e:f6:0e:25:ec:85:
a5:80:4f:d9:8a:b0:07:89:d4:64:46:f0:ca:d8:f5:44:f7:0f:
e8:08:8c:d7:ee:e9:c4:79:d6:af:8f:db:e6:f1:05:ba:4f:f4:
3d:7f:ae:88:b4:6e:f0:6a:4e:d0:25:41:0e:a8:dc:de:18:de:
e7:34:db:8e:a7:c8:a2:5d:48:98:c1:e5:12:da:8a:40:49:a8:
4b:d4:4f:c6:31:f6:23:f1:c4:58:a6:5f:94:fa:46:42:53:b7:
66:27:f8:6d:3c:61:e6:a0:b3:fa:4f:6e:01:2a:03:e4:e5:26:
e4:7c:46:88:cc:21:b1:ab:c1:92:79:8f:46:b6:1e:22:3b:41:
9a:80:26:e6:5b:0e:d9:72:ba:92:40:76:64:40:4a:a2:19:f6:
b6:1a:00:87:a8:03:42:c0:c0:f6:3f:d2:a3:26:37:ca:64:3d:
a7:c8:e2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:32 2024 by rpki-client on console-fra.rpki-client.org