Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/wXwzoRwpozqkZRxCEkxNeC_0jh4.roa
File: wXwzoRwpozqkZRxCEkxNeC_0jh4.roa (raw, json)
Hash identifier: tyk9EiK7JFju7kzhj0jl98GTFjoFrfZLrJpzhO41GjE=
Subject key identifier: C1:7C:33:A1:1C:29:A3:3A:A4:65:1C:42:12:4C:4D:78:2F:F4:8E:1E
Certificate issuer: /CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Certificate serial: 01856BB80AF654E8CA82A503B9007E7542DC
Authority key identifier: 2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/wXwzoRwpozqkZRxCEkxNeC_0jh4.roa
Signing time: Sun 01 Jan 2023 05:05:01 +0000
ROA not before: Sun 01 Jan 2023 05:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47268
IP address blocks: 195.216.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Feb 2023 10:18:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:b8:0a:f6:54:e8:ca:82:a5:03:b9:00:7e:75:42:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Validity
Not Before: Jan 1 05:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c17c33a11c29a33aa4651c42124c4d782ff48e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2d:82:a6:0c:71:68:00:9e:b9:77:f0:80:f1:
72:bc:6c:37:21:cc:53:8c:97:51:cf:54:3c:df:dd:
5d:e2:ba:d0:f9:9c:85:30:a9:2c:4e:37:e2:35:78:
0f:7f:a3:87:7f:c4:00:30:1c:07:f5:22:b4:08:25:
66:82:9e:e5:4d:ef:57:1c:9d:ef:6b:bc:69:e2:9d:
0c:61:b6:17:bd:38:90:be:95:40:53:15:2a:26:0e:
20:c8:13:3a:c9:de:85:28:b5:87:c9:77:dc:c1:84:
33:a6:26:41:dd:3c:dc:cb:45:db:3b:9a:60:e1:5a:
31:01:a7:d9:e0:87:2a:73:13:aa:b8:6a:d7:a2:8a:
27:9d:d6:1f:d1:58:f0:a3:f2:ab:b2:1a:cc:84:d5:
74:db:9f:66:18:9a:ae:9d:97:df:80:83:a8:4d:0c:
5e:25:54:a9:44:5c:58:57:db:bc:34:8d:f2:f5:57:
03:a5:af:5f:e5:e9:49:89:12:73:bb:10:1b:7c:29:
a5:00:c4:41:da:85:74:a5:b8:0a:5e:2d:27:24:56:
8a:31:ed:90:31:cb:07:b1:6c:d4:2e:1f:9e:43:87:
09:3e:f1:83:34:9e:70:9b:f8:6a:de:ec:98:d0:b2:
2e:7b:cc:c0:6c:bb:19:bd:b1:74:dd:ba:9e:34:16:
06:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7C:33:A1:1C:29:A3:3A:A4:65:1C:42:12:4C:4D:78:2F:F4:8E:1E
X509v3 Authority Key Identifier:
keyid:2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/wXwzoRwpozqkZRxCEkxNeC_0jh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.249.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:6f:7e:31:36:bb:8d:60:71:5b:b2:d9:c0:47:80:5b:8e:25:
92:7c:33:12:f4:12:e3:83:d4:d8:ac:08:97:b7:c7:37:40:96:
24:c6:29:c7:8a:51:a1:26:4c:68:28:50:50:9b:c9:cf:80:75:
66:08:c6:6c:10:c8:57:d2:12:a2:1f:f8:7d:e7:39:b3:13:c0:
ff:35:18:6c:63:5b:b3:0a:e9:93:af:4e:1b:67:83:71:a9:80:
69:30:ac:db:59:30:1f:ea:b0:8f:33:f6:82:86:8b:bc:5a:60:
a7:6e:36:7b:92:f5:bf:a0:74:fd:81:df:ab:b1:60:f0:8e:ed:
88:fb:cc:4b:62:ae:78:6d:05:66:36:25:d8:9a:c9:d6:e1:27:
33:3d:9a:a1:9b:22:f7:b1:01:87:e4:32:db:0e:4e:9d:58:16:
ef:00:75:bb:d3:0a:94:3e:10:ed:de:c8:25:be:58:2e:75:d5:
78:c0:01:9e:cb:f2:e3:96:51:39:44:1e:c7:48:bc:d5:32:8b:
a8:ad:9f:a8:6c:88:91:37:e6:c0:75:56:92:22:a7:f8:4e:d7:
6e:07:82:1d:ea:3c:eb:bd:9f:f4:24:8f:a2:a9:f8:30:05:fb:
ae:cb:e1:9e:ad:1a:4d:ca:5a:1a:a4:c1:51:35:3d:59:1b:07:
7e:0d:4a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:03 2024 by rpki-client on console-fra.rpki-client.org