Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/qAdMDIsZVsjWkURXiUElrfKNRaQ.roa
File: qAdMDIsZVsjWkURXiUElrfKNRaQ.roa (raw, json)
Hash identifier: jQUl/krZI4W9cmPITpTIK+i3WWNbmI4F2UsFrLEF0Go=
Subject key identifier: A8:07:4C:0C:8B:19:56:C8:D6:91:44:57:89:41:25:AD:F2:8D:45:A4
Certificate issuer: /CN=b7848cd2393c1783657a05777ab315e398ebb23f
Certificate serial: 018B0921ADA33F0D809DA03C5FE6737A0533
Authority key identifier: B7:84:8C:D2:39:3C:17:83:65:7A:05:77:7A:B3:15:E3:98:EB:B2:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/qAdMDIsZVsjWkURXiUElrfKNRaQ.roa
Signing time: Sat 07 Oct 2023 07:54:43 +0000
ROA not before: Sat 07 Oct 2023 07:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29559
IP address blocks: 195.177.208.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:09:21:ad:a3:3f:0d:80:9d:a0:3c:5f:e6:73:7a:05:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7848cd2393c1783657a05777ab315e398ebb23f
Validity
Not Before: Oct 7 07:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8074c0c8b1956c8d6914457894125adf28d45a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:12:8c:60:bc:6a:c4:ab:e6:e7:f1:7a:71:ae:
4f:6b:1a:62:26:53:ee:01:f4:b7:21:34:09:2f:5c:
2f:05:9d:e5:8b:4b:89:a2:6c:1b:1d:35:bc:c3:f8:
b6:d6:fa:ed:f0:a9:a0:b0:90:47:02:8d:c9:c8:3d:
2d:55:a3:0b:96:c1:d6:e4:3e:42:c6:e9:5c:4d:6d:
4b:d1:ae:ed:eb:da:82:99:60:c2:49:72:41:64:a5:
15:43:f0:52:31:66:4d:9c:c4:51:d5:93:dc:e1:12:
40:af:7a:5c:57:84:51:d7:d2:3b:58:4a:1f:fb:d3:
88:5d:29:aa:3a:25:b9:79:49:98:12:c4:a0:46:c7:
4b:ce:63:43:77:19:0b:b1:6d:74:3d:8f:69:ec:6a:
bc:63:3b:98:73:39:c1:7a:d8:0c:33:a4:4f:fd:f6:
e5:0e:e2:49:2a:ac:7b:f7:67:05:a2:1a:4f:25:f8:
d0:0a:92:11:52:a7:29:77:d0:a0:a0:da:2f:48:77:
54:63:fa:20:85:c5:ba:4c:0e:ab:a8:43:aa:95:73:
4d:fc:0e:34:c7:fe:92:ce:6b:e6:90:bd:e7:46:93:
86:48:24:fc:fe:93:03:8f:47:b6:4a:24:64:6e:10:
a2:d4:21:27:ce:1f:1c:1f:62:03:0f:59:58:c3:00:
13:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:07:4C:0C:8B:19:56:C8:D6:91:44:57:89:41:25:AD:F2:8D:45:A4
X509v3 Authority Key Identifier:
keyid:B7:84:8C:D2:39:3C:17:83:65:7A:05:77:7A:B3:15:E3:98:EB:B2:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/qAdMDIsZVsjWkURXiUElrfKNRaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.208.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:29:04:d2:e4:e0:c3:28:06:e4:24:cd:44:98:a4:a4:00:77:
5b:32:2f:a0:6a:96:1e:0d:17:dc:21:c0:80:a9:fd:02:1b:c3:
e3:a7:4c:dc:80:60:3d:30:f2:3b:47:fc:77:a6:95:22:51:64:
09:15:5b:47:c3:42:f9:bd:32:b9:e6:49:94:be:da:ab:f8:4b:
3d:fb:93:c0:d2:68:09:3f:52:ed:f7:11:75:a5:4f:24:01:61:
94:a8:81:be:a2:81:2c:b1:df:ee:f9:72:a9:86:14:3b:f5:52:
f3:e2:3f:ed:0e:3b:4b:64:75:18:13:b3:13:78:f5:e7:1a:b3:
26:40:b3:0d:b8:e0:d7:fa:32:4f:8d:ea:6f:90:cb:b1:2f:a8:
46:8a:a1:b5:23:ef:1a:9c:25:33:af:61:a2:cb:f5:4a:3f:6a:
c6:14:a8:0c:5e:5e:2a:fe:8e:83:80:a9:03:f0:97:5d:9f:b6:
a7:60:9b:2c:f7:c5:2e:bb:ba:9e:bf:36:7f:be:3c:d4:f8:ba:
cf:b6:4e:f6:8b:96:b5:6d:e5:0b:13:1c:b3:3c:4f:47:78:17:
35:63:3e:ed:ab:8d:f9:97:1e:6f:04:a6:d7:b2:52:1d:f8:50:
54:6b:30:59:54:e5:b2:31:ef:da:ab:f6:dd:01:ff:23:d4:83:
35:9f:8c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:02 2024 by rpki-client on console-fra.rpki-client.org