Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/RutZSe5ddCftxKcAmImtA1rhGOk.roa
File: RutZSe5ddCftxKcAmImtA1rhGOk.roa (raw, json)
Hash identifier: KQ33XBeLArg4cCeWXPJxOjp/ovdm4y+IwxJFGLnabmc=
Subject key identifier: 46:EB:59:49:EE:5D:74:27:ED:C4:A7:00:98:89:AD:03:5A:E1:18:E9
Certificate issuer: /CN=617252ebbb33484adcec7405adea4de08a0afb04
Certificate serial: 01856D9D076D0C9D1EDD295A3F2EF475FE71
Authority key identifier: 61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/RutZSe5ddCftxKcAmImtA1rhGOk.roa
Signing time: Sun 01 Jan 2023 13:54:45 +0000
ROA not before: Sun 01 Jan 2023 13:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34420
IP address blocks: 195.149.119.0/24 maxlen: 24
195.170.167.0/24 maxlen: 24
2a0b:8bc7::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:07:6d:0c:9d:1e:dd:29:5a:3f:2e:f4:75:fe:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617252ebbb33484adcec7405adea4de08a0afb04
Validity
Not Before: Jan 1 13:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46eb5949ee5d7427edc4a7009889ad035ae118e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:09:22:ba:c7:6c:1a:bc:26:27:22:33:24:b7:
d1:bf:5b:f4:9f:92:3d:00:db:70:47:23:f5:c3:1d:
98:0d:c0:02:6a:27:54:3a:15:f0:6c:2a:44:43:c2:
9e:72:92:ea:79:6d:b1:a1:c9:80:17:16:89:e7:57:
0b:7d:69:7d:a8:29:e2:14:1a:74:8b:95:78:a4:4a:
ac:4a:9d:c5:ed:61:6d:97:9f:09:80:de:7e:3a:b9:
12:1a:26:41:e5:65:98:e2:98:60:a5:49:f2:34:6b:
22:1a:f6:7e:ab:e8:dd:67:d2:7f:fd:55:23:e2:3e:
be:f5:2a:1b:d7:a1:32:cc:6f:1c:bd:a0:4e:c9:69:
d1:37:24:19:15:01:20:60:a8:47:08:b1:c6:da:73:
b0:4c:54:30:e8:b6:f0:b1:bf:59:ae:bf:af:bf:18:
80:12:d4:2e:78:77:94:a0:f1:aa:01:ee:6f:ce:c3:
32:b6:53:17:0c:1f:52:b1:63:f0:25:64:36:93:e7:
54:7d:1d:25:ef:fd:83:cb:10:1c:d9:90:e0:01:6d:
75:85:ea:ba:d3:11:ef:e4:4b:4d:b5:03:d4:14:ba:
c2:e3:82:e1:52:82:5d:2a:0c:9a:e5:19:de:6c:35:
93:e1:a2:7e:31:c3:bb:8b:f4:49:a8:42:b6:27:eb:
6b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EB:59:49:EE:5D:74:27:ED:C4:A7:00:98:89:AD:03:5A:E1:18:E9
X509v3 Authority Key Identifier:
keyid:61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/RutZSe5ddCftxKcAmImtA1rhGOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.119.0/24
195.170.167.0/24
IPv6:
2a0b:8bc7::/32
Signature Algorithm: sha256WithRSAEncryption
16:fb:9f:ba:0d:bd:bc:89:07:bd:1f:cf:92:4a:f1:bc:1b:3c:
2d:43:d7:ff:47:c0:29:00:2d:f2:51:78:1c:38:10:db:26:97:
11:57:88:52:90:b5:6e:4c:d2:04:86:b4:ed:b3:df:28:fe:d8:
be:5e:72:32:dc:eb:80:81:2c:8b:e8:51:6d:63:51:27:a2:96:
40:8e:cb:bc:54:9a:30:80:ba:11:47:e9:99:07:62:83:d8:00:
87:48:ca:e3:7e:3f:63:7c:b9:9a:e3:9a:a5:21:ed:e5:e8:4f:
b3:f6:6a:97:71:f3:4d:18:c3:cf:46:9e:32:be:84:a8:8e:5b:
0e:25:18:38:ee:ba:99:88:4a:d6:53:f7:28:77:15:6a:ee:82:
0c:b9:f8:0a:e4:a1:8d:c6:ad:e3:68:3e:a9:6c:67:a5:a6:29:
42:27:dd:cd:86:5d:75:1d:9d:3c:7b:51:5c:26:25:a3:dd:fd:
2b:00:c5:41:6d:d7:e3:2b:4f:63:01:a1:c2:fa:9b:52:b8:cc:
67:6a:a4:16:8a:3c:ac:07:6b:63:5b:d7:5a:5a:b2:d3:72:2e:
a5:70:ed:de:3e:f0:99:d9:0e:3f:6b:39:fc:5d:d9:04:7c:91:
36:8c:32:c7:e9:50:59:c2:78:e4:1c:ae:63:60:9a:ce:f6:a2:
3b:59:dd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:02 2024 by rpki-client on console-ams.rpki-client.org