Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/dT49rO8A3CCviwyW8em1YE15IFY.roa
File: dT49rO8A3CCviwyW8em1YE15IFY.roa (raw, json)
Hash identifier: +x+hgX9B1tdd3P/G97k7/xtfmL6I7onx95NAfbVe4wQ=
Subject key identifier: 75:3E:3D:AC:EF:00:DC:20:AF:8B:0C:96:F1:E9:B5:60:4D:79:20:56
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 018CC5DC41B0C4FB7FEC87D2C94100AB8420
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/dT49rO8A3CCviwyW8em1YE15IFY.roa
Signing time: Mon 01 Jan 2024 16:29:55 +0000
ROA not before: Mon 01 Jan 2024 16:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34879
IP address blocks: 195.209.72.0/23 maxlen: 24
195.209.74.0/24 maxlen: 24
195.209.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 08:44:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:41:b0:c4:fb:7f:ec:87:d2:c9:41:00:ab:84:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 1 16:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=753e3dacef00dc20af8b0c96f1e9b5604d792056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d6:1b:07:18:56:30:38:51:0e:18:bd:bb:99:
48:63:d0:0c:d7:97:6b:22:9c:20:50:0a:9c:d4:57:
d6:f0:96:ab:ae:9c:23:a6:3a:a0:ee:55:65:fa:55:
05:03:03:c3:2c:54:fa:13:54:b8:2e:b6:96:0c:c2:
53:61:95:a6:95:a6:38:19:78:c9:bf:92:11:bb:db:
9e:4a:61:0e:fb:96:d1:5f:d7:cc:dd:15:1f:a8:c2:
fc:bb:be:41:3b:10:cb:62:b6:af:4b:e8:03:7d:2b:
ec:69:fe:51:97:9c:74:a8:d7:d3:d3:c3:6e:d0:bd:
2f:2b:f8:d0:60:88:0c:40:fa:be:40:e5:0d:7e:6b:
e1:79:d5:70:cd:1d:e8:cb:53:b7:4f:c5:45:cc:d3:
d7:3f:5b:1c:6e:c5:b2:41:d6:59:f1:74:18:8b:d9:
08:f0:e7:a1:cf:e2:b9:5c:10:a7:1b:d4:32:66:3c:
4d:88:7f:db:9f:01:45:ba:32:ea:8f:e4:ba:8f:63:
ab:ad:a4:20:00:4c:4d:b0:aa:1d:9e:33:1f:5a:1c:
b1:94:36:01:d3:f8:93:53:7f:48:bf:46:cb:a0:4d:
55:4c:ce:34:0d:97:cf:59:a8:e4:52:54:04:26:f9:
8a:1c:b9:01:ec:64:ae:52:53:ae:82:bc:36:ac:bc:
d6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3E:3D:AC:EF:00:DC:20:AF:8B:0C:96:F1:E9:B5:60:4D:79:20:56
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/dT49rO8A3CCviwyW8em1YE15IFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.209.72.0-195.209.74.255
195.209.77.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:88:8d:c6:0c:e2:f9:83:db:de:81:4e:97:ff:3c:09:11:8a:
6f:b2:46:b5:05:6e:d4:2c:d4:81:17:05:68:be:76:e2:18:31:
e7:92:a1:71:49:53:9e:f3:dd:06:29:80:7f:cb:e9:8e:c6:17:
45:80:68:0a:0c:b8:f7:44:c7:15:52:0f:55:d3:ed:ba:46:1b:
b5:33:ea:67:78:d7:72:52:32:b5:70:4f:7f:06:0d:2c:75:a4:
66:40:31:9d:06:a5:c1:b7:92:dd:82:74:e5:e1:40:12:31:37:
79:32:54:18:1b:4b:7d:b5:15:8f:6e:f5:aa:41:d4:92:47:2a:
4a:54:03:ad:e4:7f:e9:ae:d1:ac:f3:11:ac:2f:91:a1:0e:e8:
3c:42:df:61:e5:24:00:ea:4b:e3:f9:3e:ee:64:1b:47:2f:66:
ca:f2:4c:ab:c5:da:5a:e5:ea:f3:34:c3:c7:43:71:ae:b2:24:
d1:c6:2d:f8:b9:42:9c:56:0f:f7:0f:34:94:2e:47:e8:14:3a:
c4:99:e2:74:85:82:18:df:77:ca:20:29:19:36:d6:2b:13:19:
a4:80:c0:4d:ed:9d:5f:fa:02:a0:c6:83:ad:08:15:db:53:63:
02:31:a3:7a:54:49:5b:d0:c2:90:b5:63:dc:d7:eb:40:c7:9e:
77:6c:7f:9a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:56 2024 by rpki-client on console-fra.rpki-client.org