Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/eMpuOjuo4krsIVg17EE-IajMdpk.roa
File: eMpuOjuo4krsIVg17EE-IajMdpk.roa (raw, json)
Hash identifier: o/Hi0GywlYW1NSD0jYLgQUuSKiWdbpEf0D38n35ZKgY=
Subject key identifier: 78:CA:6E:3A:3B:A8:E2:4A:EC:21:58:35:EC:41:3E:21:A8:CC:76:99
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0185E7A2A357D73D6719ADF2BD3503B6165E
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/eMpuOjuo4krsIVg17EE-IajMdpk.roa
Signing time: Wed 25 Jan 2023 06:34:33 +0000
ROA not before: Wed 25 Jan 2023 06:34:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34879
IP address blocks: 195.209.74.0/24 maxlen: 24
195.209.72.0/23 maxlen: 24
195.209.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e7:a2:a3:57:d7:3d:67:19:ad:f2:bd:35:03:b6:16:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 25 06:34:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78ca6e3a3ba8e24aec215835ec413e21a8cc7699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b5:e1:6b:6e:bc:39:84:50:c8:62:38:36:f3:
24:2d:d3:cf:99:1d:6f:cc:9a:c8:10:19:b2:e9:3b:
7c:05:c6:9f:f1:88:1e:05:3e:2f:b9:a3:e8:96:74:
00:33:a0:96:64:bb:ee:d5:f5:b0:43:d4:86:a8:55:
f4:ba:ed:43:56:db:6b:de:38:49:30:cf:2f:c6:8e:
7e:98:ed:0b:a4:51:36:21:7c:d6:3d:41:c2:5a:3e:
f9:65:8a:c8:e3:99:24:52:1c:06:ee:ff:9e:10:aa:
f9:1f:19:c8:2c:64:93:4b:ff:90:2b:62:db:4e:aa:
7f:d8:d4:f5:bf:44:16:0e:8b:88:b0:87:59:a2:9c:
85:4a:b1:ca:fe:8c:af:5a:c3:35:84:fb:1e:af:4b:
ac:85:a8:84:0e:5e:ee:b4:53:07:26:6b:62:0c:e4:
39:cf:a9:52:2a:4c:9a:08:74:82:7d:90:73:be:0d:
25:bd:c1:52:e4:3b:d7:65:4e:a6:c2:ca:f9:10:b5:
5a:63:2b:0d:20:5a:a6:59:8b:9e:1e:d0:82:b1:73:
fd:df:77:30:35:c8:fd:48:d4:9a:e9:ca:cf:ee:6d:
8b:1f:d4:5d:b8:e4:91:f1:62:8f:a1:0e:e6:94:dc:
5d:b3:25:87:04:9f:0d:1e:de:4a:e5:27:26:e5:78:
2f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CA:6E:3A:3B:A8:E2:4A:EC:21:58:35:EC:41:3E:21:A8:CC:76:99
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/eMpuOjuo4krsIVg17EE-IajMdpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.209.72.0-195.209.74.255
195.209.77.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:8c:24:8c:ae:e1:cd:0b:10:2b:56:3d:3e:ca:99:af:35:f5:
be:83:cc:99:c3:65:e3:75:b5:7e:81:0f:e4:96:bb:ea:98:2e:
b7:54:e6:65:2b:f4:94:79:ef:dd:2e:f8:ef:4e:85:26:22:f6:
e5:6d:94:1c:41:90:d6:54:5a:d5:e7:ea:ce:8a:b7:ff:2c:0b:
76:70:c7:41:cc:f3:af:3d:19:6c:de:0d:7f:5a:b6:9b:64:0a:
54:51:3b:6f:cf:ba:e0:a1:59:3d:a8:2e:07:0c:b5:d7:27:2f:
1d:75:a8:a3:d2:0c:3a:d3:ad:a2:f1:ee:eb:d0:8b:43:cc:c5:
1b:42:3d:d6:76:ed:c7:ed:09:e4:da:39:32:43:6b:be:02:15:
7d:4d:fb:d8:a0:51:d7:35:5d:de:44:af:82:11:a8:73:e8:6e:
1c:38:9a:1a:a2:e8:18:18:05:6d:3e:43:3e:fa:b2:8d:05:6f:
76:cd:9e:3f:de:1d:0f:f1:c0:e2:51:3c:8a:e5:d7:e0:11:ff:
82:48:55:bb:c7:1e:3b:74:a8:e0:f0:73:74:17:99:ce:83:b0:
83:d2:12:3b:3e:ee:18:55:a2:53:a4:43:98:8b:6b:78:19:6c:
87:17:3d:2a:fd:62:58:74:cc:fd:43:44:db:79:44:a0:49:ae:
31:dc:ca:1b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:56 2024 by rpki-client on console-fra.rpki-client.org