Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/gCGXqU3fyNEBix49TbcvU-toCxo.roa
File: gCGXqU3fyNEBix49TbcvU-toCxo.roa (raw, json)
Hash identifier: hII6/nZMYrhhn6mCgYVgMb+1IFg7VVBzd71CdAHH/vE=
Subject key identifier: 80:21:97:A9:4D:DF:C8:D1:01:8B:1E:3D:4D:B7:2F:53:EB:68:0B:1A
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 018833447607A32D47ADF2D276C3F06A2527
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/gCGXqU3fyNEBix49TbcvU-toCxo.roa
Signing time: Fri 19 May 2023 09:08:24 +0000
ROA not before: Fri 19 May 2023 09:08:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 195.208.52.0/22 maxlen: 24
212.192.195.0/24 maxlen: 24
212.192.196.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 May 2023 17:47:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:33:44:76:07:a3:2d:47:ad:f2:d2:76:c3:f0:6a:25:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: May 19 09:08:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=802197a94ddfc8d1018b1e3d4db72f53eb680b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:81:f3:35:42:92:dd:ec:d7:0e:1a:5f:04:2e:
de:ff:5b:9f:31:c4:6d:e8:88:74:2c:01:eb:91:d0:
48:6d:d7:db:ce:e0:69:42:87:10:39:ce:e3:de:da:
ba:fe:91:e0:0f:42:be:04:a5:0a:86:0f:1e:24:45:
3d:27:ea:dd:dc:22:e2:ae:8e:83:01:b4:21:04:b5:
1a:cf:8f:25:4a:a6:af:90:2d:6a:0c:8f:c0:04:2d:
9f:1e:60:f9:66:d6:dc:23:89:02:c2:93:f0:5e:25:
90:17:f7:50:97:99:32:68:36:18:e4:f8:a9:cf:56:
89:d5:a6:ca:2f:d2:09:aa:fe:25:b5:8a:85:b3:a3:
e1:1a:1e:20:d4:46:47:c1:37:ec:0a:46:a8:ed:6c:
1a:c9:72:4b:c2:da:5a:44:c8:c6:94:6d:6a:91:b9:
cd:a7:83:69:5d:ab:56:a1:63:97:46:07:02:e8:dd:
a9:0a:31:54:66:d6:6d:c5:70:78:9a:65:6f:21:3b:
57:47:25:88:72:f2:4d:df:f3:a6:95:0c:78:fc:b2:
fe:4b:a2:fc:a9:80:56:5d:bd:c9:71:b3:73:0f:a2:
74:8c:56:c8:bd:bc:ab:02:52:d5:f1:8d:44:af:b9:
46:b9:05:88:bd:5c:83:2c:5b:c0:fe:59:7a:85:bf:
72:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:21:97:A9:4D:DF:C8:D1:01:8B:1E:3D:4D:B7:2F:53:EB:68:0B:1A
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/gCGXqU3fyNEBix49TbcvU-toCxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.208.52.0/22
212.192.195.0-212.192.199.255
Signature Algorithm: sha256WithRSAEncryption
b9:50:42:11:62:22:d4:8f:05:17:7f:1c:6f:91:fd:33:1d:12:
04:2f:8b:a3:39:87:49:bb:08:17:e5:33:75:d7:9d:fe:f2:f5:
61:7b:4b:2a:0b:31:49:72:56:fa:e6:e6:52:98:f2:8a:b3:cd:
2c:4f:7b:83:02:6d:23:09:0c:46:94:d5:96:37:d8:85:8c:21:
91:27:4a:fc:1f:a0:e9:c6:cf:4e:be:bf:e0:9d:32:b3:71:9d:
b7:80:05:4e:3e:86:98:5c:c1:1d:2f:f0:d7:55:4f:41:09:a4:
07:46:23:fd:5f:ea:dd:e8:f7:89:db:6f:09:fb:2b:75:cd:60:
6a:3b:98:57:ee:7b:ef:f5:04:ed:6c:2f:5d:5c:cd:2c:b9:18:
56:2c:60:53:7f:f3:7f:ed:6d:9d:e7:a8:02:72:10:75:2f:da:
4c:f1:42:03:4d:4f:1c:fd:8d:8e:81:b3:b7:57:70:27:97:e0:
5d:fe:6b:57:f3:dc:5a:c1:e2:67:c1:47:45:f4:e8:a6:7c:b7:
73:60:da:de:58:1a:2d:78:11:1b:73:4b:8e:2d:7c:3a:40:bd:
5f:8a:25:58:35:48:01:b9:85:1c:4d:51:f3:c8:0d:e8:53:3c:
97:d2:83:70:d2:b0:53:5f:b5:29:14:57:1e:5e:34:8f:ea:95:
b7:43:7f:7a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org