Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/V8pgM1wcflwXOkSjh236suUcheQ.roa
File: V8pgM1wcflwXOkSjh236suUcheQ.roa (raw, json)
Hash identifier: dFUGUC7YQtdcvSLeuTGKXFr5ShcigdNnt7Q2ShIuWXg=
Subject key identifier: 57:CA:60:33:5C:1C:7E:5C:17:3A:44:A3:87:6D:FA:B2:E5:1C:85:E4
Certificate issuer: /CN=ee6f421c253096280347dc2e92ca10cc398c134f
Certificate serial: 01856CEF056DA506108B280F9DE6234F373B
Authority key identifier: EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/V8pgM1wcflwXOkSjh236suUcheQ.roa
Signing time: Sun 01 Jan 2023 10:44:41 +0000
ROA not before: Sun 01 Jan 2023 10:44:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21334
IP address blocks: 195.230.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:05:6d:a5:06:10:8b:28:0f:9d:e6:23:4f:37:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee6f421c253096280347dc2e92ca10cc398c134f
Validity
Not Before: Jan 1 10:44:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57ca60335c1c7e5c173a44a3876dfab2e51c85e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f6:74:34:48:d1:9e:1b:c3:f8:60:e4:25:42:
fc:8c:b4:dc:95:c4:0e:dc:c4:4f:37:fb:e2:91:32:
b9:d2:9c:83:50:b1:2b:f2:37:e6:cd:09:1c:6c:a7:
c0:a8:e9:79:3b:1b:51:c5:2f:f3:72:95:a4:28:8e:
b1:19:fd:4e:47:66:e0:fc:b4:53:f5:81:08:3f:66:
ae:ad:30:9e:57:96:d5:d2:31:3c:7c:c5:bc:19:67:
1f:35:0f:50:38:16:b2:67:c9:28:ac:82:08:88:e1:
b6:45:db:b7:7a:cb:73:f9:a4:ce:d3:c7:89:ac:b8:
a4:f0:06:88:15:c7:0e:e5:f5:12:95:0f:c8:11:2e:
bf:7f:af:f2:a0:64:95:dc:c8:69:64:35:15:c8:d4:
b2:f4:83:9a:a1:3c:c0:24:a1:ba:b1:30:2f:ef:93:
db:cb:e0:52:61:f1:ba:bb:1d:e5:81:ba:c1:e1:9a:
fc:94:97:5d:b2:89:08:8f:16:d5:55:9b:ac:df:4c:
7b:79:5a:c0:b4:bd:97:62:40:cc:f5:0d:d0:a9:2a:
8a:2e:2b:ec:cb:e4:d7:c3:5b:61:d5:fd:f6:66:3c:
91:24:a9:d0:1b:70:b3:c7:22:4e:44:bc:b3:25:e8:
e3:07:32:f9:e4:5c:72:96:65:80:df:36:af:83:8d:
a9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CA:60:33:5C:1C:7E:5C:17:3A:44:A3:87:6D:FA:B2:E5:1C:85:E4
X509v3 Authority Key Identifier:
keyid:EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/V8pgM1wcflwXOkSjh236suUcheQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.230.106.0/24
Signature Algorithm: sha256WithRSAEncryption
30:a5:66:72:f0:68:8d:ce:cb:45:a9:34:f9:a8:60:d8:5c:56:
7e:60:dd:ec:68:5b:68:ea:b7:53:cd:59:e3:d9:7c:c6:e9:b3:
a0:a2:43:79:b0:13:96:55:ea:a6:8e:a0:22:7b:fa:ce:e6:5e:
ec:a1:c1:8f:19:fc:21:03:5f:96:ae:9b:4f:f8:f2:22:7a:04:
ca:af:86:5c:9c:ed:c1:2f:f3:50:6f:09:35:c6:4a:4e:5e:c3:
9a:06:6b:d2:e8:35:9f:86:22:fb:15:ae:29:d4:da:74:fe:15:
f1:f9:3c:d1:9f:16:01:14:e4:a2:a8:21:58:95:8e:a5:35:ca:
80:e7:2c:52:22:db:62:17:4f:69:67:df:96:0e:c6:4e:e3:2f:
80:4b:0a:29:bd:e2:9d:25:54:6d:2a:03:b1:b6:96:bb:9a:9d:
2c:63:62:f2:79:0a:16:dc:59:8a:50:56:b2:0e:74:e1:42:81:
87:cc:0e:04:1c:70:0f:61:6f:60:db:b2:69:5f:53:96:40:d6:
d3:8c:d8:5d:48:6c:62:5a:10:ba:32:75:09:c2:e4:f0:76:c3:
6f:70:96:59:71:82:cf:e2:ff:1e:60:2a:ee:27:b6:c2:df:11:
1d:2a:88:18:d9:5e:18:27:88:24:b1:d0:0d:3d:5d:82:b1:5a:
c5:65:69:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:48 2024 by rpki-client on console-fra.rpki-client.org