Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/u7CkDMlBA_0kc6sQraTY8BVOA14.roa
File: u7CkDMlBA_0kc6sQraTY8BVOA14.roa (raw, json)
Hash identifier: FZieHxLsE87KXu2gNTBDB/Gim+o4jGxYOEC/dqM8lhc=
Subject key identifier: BB:B0:A4:0C:C9:41:03:FD:24:73:AB:10:AD:A4:D8:F0:15:4E:03:5E
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 01856EAFD44A27579C173861BF0DABF86E85
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/u7CkDMlBA_0kc6sQraTY8BVOA14.roa
Signing time: Sun 01 Jan 2023 18:54:54 +0000
ROA not before: Sun 01 Jan 2023 18:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211884
IP address blocks: 195.250.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:d4:4a:27:57:9c:17:38:61:bf:0d:ab:f8:6e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Jan 1 18:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbb0a40cc94103fd2473ab10ada4d8f0154e035e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:31:ce:e1:7b:ec:fd:20:45:d4:af:b7:2e:60:
48:82:83:21:e1:b5:90:c8:8b:c4:85:a1:d1:30:a6:
ff:f1:80:74:2d:a6:6f:c0:8c:55:4c:dc:6a:d2:74:
13:96:6b:c3:b6:53:54:25:bc:0f:1d:12:6c:37:9b:
fd:eb:13:d5:29:bb:72:c7:a4:7b:55:3a:68:29:4b:
bb:21:3a:22:ca:bb:ba:fe:37:a1:2a:9e:01:12:af:
e4:3e:7e:eb:c3:a8:98:96:81:8c:c1:85:5a:be:ea:
d9:53:bd:f7:54:db:5a:ba:10:bd:d2:b0:49:c1:ea:
73:15:66:12:26:aa:34:46:d0:b3:d5:13:6a:f3:f5:
82:a7:4e:64:b7:5d:80:4d:c3:eb:ef:a0:50:eb:87:
89:6e:ae:fc:78:7a:16:10:bc:0d:96:19:17:ee:88:
db:86:0f:e4:64:1b:9e:64:cc:81:ca:e8:8a:d5:98:
78:3d:a4:d6:63:e8:35:c1:56:fd:4e:ab:05:34:10:
55:3d:ba:b4:5a:0d:e4:c5:8f:eb:f6:7c:0d:93:6f:
38:df:fa:be:1b:1d:f7:a7:ec:85:55:d1:aa:13:97:
79:0a:65:47:e5:4d:f2:3a:90:b4:3d:b3:78:3d:cb:
9e:a9:94:64:80:ac:36:ea:1f:c0:7b:e8:b8:ef:36:
c3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B0:A4:0C:C9:41:03:FD:24:73:AB:10:AD:A4:D8:F0:15:4E:03:5E
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/u7CkDMlBA_0kc6sQraTY8BVOA14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.250.212.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:b1:09:51:4d:a5:ab:08:6f:8c:d7:da:de:1c:38:78:4b:86:
07:9e:43:25:7e:bc:78:b1:aa:9e:0f:e2:71:4c:0b:6c:0d:f1:
9c:cc:83:d1:90:f9:da:20:17:bd:75:a2:05:ec:e2:84:c0:e5:
3a:64:68:47:f1:d0:f2:bd:df:dd:51:c0:65:95:9f:8d:ca:29:
9a:81:8f:bb:3c:2f:3e:9a:16:25:a3:9c:8c:52:07:31:e3:22:
ac:c8:0c:00:5d:61:87:24:e2:13:b6:0e:67:e9:ae:c9:77:3d:
3e:a8:ed:85:b9:55:c2:cd:16:c0:c9:f6:0b:df:96:03:51:b0:
7b:54:62:eb:d7:e5:c5:14:b9:3f:81:da:df:30:d5:5f:b3:30:
6d:86:26:a4:ae:e1:9f:d2:b5:54:ec:f7:71:2b:83:a4:a1:3b:
d9:40:90:53:e0:31:5a:cd:c9:4e:f8:f4:ab:cb:e9:31:e8:cd:
a1:f6:bc:6c:72:f5:fc:e5:21:01:b5:34:21:ac:18:82:6d:c7:
6a:b0:3c:a5:3a:6b:ad:98:16:45:71:71:99:f1:18:e2:af:bd:
30:73:9d:1f:18:92:2d:75:15:38:0a:a8:fe:2a:06:b1:5d:95:
6e:0f:45:af:d9:f2:52:70:8d:e0:e2:88:b1:df:2c:54:b1:b6:
4c:96:43:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:09 2024 by rpki-client on console-fra.rpki-client.org