Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/veuzYxuz0n9huvMNFKYQBjDH1Mg.roa
File: veuzYxuz0n9huvMNFKYQBjDH1Mg.roa (raw, json)
Hash identifier: +PG9dZhmDEUH0ly9OnlVFFF0Sd/ysr5Wh2GbwRe79JU=
Subject key identifier: BD:EB:B3:63:1B:B3:D2:7F:61:BA:F3:0D:14:A6:10:06:30:C7:D4:C8
Certificate issuer: /CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Certificate serial: 01856E5D6C094771691D32D9FBD436F94AA4
Authority key identifier: 05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/veuzYxuz0n9huvMNFKYQBjDH1Mg.roa
Signing time: Sun 01 Jan 2023 17:24:54 +0000
ROA not before: Sun 01 Jan 2023 17:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199273
IP address blocks: 195.244.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 May 2023 16:50:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:5d:6c:09:47:71:69:1d:32:d9:fb:d4:36:f9:4a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Validity
Not Before: Jan 1 17:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdebb3631bb3d27f61baf30d14a6100630c7d4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:12:44:36:7c:e1:3f:89:ad:58:7a:02:08:97:
f8:24:77:6e:3a:25:30:40:41:08:67:a6:93:9b:ee:
c0:53:1c:f0:1d:df:d9:9b:2d:f4:ad:72:a3:4b:ff:
95:fc:fb:1c:c8:b1:c8:2d:08:c6:69:62:a9:39:21:
d4:a3:80:d4:d5:c5:b5:ba:ca:c3:0a:0f:9c:c3:34:
e8:59:8b:12:70:64:c7:fb:ef:b6:07:cd:2d:fa:37:
10:be:92:c7:4f:26:68:cd:a0:7b:6e:47:e4:03:9f:
a2:9b:53:31:e8:f3:91:43:11:3f:94:52:fc:01:bc:
3a:8e:02:81:2f:5a:6d:cd:f8:cd:bd:86:67:9e:9f:
fe:ca:78:c1:a7:6b:67:8c:b3:a4:ba:5f:24:5f:d3:
49:67:5b:cc:06:57:7c:45:63:50:0c:14:ce:48:69:
a9:27:5c:15:e4:f5:aa:f0:0a:3f:4b:62:bd:00:6c:
cc:6a:0f:ee:41:a4:c4:b9:76:e9:d7:58:2d:5a:24:
45:64:78:3b:01:a1:a6:9b:d8:3f:dc:6b:0f:8c:8e:
10:22:37:fc:9e:48:03:12:09:90:9d:99:30:94:3d:
e5:b8:f9:e6:44:68:98:f1:48:29:4c:9f:82:0a:0f:
f6:cb:8e:f2:66:eb:80:a7:a0:c9:e2:1a:b3:43:16:
32:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EB:B3:63:1B:B3:D2:7F:61:BA:F3:0D:14:A6:10:06:30:C7:D4:C8
X509v3 Authority Key Identifier:
keyid:05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/veuzYxuz0n9huvMNFKYQBjDH1Mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.244.239.0/24
Signature Algorithm: sha256WithRSAEncryption
60:01:65:a4:20:11:88:06:fe:f6:10:99:7f:78:d0:a2:57:c5:
ad:6a:91:3f:50:9c:d3:24:1b:86:36:e6:b5:ee:dc:09:32:57:
2c:4e:f7:32:9b:54:76:54:9b:78:ed:d6:32:ae:d6:b5:89:36:
38:80:0e:9c:7a:c5:cb:2d:1d:b5:3a:75:ae:5d:ec:e2:20:ab:
26:1c:5e:9c:bd:9f:b1:d3:86:4a:35:12:bb:8b:3e:f9:57:7a:
81:e0:e2:52:77:6c:d2:b3:98:03:de:44:93:e8:bf:cb:80:0e:
19:b8:83:fb:32:05:1b:e6:6e:99:c0:ba:6d:4f:15:35:a4:7a:
a5:68:08:db:62:b6:c8:43:02:60:42:fc:14:37:a9:ea:a8:60:
a9:39:fc:56:bb:85:de:87:cb:97:7a:1f:98:fe:14:c5:a8:fd:
0b:fc:61:27:48:f4:d3:16:93:b6:12:3a:87:54:0b:1a:a3:93:
00:ec:ca:89:1b:fa:38:88:f4:19:e4:c0:0a:16:3a:c0:4d:fd:
15:35:1e:d5:8a:8a:6f:f8:f1:f6:65:fa:88:c7:d9:cb:ac:40:
03:2c:a2:f9:3f:0c:ae:1f:e7:27:b4:50:34:36:8b:57:61:71:
0a:a6:91:be:56:b2:b5:26:7e:d1:b3:26:61:59:a6:14:a8:df:
a6:02:01:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:44 2024 by rpki-client on console-ams.rpki-client.org