Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/de284b-b83b-46d3-bbc8-d25680b4df1f/1/w9bvUscuJTRke4Xe3Xrv3ed1JTg.roa
File: w9bvUscuJTRke4Xe3Xrv3ed1JTg.roa (raw, json)
Hash identifier: tA3YNJuhQhAMi8BKTWO4tFYw5B7LBVz+IEf1HeJkxWg=
Subject key identifier: C3:D6:EF:52:C7:2E:25:34:64:7B:85:DE:DD:7A:EF:DD:E7:75:25:38
Certificate issuer: /CN=8ebed6dc9e97ff18ee982721d8f9257756266121
Certificate serial: 01856C78067006072EAF854C558B5677E5AF
Authority key identifier: 8E:BE:D6:DC:9E:97:FF:18:EE:98:27:21:D8:F9:25:77:56:26:61:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jr7W3J6X_xjumCch2Pkld1YmYSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/de284b-b83b-46d3-bbc8-d25680b4df1f/1/w9bvUscuJTRke4Xe3Xrv3ed1JTg.roa
Signing time: Sun 01 Jan 2023 08:34:43 +0000
ROA not before: Sun 01 Jan 2023 08:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207915
IP address blocks: 195.28.178.0/23 maxlen: 23
195.34.66.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:06:70:06:07:2e:af:85:4c:55:8b:56:77:e5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ebed6dc9e97ff18ee982721d8f9257756266121
Validity
Not Before: Jan 1 08:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3d6ef52c72e2534647b85dedd7aefdde7752538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:05:40:0a:2c:79:2e:f0:14:ee:f1:50:00:c9:
0f:1a:e9:75:00:24:c3:c3:3a:7b:d2:3e:bd:a0:cd:
ed:b8:0e:28:9b:9a:8f:e7:17:b9:44:e0:57:58:a4:
df:b9:45:a3:c6:08:97:30:d7:e2:10:ee:e1:5c:58:
76:7e:75:4d:93:c0:a4:d2:be:b0:19:e9:be:b0:dc:
12:97:07:80:82:eb:4b:23:b9:88:ca:70:61:ad:b8:
69:17:0d:c2:61:33:85:2a:9e:57:8a:d9:1b:c8:69:
d8:9a:b0:5c:da:ff:d1:bd:7b:de:26:1c:32:ea:54:
08:cb:6e:9b:c1:2d:bc:29:4f:9c:0c:b6:f9:05:75:
f5:bc:de:34:2e:8e:9f:3c:2a:aa:ed:7d:3e:ef:2e:
a7:fc:f0:76:78:16:ae:48:c8:49:b9:5d:da:46:7d:
4a:9c:8f:f1:ac:6d:02:a4:f9:df:df:b2:ed:0d:89:
9a:1a:2d:74:87:ea:d7:f0:65:2f:9b:fe:9b:70:fd:
be:cf:5b:e8:33:c0:50:38:0e:94:0b:43:7c:2b:a7:
51:e8:d7:4c:c6:a0:f4:bb:dd:d6:03:5a:92:81:25:
52:1b:11:b9:16:dc:19:00:f7:e7:59:a5:8d:94:8f:
58:68:51:fd:ba:c2:ca:e9:35:cf:b0:e2:0e:6e:f5:
87:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D6:EF:52:C7:2E:25:34:64:7B:85:DE:DD:7A:EF:DD:E7:75:25:38
X509v3 Authority Key Identifier:
keyid:8E:BE:D6:DC:9E:97:FF:18:EE:98:27:21:D8:F9:25:77:56:26:61:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jr7W3J6X_xjumCch2Pkld1YmYSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/de284b-b83b-46d3-bbc8-d25680b4df1f/1/w9bvUscuJTRke4Xe3Xrv3ed1JTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/de284b-b83b-46d3-bbc8-d25680b4df1f/1/jr7W3J6X_xjumCch2Pkld1YmYSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.28.178.0/23
195.34.66.0/23
Signature Algorithm: sha256WithRSAEncryption
d1:2d:62:12:6f:aa:70:b5:cf:b4:4c:c6:c2:fc:2b:9f:33:40:
e1:10:2a:c5:f8:2e:64:c9:80:5a:b3:03:fa:70:17:a5:44:37:
cf:de:7e:9e:5e:c3:78:4e:3e:4f:a9:89:33:44:3a:ba:0c:55:
5c:81:50:16:17:20:0e:1b:04:9d:b1:4e:57:95:43:07:38:07:
a4:77:b9:60:9f:fa:32:04:7f:38:57:a5:2e:f9:53:de:f7:84:
72:d1:a9:8b:8f:c5:d0:f8:3c:8c:70:2f:69:71:f9:24:c9:52:
55:cd:91:47:9d:13:a0:39:20:9e:1b:23:8e:9b:d7:3d:4e:cb:
01:10:68:bd:6c:90:e7:ba:ff:d1:04:01:ba:2a:c4:1a:1c:c0:
e2:df:e0:3f:27:9d:e5:35:11:e1:4f:46:8a:b4:d7:f8:35:f4:
24:4c:2a:48:5c:d2:0f:23:01:b7:12:c4:82:c1:b7:da:ea:c7:
42:79:be:c5:19:2c:d8:aa:a7:86:85:8c:c1:3e:43:d5:54:e8:
42:c4:04:78:4b:a4:0b:d7:f0:3e:df:9e:a7:a7:e4:88:93:f0:
8d:cc:70:52:ef:00:1e:0d:29:9d:44:74:33:20:9e:2b:f5:14:
74:42:eb:f0:f1:f3:1e:9b:24:8b:9a:41:b6:b3:0d:13:24:76:
6f:08:1d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:50 2024 by rpki-client on console-ams.rpki-client.org