Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/l7kfw3-JfgblwjIa3CuNBAGNqBc.roa
File: l7kfw3-JfgblwjIa3CuNBAGNqBc.roa (raw, json)
Hash identifier: xRHZWY5NYqPfWxf1vBfYmyVdPkG/VF9voSJ3XVQH+pI=
Subject key identifier: 97:B9:1F:C3:7F:89:7E:06:E5:C2:32:1A:DC:2B:8D:04:01:8D:A8:17
Certificate issuer: /CN=8c692d29ac312d2ab6061e44a9de0ed3751aea7e
Certificate serial: 01857039712DB77D32D32C8EC66F73A3CBEA
Authority key identifier: 8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/l7kfw3-JfgblwjIa3CuNBAGNqBc.roa
Signing time: Mon 02 Jan 2023 02:04:50 +0000
ROA not before: Mon 02 Jan 2023 02:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41916
IP address blocks: 195.138.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:71:2d:b7:7d:32:d3:2c:8e:c6:6f:73:a3:cb:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c692d29ac312d2ab6061e44a9de0ed3751aea7e
Validity
Not Before: Jan 2 02:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97b91fc37f897e06e5c2321adc2b8d04018da817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:57:44:06:c0:dd:6a:80:9b:c4:3c:36:fc:c3:
81:c2:5b:34:a1:56:dd:af:82:af:ca:82:3c:e3:98:
bd:7d:0f:41:26:2d:cc:d8:3b:fa:6c:89:da:7a:10:
5c:55:5f:82:ba:1d:b3:4c:44:2e:b5:ea:df:65:7e:
0a:17:00:1a:57:ca:1f:96:08:34:c1:3a:a4:dc:d0:
b8:1b:39:f2:49:3b:27:fd:87:7b:97:35:a9:aa:e8:
df:fc:47:ec:e6:68:0b:2d:de:b0:9f:8e:b9:c1:0f:
a4:b5:4a:4d:34:7c:ca:6c:3a:b8:9c:6a:ed:c9:e1:
71:f3:18:73:74:d9:46:98:62:c6:eb:b3:51:6c:1d:
83:48:90:58:fc:3f:26:31:45:1c:16:f7:f0:c7:60:
55:cf:d6:9d:d4:f8:f2:3b:52:5f:b3:18:f0:d9:9b:
01:ce:bb:76:86:c9:f8:7d:60:94:47:b0:a4:19:8a:
f4:4a:70:5c:50:04:29:30:74:59:0d:34:22:54:88:
37:89:9d:13:e5:2b:be:e6:85:35:c9:be:7d:48:77:
f1:87:1a:ee:05:9a:e5:74:a2:e2:4e:ff:1f:8e:4d:
c3:60:f4:c8:01:fe:43:fa:8c:51:87:39:cf:84:d2:
c6:4a:8f:67:b8:48:e0:bb:a4:9c:d7:47:5f:0b:b3:
08:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B9:1F:C3:7F:89:7E:06:E5:C2:32:1A:DC:2B:8D:04:01:8D:A8:17
X509v3 Authority Key Identifier:
keyid:8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/l7kfw3-JfgblwjIa3CuNBAGNqBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.138.196.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:72:3b:6e:7d:41:42:88:0d:25:08:aa:ae:f0:df:36:23:95:
54:59:5d:fe:18:09:2a:79:d6:c3:29:7f:07:23:d8:ef:38:29:
bf:04:fa:dc:de:28:06:a5:cf:cc:95:dd:98:a7:bf:61:51:ed:
a0:63:28:af:b9:25:ba:bb:4a:dd:30:ad:3d:6e:3e:80:f6:ed:
33:14:25:51:2b:31:6b:75:88:7b:8b:d9:9f:6b:35:85:c2:75:
e8:cc:2d:71:75:44:50:45:d3:72:37:8d:d1:3d:e8:06:fa:aa:
f4:3b:ee:0d:6a:46:5b:84:31:a8:01:f3:6c:c8:88:48:23:a5:
35:08:47:41:67:47:90:93:9e:c2:19:2d:3c:60:a0:85:94:4b:
a7:4e:8a:d1:50:31:18:25:c5:ea:00:88:db:65:29:80:98:69:
b9:bc:d9:3f:9f:49:cd:25:b6:2c:bf:b8:3a:8c:bf:5f:f3:2f:
1d:f8:6b:e8:20:13:41:49:01:a6:fb:0c:06:8b:61:d0:3f:31:
8f:74:d3:df:ac:17:40:f6:6d:1b:fd:d4:d6:56:32:43:01:e9:
64:24:c3:47:d4:bf:47:4d:50:7c:ba:61:2e:4c:fe:01:84:24:
f1:b1:9b:6a:61:c1:11:75:dc:9f:c2:8f:62:9d:e6:6c:7d:0c:
45:8b:f1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:43 2024 by rpki-client on console-ams.rpki-client.org