Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/thaDB7646pmi980txLoymNnLVRI.roa
File: thaDB7646pmi980txLoymNnLVRI.roa (raw, json)
Hash identifier: g5sJ5aKFDqRnsWE2oex7XSeYZdlz/CkzKcD9xyBE+F0=
Subject key identifier: B6:16:83:07:BE:B8:EA:99:A2:F7:CD:2D:C4:BA:32:98:D9:CB:55:12
Certificate issuer: /CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Certificate serial: 01861D50552424E50FAF2D7D8D46DF94A8F0
Authority key identifier: 0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/thaDB7646pmi980txLoymNnLVRI.roa
Signing time: Sat 04 Feb 2023 16:44:09 +0000
ROA not before: Sat 04 Feb 2023 16:44:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203735
IP address blocks: 195.7.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Feb 2023 16:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:1d:50:55:24:24:e5:0f:af:2d:7d:8d:46:df:94:a8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Validity
Not Before: Feb 4 16:44:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6168307beb8ea99a2f7cd2dc4ba3298d9cb5512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:71:8e:73:76:f9:60:b4:05:63:55:16:b3:99:
b3:fc:ab:a3:fd:8a:47:a9:b8:be:9b:7c:23:2c:3f:
da:54:fc:66:f4:9f:35:cf:e2:86:e5:5c:4c:9e:c0:
05:96:cd:da:5e:73:82:5d:9c:81:88:46:aa:8d:f5:
80:08:5a:ad:10:f6:4d:8a:60:9b:83:78:0f:cd:d2:
70:4e:cb:3e:fe:f2:df:f9:00:7b:a3:02:70:7a:5e:
1e:3b:3a:45:8a:52:9b:be:96:22:bc:74:4c:02:27:
75:72:72:bc:31:71:49:5d:0f:7c:13:32:dd:42:fd:
c6:48:45:4a:5a:0a:b8:ff:11:86:ca:94:88:87:da:
93:e7:aa:df:ca:ed:fb:ec:ce:7d:46:5d:50:aa:43:
61:01:08:fe:db:50:bc:47:aa:9e:0e:30:04:38:a2:
0d:d2:87:8a:d0:18:17:fa:72:6d:f6:2a:7c:e3:36:
bc:1c:f1:a6:cf:fc:09:f5:49:60:60:59:2f:09:23:
99:71:d3:9f:ef:c2:14:73:39:10:e7:10:ea:c5:55:
57:ab:6e:24:d2:a0:42:c4:e1:ca:21:50:69:c1:ed:
19:ca:45:b8:73:43:ee:b4:34:f0:ce:b6:94:19:f7:
2b:54:b4:58:37:1c:3a:bd:ca:ad:4a:b8:8d:d8:5c:
7e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:16:83:07:BE:B8:EA:99:A2:F7:CD:2D:C4:BA:32:98:D9:CB:55:12
X509v3 Authority Key Identifier:
keyid:0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/thaDB7646pmi980txLoymNnLVRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.7.10.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:9a:a7:ac:25:e9:7a:fa:0f:98:68:84:1f:1b:7e:1c:4d:58:
37:da:af:8c:03:d3:45:fb:15:89:68:5e:08:e1:fe:97:b2:16:
1d:54:bc:74:bd:46:3a:e6:91:e5:68:f3:8f:7b:b6:e6:16:ef:
c9:2f:0b:32:29:c7:68:2f:10:65:a0:d7:a2:cc:1a:41:07:80:
5e:72:06:32:de:57:da:0c:16:e6:01:c0:4a:dc:a8:8f:7d:6a:
6b:cd:75:d3:d8:98:d9:93:c7:af:82:f4:6e:f2:e2:a6:5c:b6:
a7:8b:a2:2b:29:2c:8e:b9:70:3d:aa:ce:cc:f2:af:ea:de:c8:
00:5a:67:77:f4:09:68:79:bd:ec:aa:35:09:e9:52:6f:ee:cf:
04:d9:ab:63:9c:b7:2e:21:7d:17:66:ce:1f:35:8f:d6:c5:6c:
f0:b8:0b:a3:9e:04:76:d0:1b:3d:dd:25:59:cb:e3:25:be:15:
39:63:09:87:7f:19:e7:68:4d:15:fa:3e:02:d2:8a:2f:54:a4:
12:00:6d:c1:62:7a:b1:e7:d4:a0:19:a1:4c:3b:46:5d:fd:fd:
29:85:35:e1:92:af:01:4d:87:c1:3e:65:ca:e1:d2:4f:8a:52:
cf:f5:81:e0:24:7b:9e:36:78:04:81:49:96:4d:87:db:ad:3f:
76:25:19:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:46 2024 by rpki-client on console-ams.rpki-client.org