Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/1-7XJJGoY0BOFtqrXjAelH8sq5Es.roa
File: 1-7XJJGoY0BOFtqrXjAelH8sq5Es.roa (raw, json)
Hash identifier: DQFdbEk6++tpYmyWSxmZrdxwvR1WUQfNv98KI0w3uJs=
Subject key identifier: FB:B5:C9:24:6A:18:D0:13:85:B6:AA:D7:8C:07:A5:1F:CB:2A:E4:4B
Certificate issuer: /CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Certificate serial: 01856F54B3CEF1E6393FF2E7ADD6BA10358B
Authority key identifier: 41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/1-7XJJGoY0BOFtqrXjAelH8sq5Es.roa
Signing time: Sun 01 Jan 2023 21:54:59 +0000
ROA not before: Sun 01 Jan 2023 21:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210336
IP address blocks: 195.242.90.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:b3:ce:f1:e6:39:3f:f2:e7:ad:d6:ba:10:35:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Validity
Not Before: Jan 1 21:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbb5c9246a18d01385b6aad78c07a51fcb2ae44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cd:e4:d8:fd:ff:ca:6c:f7:dc:87:5c:7c:71:
7b:51:24:95:22:d7:97:f5:eb:cf:da:0b:5c:9b:8b:
1c:54:e1:2c:a8:8f:18:d4:13:3f:e9:9c:fd:d3:67:
69:46:d4:fd:9d:50:7a:8d:eb:df:b4:6e:12:9b:f7:
0d:5c:83:7e:f5:1a:0b:e9:ac:5d:b1:f1:8b:d5:23:
ec:d3:7c:e4:bc:7c:71:30:2a:be:92:da:8b:e8:22:
17:03:c1:ae:d8:13:d7:aa:b9:d0:e8:dd:02:bd:61:
26:f7:2c:06:1a:fa:36:1e:89:fe:6d:36:c6:7b:7f:
5f:33:88:a3:74:1d:41:ca:85:89:12:53:cf:fc:e5:
be:64:ae:54:7b:5f:fd:7f:b4:0f:b9:c5:92:59:a4:
2b:82:e9:f0:06:70:84:4d:69:5b:a6:c4:69:da:93:
62:72:e1:99:82:91:41:b4:72:d8:3d:7a:45:df:d4:
32:99:45:50:46:8b:42:b4:e4:d4:ca:da:97:1b:10:
96:d0:34:22:21:03:6d:cb:9a:57:e5:ca:11:cd:c6:
30:ee:52:c7:6a:d5:49:b8:b1:70:d4:8a:51:2c:27:
75:5c:ba:af:b8:ce:9d:2d:ef:50:85:34:db:e2:69:
a0:47:b4:5a:b7:86:1b:20:38:e6:b3:98:04:58:4f:
5d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B5:C9:24:6A:18:D0:13:85:B6:AA:D7:8C:07:A5:1F:CB:2A:E4:4B
X509v3 Authority Key Identifier:
keyid:41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/1-7XJJGoY0BOFtqrXjAelH8sq5Es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.90.0/23
Signature Algorithm: sha256WithRSAEncryption
cd:b0:48:bd:b2:7d:66:76:64:ef:8b:3c:0f:47:36:54:43:a8:
36:7c:79:03:81:34:9e:9c:a9:a7:8e:9e:c4:5b:76:62:d8:bf:
53:fb:f7:e9:fb:60:95:80:fb:b3:06:62:4a:22:5e:8d:18:f2:
6a:bb:e0:9c:12:04:fd:0c:a1:0f:a5:57:79:4b:f8:ab:bc:2c:
e8:a9:ca:0e:74:f9:2e:e8:38:2d:6c:88:75:1b:9d:c1:ff:e4:
43:68:a1:23:47:aa:e5:a7:67:84:b9:03:94:f2:2f:37:81:67:
80:f4:47:52:5f:c6:3d:49:7b:9f:e3:c0:18:65:b6:0c:b6:33:
5e:d9:81:27:3f:34:37:e1:5c:dd:66:7a:f4:58:54:63:1c:b4:
ca:d2:30:d1:68:3c:3e:c5:de:1c:d9:cd:6c:b4:d8:6c:33:9d:
f7:18:63:e9:9a:80:7c:2e:8a:18:a0:f0:63:7c:75:63:10:12:
09:16:12:1c:14:60:85:9c:76:82:cc:b2:51:2a:57:d1:fb:47:
ae:f7:aa:bc:ee:d6:22:ff:b2:e2:d5:d2:38:6a:ad:48:20:b2:
31:3b:8b:fd:f1:56:2d:88:69:46:55:14:d6:1e:8b:02:da:16:
da:a8:c4:c1:54:26:b0:98:85:3e:d2:9e:16:64:e8:56:fc:f1:
e8:73:d6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:58 2024 by rpki-client on console-fra.rpki-client.org