Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/tJWOstveMbL8KhT918_N6SQi-fw.roa
File: tJWOstveMbL8KhT918_N6SQi-fw.roa (raw, json)
Hash identifier: 1clXgZ4Osyg0ILdAsHUSVzvvWEGnwZ8iD+uX2PqVgi4=
Subject key identifier: B4:95:8E:B2:DB:DE:31:B2:FC:2A:14:FD:D7:CF:CD:E9:24:22:F9:FC
Certificate issuer: /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Certificate serial: 018C33871C6C471A6D4BC52C3323015E3CB3
Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/tJWOstveMbL8KhT918_N6SQi-fw.roa
Signing time: Mon 04 Dec 2023 06:32:21 +0000
ROA not before: Mon 04 Dec 2023 06:32:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61400
IP address blocks: 195.93.173.0/24 maxlen: 24
195.14.123.0/24 maxlen: 24
2001:678:cfc::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:33:87:1c:6c:47:1a:6d:4b:c5:2c:33:23:01:5e:3c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Validity
Not Before: Dec 4 06:32:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4958eb2dbde31b2fc2a14fdd7cfcde92422f9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ef:a7:74:57:30:1e:03:cd:f8:91:92:c1:f6:
47:4e:a6:06:e4:1a:1f:1c:cc:38:4e:96:49:9a:56:
a8:ec:79:d6:d7:f7:cd:90:f5:ef:d2:a5:0b:f5:32:
55:b2:4e:ff:bc:d5:6d:be:99:34:3c:d6:5f:d4:4b:
12:bb:f1:34:ee:03:42:3c:af:8a:c1:c4:83:99:2c:
17:28:6b:85:ec:ce:7e:bd:0d:61:bb:52:22:d5:e0:
29:0b:01:ff:d1:57:69:7f:a9:5f:70:e5:cf:94:ca:
57:cf:00:82:fd:07:18:a2:85:10:2e:81:9b:48:94:
61:be:e4:85:21:fa:9a:1d:07:db:44:dc:7b:12:de:
4a:9b:72:df:6d:b3:6e:cc:10:89:a3:23:b0:88:1d:
5b:4f:c9:ba:92:b2:14:a8:70:69:40:2d:b1:fc:be:
6a:91:f6:da:ca:b5:c1:ae:0c:db:8d:83:c4:46:c2:
cd:fc:a5:73:62:6e:6a:41:d5:44:c3:c6:64:d3:e4:
d0:37:4d:5d:ec:a9:ba:9a:05:63:35:11:0b:cd:b9:
fc:cd:1d:fd:a8:cd:b8:b5:71:e7:73:73:95:8a:82:
f6:2a:37:db:cb:44:96:f5:4f:9e:af:10:13:02:d6:
a6:00:cf:3a:13:22:00:70:39:48:57:ca:6d:62:c2:
76:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:95:8E:B2:DB:DE:31:B2:FC:2A:14:FD:D7:CF:CD:E9:24:22:F9:FC
X509v3 Authority Key Identifier:
keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/tJWOstveMbL8KhT918_N6SQi-fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.14.123.0/24
195.93.173.0/24
IPv6:
2001:678:cfc::/48
Signature Algorithm: sha256WithRSAEncryption
49:cf:14:08:c6:b2:71:f9:e1:5b:05:3a:b2:66:3d:00:54:13:
ed:d3:8f:ad:08:72:ba:da:65:cf:28:c1:a7:f2:74:31:1a:4f:
2a:1c:4d:8a:1c:d9:46:d1:d6:5a:f6:2c:50:03:bd:19:24:d3:
db:6c:af:43:ce:df:b7:74:9a:fb:5e:92:c2:b9:12:b4:c2:e0:
8a:01:04:c7:9e:b6:5e:51:32:40:84:a2:e5:19:f6:6a:a4:38:
f1:e5:5f:32:2a:18:53:1a:d3:fc:4e:f1:db:8b:8a:ba:f5:a8:
05:4b:06:0f:05:83:e2:72:ad:23:de:1b:84:92:22:d2:01:e0:
2b:1d:b1:74:f6:02:92:96:1a:eb:d0:9f:3e:35:d8:06:5e:26:
8b:3c:69:98:ec:e0:6f:65:d4:b5:3d:0f:a3:d3:a0:e4:28:a1:
db:65:8e:f2:3b:f4:f9:ec:39:a9:de:63:c5:1f:b4:59:57:0d:
ad:2b:d5:21:ce:9c:a7:af:91:80:81:0d:a9:8e:40:90:d1:71:
5a:0a:b9:18:75:f4:71:16:28:b3:72:a8:51:80:3c:82:70:f5:
30:91:59:e9:5f:c4:63:3f:0c:7d:8e:3e:0a:da:7e:f3:70:20:
a3:de:c3:4a:0c:a6:24:6a:ed:3e:81:25:7c:34:bf:8a:8b:c3:
b3:7b:15:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:43 2024 by rpki-client on console-fra.rpki-client.org