Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/pNaW4aRvv-hUw4YokI0w-4-jelA.roa
File: pNaW4aRvv-hUw4YokI0w-4-jelA.roa (raw, json)
Hash identifier: vVN7EZWtUMOBUCkrb8lhswAimnvoAHvwYv3Cc/h5sgM=
Subject key identifier: A4:D6:96:E1:A4:6F:BF:E8:54:C3:86:28:90:8D:30:FB:8F:A3:7A:50
Certificate issuer: /CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Certificate serial: 01856C6F28C6972F95B12540562AD709E3D2
Authority key identifier: F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/pNaW4aRvv-hUw4YokI0w-4-jelA.roa
Signing time: Sun 01 Jan 2023 08:25:02 +0000
ROA not before: Sun 01 Jan 2023 08:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5488
IP address blocks: 195.66.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:28:c6:97:2f:95:b1:25:40:56:2a:d7:09:e3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Validity
Not Before: Jan 1 08:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4d696e1a46fbfe854c38628908d30fb8fa37a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0a:e5:bb:1c:93:01:5a:97:d2:c5:e2:d2:4e:
cc:75:0a:b4:54:ab:40:51:e0:f4:46:f6:51:26:db:
4f:97:2c:36:c5:29:c0:44:db:8a:b5:bc:03:ed:db:
42:7d:ff:ab:9c:42:84:1c:07:1c:a6:5e:b8:4c:81:
d1:08:05:63:95:4b:6b:21:0a:ea:c1:07:61:fa:6e:
a4:b7:2e:89:52:58:a6:a1:6a:d7:21:b5:16:1b:fd:
61:95:15:fe:58:2d:f0:b5:9f:a9:c4:58:53:b6:14:
17:7e:6c:be:8c:d3:57:59:9c:06:f9:78:a8:a2:1b:
c6:53:e8:f8:31:1b:90:80:01:c1:83:53:a7:8d:dc:
8a:8d:49:6f:d6:11:aa:38:90:e5:87:4c:b9:20:de:
2b:3a:34:35:a1:60:95:70:42:3b:f3:4e:05:35:cc:
1c:f4:77:9f:5d:d2:89:83:fd:b6:bc:5e:25:03:70:
de:d9:22:61:9d:71:7c:b2:0c:a5:7c:e0:be:bb:e4:
c3:89:01:a8:c3:ff:cf:7a:79:7f:cc:9d:30:69:af:
00:90:ed:c9:f9:16:f4:b4:4f:b7:0e:55:33:b0:cc:
4c:e5:e9:f8:9b:49:37:ec:92:14:a5:f6:c1:24:dc:
97:5d:fa:b1:af:c2:3d:2d:30:aa:a5:39:af:23:35:
cf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D6:96:E1:A4:6F:BF:E8:54:C3:86:28:90:8D:30:FB:8F:A3:7A:50
X509v3 Authority Key Identifier:
keyid:F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/pNaW4aRvv-hUw4YokI0w-4-jelA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.107.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:a3:60:bd:99:02:e5:f5:ef:42:81:74:08:c1:63:9e:af:7f:
85:1d:ab:2b:4a:09:f8:66:93:56:2c:55:14:d7:96:9c:e2:6b:
cf:c5:5c:31:09:3c:08:88:5b:bb:fd:d7:39:83:f0:3c:89:7a:
5e:03:bd:b3:55:aa:60:77:d4:39:81:4e:3f:f9:91:6c:3f:a1:
c5:b9:3d:90:71:3a:b4:42:ab:c7:06:2e:33:1f:54:1f:1d:0c:
f7:d8:be:a7:92:81:49:61:9b:73:97:6a:5a:f3:43:a4:2b:75:
01:44:a9:c7:a9:56:33:83:db:de:d9:28:ff:25:9c:3d:55:7e:
32:1b:ea:b4:73:4e:8b:6e:49:cf:40:e2:53:94:d4:8f:1b:aa:
22:b9:ba:92:9d:5c:b6:9d:7c:78:5b:99:38:55:83:fa:74:c6:
46:32:90:eb:c7:ce:15:75:42:9b:70:3f:6e:d0:14:a3:ab:d9:
a0:ac:33:ae:3b:8f:71:27:15:64:85:e2:fc:4a:c6:22:4e:d6:
da:44:21:e8:ed:17:03:e9:5a:1f:da:37:9b:17:89:ff:ad:44:
4b:7a:31:7d:f2:ef:38:0d:09:3c:fe:d7:52:81:aa:d0:33:33:
4c:f7:9f:8a:3e:b0:bc:fb:79:1a:f0:94:c1:25:30:92:10:ad:
b4:9f:9e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:57 2024 by rpki-client on console-ams.rpki-client.org