Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3GO5l_INa4MlIRibQQkf-xq3wKI.roa
File: 3GO5l_INa4MlIRibQQkf-xq3wKI.roa (raw, json)
Hash identifier: hXtIr+viWL4xygCouWpJzDeuMoUTStiFeO9L9sFn5ls=
Subject key identifier: DC:63:B9:97:F2:0D:6B:83:25:21:18:9B:41:09:1F:FB:1A:B7:C0:A2
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0185969621ECF7640FB6EAEB51DC9A97E96C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3GO5l_INa4MlIRibQQkf-xq3wKI.roa
Signing time: Mon 09 Jan 2023 12:51:39 +0000
ROA not before: Mon 09 Jan 2023 12:51:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 195.178.111.0/24 maxlen: 24
195.178.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:96:96:21:ec:f7:64:0f:b6:ea:eb:51:dc:9a:97:e9:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 9 12:51:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc63b997f20d6b832521189b41091ffb1ab7c0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:37:96:b4:5c:c4:bd:7e:4c:64:4c:23:a5:61:
a3:8e:91:99:d4:02:0c:c2:38:19:4a:f9:8e:eb:c0:
94:4e:68:3e:51:c2:ff:22:68:bc:98:58:40:40:d2:
7a:27:db:33:27:bf:83:4e:2b:e5:73:7e:a4:3f:75:
75:41:25:18:6d:45:50:22:d2:2a:6e:d5:3b:17:a8:
c0:e2:d0:fa:5f:71:38:02:cc:9d:df:8b:66:70:ba:
3e:e5:c6:fe:bb:a9:9d:48:61:2b:5f:e8:ca:8a:79:
5b:27:ea:fa:f8:26:a8:3f:da:a6:e2:f1:4e:92:38:
40:d5:b1:f3:ae:51:cd:bd:97:18:01:e2:5a:b0:28:
99:b7:f1:f3:16:22:95:0b:f2:b4:4a:3e:65:ac:c7:
e5:37:c1:56:b0:71:5b:3a:f3:da:3b:21:e1:6e:fc:
d3:e5:73:00:e3:38:4a:50:0b:df:95:94:3e:e2:f0:
21:f6:d5:92:68:95:59:f9:fb:2d:1b:a5:16:ed:9d:
b1:72:fb:81:99:bc:cc:04:25:8a:1f:bc:3d:77:5b:
29:5f:6e:27:78:5d:c0:45:42:6e:4f:69:86:8a:81:
ec:d4:c3:81:09:5d:fc:6c:70:52:7b:14:91:54:9d:
83:3b:1b:f0:39:d1:f2:84:c8:5d:d3:62:ae:93:42:
33:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:63:B9:97:F2:0D:6B:83:25:21:18:9B:41:09:1F:FB:1A:B7:C0:A2
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3GO5l_INa4MlIRibQQkf-xq3wKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.110.0/23
Signature Algorithm: sha256WithRSAEncryption
57:33:e7:6e:88:b2:14:ad:26:6a:b2:82:99:80:bd:b9:47:66:
d6:25:b3:5b:5e:75:f1:0d:ab:b2:0f:a6:1f:3c:e8:b5:b5:f7:
88:12:5b:81:e0:70:64:d1:93:a4:aa:21:fd:47:3b:1d:3d:01:
4c:01:29:08:f1:a8:7f:93:c6:32:35:ac:16:84:04:8d:23:5e:
b3:e4:d7:49:26:12:f5:d9:3a:c3:82:db:fe:e7:14:b5:29:df:
2b:94:77:a5:6e:b5:81:4e:72:45:df:1d:05:83:a7:37:b6:23:
d5:bf:7f:db:19:70:4c:4e:5e:31:70:90:be:23:fe:25:61:73:
a6:0b:24:8e:9d:ec:e6:68:93:9e:f8:ce:72:cd:65:0e:22:29:
97:9b:9b:9b:44:9d:58:39:ec:9d:0e:ae:5b:55:51:d0:72:bf:
74:8b:0f:b8:c9:92:d4:8a:cf:48:e1:fd:7b:56:37:42:92:b2:
bb:c3:ff:da:3d:2e:48:30:fd:2f:95:b1:e2:1c:2c:01:35:db:
84:04:7c:44:e9:22:a7:22:74:bc:0c:fa:00:39:76:ad:85:c1:
be:6c:bc:1e:fb:f7:7d:9c:8c:c1:4e:48:8d:ba:31:b8:da:54:
77:ae:6f:21:1e:d7:4d:98:eb:7f:50:5e:90:81:f4:b0:4e:f2:
a9:21:22:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-ams.rpki-client.org