Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3sK6KN7LuiT8INZwjA7xwWwGvqk.roa
File: 3sK6KN7LuiT8INZwjA7xwWwGvqk.roa (raw, json)
Hash identifier: ig8DkG6ZmgzzucUjroQYm4AgUzLNnQ8H/33WJEKivkw=
Subject key identifier: DE:C2:BA:28:DE:CB:BA:24:FC:20:D6:70:8C:0E:F1:C1:6C:06:BE:A9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCF0F66FFC87EDA547C4D478CB1D54
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3sK6KN7LuiT8INZwjA7xwWwGvqk.roa
Signing time: Tue 02 Jan 2024 06:29:31 +0000
ROA not before: Tue 02 Jan 2024 06:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58212
IP address blocks: 195.178.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 11:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:f0:f6:6f:fc:87:ed:a5:47:c4:d4:78:cb:1d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dec2ba28decbba24fc20d6708c0ef1c16c06bea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:80:0d:4b:75:b4:7d:b3:75:5f:c9:d3:39:b7:
09:9b:5d:86:7c:fc:1f:de:15:d8:7a:99:ea:24:af:
b1:60:4d:85:67:a8:75:35:19:76:78:3a:89:7a:54:
54:ba:cc:57:e7:c8:0c:40:09:81:95:3c:6c:b6:35:
29:f4:f2:5c:ec:f1:83:15:34:53:4a:03:54:b2:f3:
4f:b9:c3:a2:cd:aa:40:52:78:bb:0a:8d:50:93:de:
04:c0:0c:ca:fb:8d:7f:84:17:0b:6f:12:e8:a7:35:
6c:49:b5:4f:b7:e6:bc:59:2e:a5:62:23:56:f7:2c:
49:20:b7:09:22:5e:70:47:d4:92:99:4d:60:c8:4f:
96:41:18:2b:65:4d:83:27:eb:2f:49:25:7e:7b:77:
2b:13:7c:86:31:e4:30:91:81:f1:35:2c:15:74:7b:
b6:80:13:e5:de:bc:42:21:2b:b4:a5:e5:e6:ff:65:
d5:d8:79:d8:1d:ed:bc:5e:a3:4e:76:61:09:95:d5:
5e:c0:48:ed:d2:f2:49:60:7c:9d:3a:21:11:b3:f1:
79:81:87:1b:e3:56:8e:76:cc:eb:7d:b3:5b:c5:d3:
ba:9a:8c:d1:9c:cb:e9:1d:5d:de:1e:c6:b9:b0:83:
55:05:fb:f3:8d:76:73:d0:54:77:11:cc:e3:60:fd:
e3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C2:BA:28:DE:CB:BA:24:FC:20:D6:70:8C:0E:F1:C1:6C:06:BE:A9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/3sK6KN7LuiT8INZwjA7xwWwGvqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.110.0/24
Signature Algorithm: sha256WithRSAEncryption
60:5d:23:56:b8:ec:1c:52:fc:79:78:68:6c:07:b0:0b:89:7a:
b4:2a:61:8d:77:86:ca:41:99:2b:71:d2:93:50:1f:36:63:ef:
3f:91:b2:e0:df:6f:ef:20:89:f0:15:32:c4:eb:e8:f7:7e:89:
22:c5:a9:e8:fa:e8:58:d2:d7:27:19:db:8b:53:86:e9:4f:91:
84:40:c5:df:fe:00:5d:26:f6:8d:3e:4a:1e:a5:f8:46:1a:2f:
37:4b:f7:a9:94:94:fd:19:d6:80:26:d2:dc:65:c6:fe:44:1d:
73:70:48:c9:c8:6a:a7:11:4f:53:5b:52:5a:3d:3d:3a:46:53:
74:7f:71:10:be:3a:3e:9b:42:78:8c:d9:22:dd:b0:d8:08:ff:
c2:a8:dd:b3:3b:27:b6:dc:f4:d7:29:de:47:4f:76:de:97:48:
32:6a:db:1a:5c:ce:fb:92:38:57:77:7d:a9:5e:ca:e7:f6:82:
f3:c0:e1:07:58:d2:54:fe:ae:0a:5e:7d:f8:c8:18:6c:63:76:
f7:70:1e:77:49:77:f9:56:5c:1a:43:fd:b8:ca:95:4a:d3:1e:
75:5d:3a:17:40:e9:d4:94:70:b4:b5:64:db:e8:34:6c:09:5d:
c2:b2:c7:26:97:aa:0e:24:a2:56:c0:88:97:df:aa:5d:9a:d6:
87:5f:71:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 16:07:43 2024 by rpki-client on console-ams.rpki-client.org