Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f3llYhjj0UY6n0C2SHLJR6x-Qfk.roa
File: f3llYhjj0UY6n0C2SHLJR6x-Qfk.roa (raw, json)
Hash identifier: qlpdXyHONl0t5cBo4b8HY+SOFl7qXZWoVO+4vXUwQV4=
Subject key identifier: 7F:79:65:62:18:E3:D1:46:3A:9F:40:B6:48:72:C9:47:AC:7E:41:F9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018587D42EFD0410742D3C501558DF4B1C24
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f3llYhjj0UY6n0C2SHLJR6x-Qfk.roa
Signing time: Fri 06 Jan 2023 16:05:07 +0000
ROA not before: Fri 06 Jan 2023 16:05:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 195.178.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Jan 2023 12:51:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:87:d4:2e:fd:04:10:74:2d:3c:50:15:58:df:4b:1c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 6 16:05:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f79656218e3d1463a9f40b64872c947ac7e41f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:29:42:21:eb:4e:51:00:e6:ce:c7:6c:e2:94:
3c:92:bf:23:5a:99:5b:4a:59:da:a5:e2:5a:61:09:
3d:f5:cc:8f:cb:c3:04:15:af:bd:16:c9:74:ae:e2:
ea:0c:bd:d4:8f:d8:c9:21:bc:9d:46:c5:af:5c:ca:
49:8b:52:07:14:a1:48:ec:12:85:c5:50:7f:d3:73:
14:0a:26:a4:9f:75:7b:0f:a6:1f:97:ae:0a:68:88:
92:cf:80:54:32:48:4f:c1:92:3a:c4:cb:d5:25:38:
8e:b2:f0:45:70:06:13:d9:97:19:c4:eb:02:ab:0d:
04:12:d5:67:a8:c2:ee:8b:38:c2:ef:ec:da:dc:ef:
c2:2f:9c:c3:93:8a:fc:14:4a:cb:22:da:3e:0b:ae:
1b:4a:a9:f2:77:16:6c:2b:c6:07:0d:72:82:43:b5:
09:ca:17:20:ab:3d:a3:bd:da:47:65:3e:7a:ea:5d:
38:86:e9:cd:7e:f5:5b:93:54:23:f7:13:f1:34:4c:
56:b7:6a:ab:b4:0d:6c:39:05:93:1c:e9:1e:d3:16:
64:61:96:d7:f7:aa:d9:0d:f0:05:d5:ab:f0:74:7c:
bf:c0:90:63:89:59:e9:43:17:4a:66:9c:9b:86:a6:
40:b5:cf:72:32:1a:fd:78:b2:56:bf:bd:85:08:5a:
2a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:79:65:62:18:E3:D1:46:3A:9F:40:B6:48:72:C9:47:AC:7E:41:F9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f3llYhjj0UY6n0C2SHLJR6x-Qfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.110.0/24
Signature Algorithm: sha256WithRSAEncryption
22:b5:d2:fd:90:14:64:d3:31:bc:23:ed:86:fc:ac:4e:f1:e0:
c3:e3:41:17:c6:81:88:43:8e:6d:f1:58:02:73:65:9a:98:b8:
9c:fa:5e:44:a2:55:30:13:d4:e2:0c:a6:ba:9a:c8:71:11:a0:
76:ff:13:4c:5b:01:29:d5:d5:43:5d:b9:06:d9:32:93:7a:58:
d9:3b:60:33:0f:15:9a:bf:cb:eb:b3:66:1c:85:30:96:6a:24:
8b:de:68:62:65:68:df:9c:bb:ce:5c:4c:b3:cb:ad:1f:38:c7:
44:a0:4e:e7:c5:89:fd:99:76:69:53:24:d5:b4:93:5d:e8:48:
2d:d8:95:dd:c3:42:e9:78:3d:43:43:58:eb:d6:41:e7:02:72:
29:b8:90:c7:15:03:6d:e4:88:98:3f:18:ab:47:a4:72:e3:13:
ff:cf:db:05:d5:c9:d5:2e:e5:9d:85:03:b2:de:6b:78:38:68:
53:73:c0:18:ec:f4:90:68:47:9f:4f:13:d9:44:d6:0e:4f:21:
69:64:48:06:29:b6:d5:49:21:ad:1f:31:b1:1c:c6:65:28:83:
6c:b6:0b:28:ad:0a:72:7d:b2:99:85:c5:4e:1e:bf:4f:07:eb:
03:55:8d:50:0a:91:15:6f:57:f3:65:d0:c4:98:c7:30:2c:08:
78:85:6f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:39 2024 by rpki-client on console-ams.rpki-client.org