Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/g6oMbGHgOO7sTWDXD6A5_zmj6JA.roa
File: g6oMbGHgOO7sTWDXD6A5_zmj6JA.roa (raw, json)
Hash identifier: +F47a9UXr28+zIMtShc2nEzmatXUofRDQF09RzkQ+Ws=
Subject key identifier: 83:AA:0C:6C:61:E0:38:EE:EC:4D:60:D7:0F:A0:39:FF:39:A3:E8:90
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C1D8FF234068BADBFF82799391766402D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/g6oMbGHgOO7sTWDXD6A5_zmj6JA.roa
Signing time: Thu 30 Nov 2023 00:10:22 +0000
ROA not before: Thu 30 Nov 2023 00:10:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 195.178.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1d:8f:f2:34:06:8b:ad:bf:f8:27:99:39:17:66:40:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 30 00:10:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83aa0c6c61e038eeec4d60d70fa039ff39a3e890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f6:cb:44:c5:ae:fa:c0:ac:f7:95:a6:23:5c:
a7:d8:10:93:a5:fe:9f:db:d4:eb:e2:e9:cc:a9:be:
73:dd:90:c4:e4:b4:5f:62:28:0d:6f:5d:3a:6e:8d:
28:b9:3a:a1:6d:2d:b3:ac:4e:a6:a1:41:9a:4e:90:
7f:a4:f0:1b:aa:70:aa:a4:ed:d3:22:f0:43:9b:db:
56:16:00:ee:9e:7a:de:f9:ee:fb:a8:6f:48:e9:fa:
fd:4e:7f:80:01:78:8a:07:fa:b5:8c:ea:df:ce:b7:
e3:c4:02:3f:3c:a8:0e:e9:50:c0:78:bf:3c:ff:95:
1d:ed:aa:4e:db:cf:23:f8:c9:36:51:7d:f8:e9:b1:
94:72:78:5c:d0:4c:48:87:76:b0:e0:a9:9a:eb:91:
ce:4f:e0:bf:d5:a3:19:7c:f7:6f:7f:9f:99:4e:d0:
53:25:18:47:a2:2f:1d:0c:bc:56:57:26:03:c1:0b:
d6:7b:46:34:45:e8:42:e0:63:97:ad:47:d8:ca:30:
1d:71:e3:3b:f4:b7:25:95:57:b7:af:73:ca:56:74:
74:63:40:34:b0:ea:d6:17:fd:1f:6e:00:6c:72:c7:
0a:77:fd:37:2e:83:da:b2:18:dc:6d:0e:67:57:c8:
ba:37:6d:9e:50:0c:4c:96:99:3f:87:1b:09:2f:a6:
47:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AA:0C:6C:61:E0:38:EE:EC:4D:60:D7:0F:A0:39:FF:39:A3:E8:90
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/g6oMbGHgOO7sTWDXD6A5_zmj6JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.111.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:e3:5d:e9:93:4f:70:4f:b8:ba:f6:2a:a2:c4:0a:4d:77:8b:
bc:0d:19:d6:01:b1:bf:fc:a8:ac:ca:23:3b:3b:b7:6f:e9:8f:
ef:0a:1e:de:b2:3a:84:9f:19:21:09:e6:19:3b:5b:e6:c6:f0:
19:61:8e:7c:3f:99:46:93:3e:96:0b:0c:fc:7d:1d:80:91:b0:
ff:a8:66:1f:04:de:a4:78:e8:34:7d:e8:0d:c3:94:7d:ea:56:
99:22:3c:38:4e:66:c3:38:a4:db:47:44:f5:0a:9a:09:11:94:
7b:80:5f:6c:b5:6a:33:8f:9e:92:47:6e:f7:75:2d:00:5a:0f:
54:fc:6a:6b:82:ff:fb:98:9e:d8:85:2a:59:93:4b:10:a6:7c:
35:cc:16:ea:65:d6:3b:68:b3:03:31:11:eb:92:ab:77:fc:7b:
11:49:5c:6f:9d:f6:af:06:34:d6:6d:df:51:d2:32:6c:2e:56:
a4:f1:f4:4e:4b:60:a4:62:41:3d:4c:9e:24:9f:1f:27:b9:97:
c8:e0:79:e8:a0:35:fa:27:2b:57:f0:a1:21:78:d6:b9:28:2d:
96:fb:47:05:39:c2:0e:5c:53:cd:a0:2e:6d:7e:06:ec:19:69:
af:a5:90:23:ee:ce:d5:a6:22:d2:e3:82:67:c1:55:b2:15:66:
a3:9f:28:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:12 2024 by rpki-client on console-ams.rpki-client.org