Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/2_qz7S7Smc4nzxa739EF2ktOFBM.roa
File: 2_qz7S7Smc4nzxa739EF2ktOFBM.roa (raw, json)
Hash identifier: 2Y45Fb+3ALo49rOPu3szF983PPHqVpjKpYKXZfiTPaM=
Subject key identifier: DB:FA:B3:ED:2E:D2:99:CE:27:CF:16:BB:DF:D1:05:DA:4B:4E:14:13
Certificate issuer: /CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Certificate serial: 01903C8EDE67925F2EECD9F74FF130EFC0C2
Authority key identifier: 2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/2_qz7S7Smc4nzxa739EF2ktOFBM.roa
Signing time: Fri 21 Jun 2024 20:48:34 +0000
ROA not before: Fri 21 Jun 2024 20:48:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 195.234.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jul 2024 05:55:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3c:8e:de:67:92:5f:2e:ec:d9:f7:4f:f1:30:ef:c0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Validity
Not Before: Jun 21 20:48:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbfab3ed2ed299ce27cf16bbdfd105da4b4e1413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d2:b8:e7:a9:ed:e3:70:66:4a:35:c6:de:66:
35:46:a0:9d:0f:68:7a:eb:91:9b:5d:60:a5:8d:44:
45:76:0c:df:72:4c:7f:20:7b:90:e6:2d:4b:b9:20:
7a:f2:98:66:06:2e:2a:6c:08:01:87:4e:ac:ff:3d:
35:e4:0c:b1:60:63:1c:5e:35:26:a0:54:87:d7:0f:
38:56:b7:f1:c5:c2:ed:a7:3b:58:3a:5c:1f:ef:0e:
ec:ab:02:f2:21:1a:6c:b6:33:b9:45:18:9c:5d:42:
6d:79:05:05:0f:d8:a4:58:2d:48:f8:98:fe:4d:15:
2f:5e:c5:68:a1:1b:9f:fc:01:ab:ce:d9:7b:4d:59:
8b:ac:a7:a4:6a:22:20:7d:44:88:d4:c7:72:c7:8e:
a1:32:11:ca:15:4c:bc:db:59:d1:24:f7:47:85:77:
4e:96:8d:03:b3:c3:7a:fd:a2:fd:46:24:e1:31:4a:
84:0e:23:43:17:08:5f:dc:35:20:f3:fd:10:96:ea:
2e:60:ae:a4:dd:d7:bf:e1:8b:2b:28:07:b3:5a:8c:
96:81:3c:7f:da:92:d0:20:e4:32:09:f3:6f:de:91:
11:2d:cf:aa:fe:e7:35:3a:56:7d:84:1a:15:9d:fe:
50:f0:05:38:d8:61:fd:d7:b9:1f:2c:ec:23:11:d3:
3e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FA:B3:ED:2E:D2:99:CE:27:CF:16:BB:DF:D1:05:DA:4B:4E:14:13
X509v3 Authority Key Identifier:
keyid:2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/2_qz7S7Smc4nzxa739EF2ktOFBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.153.0/24
Signature Algorithm: sha256WithRSAEncryption
03:6f:cc:a0:26:52:a2:59:8d:5b:28:2f:fe:52:4a:0a:35:f6:
5e:9f:ab:8b:9d:7a:59:70:6d:24:8b:75:e0:ad:16:4c:25:c2:
02:f5:3d:99:f0:4e:ab:5c:0f:84:fa:c2:11:44:8b:eb:12:5e:
f0:60:df:03:09:a2:d8:58:2b:80:88:92:06:72:e7:34:a0:c5:
75:86:26:d8:d2:a4:0c:a1:6a:ce:0b:55:67:f3:81:e5:c2:7f:
fb:1a:1f:e1:48:c9:d8:52:7e:01:20:0a:36:25:d5:4a:99:29:
03:a9:72:45:d0:f3:dd:65:9c:8e:f6:ac:3b:69:54:b6:ec:ef:
c7:2e:87:af:cb:e0:4a:ab:90:4f:ef:53:13:52:5a:c9:6d:93:
2c:5f:c9:58:ff:7f:38:85:6f:e7:a6:74:96:0e:a3:e0:a0:32:
d3:69:b2:cf:ac:f6:54:d7:7b:1d:39:13:47:c8:6a:42:d7:9b:
a1:a4:02:63:cd:5a:29:38:c1:95:3e:f4:a6:d5:da:05:4d:39:
1c:03:de:de:15:66:03:f2:7b:bf:0a:c4:84:c0:5c:90:27:06:
f4:fc:b2:b0:66:1b:7a:1d:47:e0:86:4e:e9:37:2e:a9:05:50:
07:f4:d9:b2:da:e1:1d:75:e7:a2:3a:8a:63:eb:d7:5f:35:2e:
7a:da:86:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 09:00:28 2024 by rpki-client on console-ams.rpki-client.org