Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/a5V8OINmjN7-zhYjY1sMcABXj3U.roa
File: a5V8OINmjN7-zhYjY1sMcABXj3U.roa (raw, json)
Hash identifier: NnMotAd66mrH5GK0JMCc2H3T8cKe8tgLTkSMfRyhYOo=
Subject key identifier: 6B:95:7C:38:83:66:8C:DE:FE:CE:16:23:63:5B:0C:70:00:57:8F:75
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018570028CEC42032D7ABDF2821E7A3A22CC
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/a5V8OINmjN7-zhYjY1sMcABXj3U.roa
Signing time: Mon 02 Jan 2023 01:04:53 +0000
ROA not before: Mon 02 Jan 2023 01:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199812
IP address blocks: 195.87.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:8c:ec:42:03:2d:7a:bd:f2:82:1e:7a:3a:22:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 2 01:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b957c3883668cdefece1623635b0c7000578f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:94:08:67:b6:6b:22:09:48:18:94:d4:70:3c:
10:f6:bb:68:7a:1d:69:3e:19:3d:dc:94:56:bf:4c:
7c:ba:d7:fe:55:d3:01:57:0b:4c:c3:61:f5:34:42:
98:98:63:a1:0d:48:71:e0:0b:a8:35:36:52:d2:bd:
b7:6c:a8:d8:f3:4a:4a:e8:f4:f0:8e:3b:c3:f5:3a:
b6:dd:29:3a:05:98:30:b5:c0:7c:b5:36:b5:45:e0:
7b:ef:36:02:8c:f7:47:3f:af:92:bd:3b:b8:61:98:
74:c4:e1:d4:6c:ca:b0:39:15:5a:d1:48:4f:e1:5f:
c4:b7:91:33:17:74:58:30:78:3e:ef:61:b6:d2:83:
b6:7e:30:93:7a:32:2f:9b:09:e7:a4:88:f0:ce:39:
15:41:7e:d8:9f:14:f2:9c:32:6b:1b:b5:66:80:92:
a8:af:50:07:dc:ef:31:01:02:7b:98:ae:45:04:2f:
96:d6:b6:7a:a2:b4:e4:3c:fc:2d:f4:64:e4:39:d2:
33:7d:a2:ae:68:ab:a7:68:55:e2:cf:0a:9f:ef:96:
29:27:ad:03:36:af:c8:a3:7b:92:5e:9f:79:88:70:
37:fe:08:ce:d8:bd:72:1d:52:4b:e9:8a:af:b0:78:
a8:67:75:fc:45:f2:c7:9b:b9:0f:7a:0f:0f:12:f4:
95:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:95:7C:38:83:66:8C:DE:FE:CE:16:23:63:5B:0C:70:00:57:8F:75
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/a5V8OINmjN7-zhYjY1sMcABXj3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.87.92.0/24
Signature Algorithm: sha256WithRSAEncryption
78:93:87:25:7a:df:e1:68:ab:53:15:da:78:ee:b4:1c:e0:61:
89:77:aa:d3:5f:8a:4a:32:ba:b8:bb:fd:a5:90:9e:f4:cb:c2:
2d:83:71:20:17:4a:02:10:48:51:53:e2:b8:e2:48:89:10:8e:
d1:8d:f7:5c:a9:a9:55:f4:5c:88:a1:e0:61:be:29:47:25:b9:
9b:64:5e:cb:ff:34:cb:a0:2f:7f:5c:a1:3e:3a:9e:95:75:a3:
ce:a9:84:e7:05:e8:00:86:08:39:31:f2:34:cc:f5:20:d4:59:
8d:8f:82:0b:29:ac:b5:70:41:c9:4b:68:eb:61:54:9c:a6:e5:
cc:26:ea:37:54:a4:33:e6:ad:f3:44:16:9e:92:6d:db:22:81:
51:d6:a0:f4:d4:6d:ef:5e:f1:80:6c:6d:fa:d4:e5:57:2e:42:
0e:c8:0c:ae:bd:31:df:2c:61:e0:16:3e:25:c5:43:3b:97:f2:
71:0c:10:36:32:7f:b8:16:40:0c:f4:63:94:be:ac:32:e8:11:
19:d0:16:d9:f9:d9:1e:24:0c:2d:b8:64:46:da:ca:8a:0c:5e:
9a:88:21:df:91:75:ff:49:f3:db:91:ac:31:65:ba:fc:7a:96:
cd:19:9e:f2:5c:18:ef:8f:ce:4d:6e:e7:67:1d:44:2b:ce:0b:
49:11:a2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:56 2024 by rpki-client on console-fra.rpki-client.org