Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/sWNPGYiyt3jkr9t2pWfeaR0J2Yw.roa
File: sWNPGYiyt3jkr9t2pWfeaR0J2Yw.roa (raw, json)
Hash identifier: DJX0Lw3fqbbCNBXOIAOgl27q8izyOZmMdL5SykJUNI4=
Subject key identifier: B1:63:4F:19:88:B2:B7:78:E4:AF:DB:76:A5:67:DE:69:1D:09:D9:8C
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0186CA67F1186C93475910DA479DB5231879
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/sWNPGYiyt3jkr9t2pWfeaR0J2Yw.roa
Signing time: Fri 10 Mar 2023 07:24:14 +0000
ROA not before: Fri 10 Mar 2023 07:24:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9121
IP address blocks: 195.87.92.0/24 maxlen: 24
212.133.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Mar 2023 07:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ca:67:f1:18:6c:93:47:59:10:da:47:9d:b5:23:18:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Mar 10 07:24:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1634f1988b2b778e4afdb76a567de691d09d98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ef:2f:1e:2e:8c:a7:87:09:2c:92:e9:3c:19:
63:1e:2c:26:37:31:1c:a1:3d:f4:ae:7b:f4:17:00:
92:02:94:86:d2:61:d3:5d:bf:9c:81:52:3d:26:d2:
21:4a:76:bc:6b:18:46:0d:b2:f8:8c:31:73:81:2d:
ac:22:af:06:bf:17:90:e1:10:55:08:2a:38:01:20:
75:f9:c5:f4:f7:20:4e:fc:14:46:ed:55:d3:c5:25:
02:3a:a5:d1:ad:c6:4a:bd:e1:b0:01:2b:31:c8:7b:
34:ea:b5:eb:61:74:f1:56:76:ea:8c:31:82:17:66:
7d:99:e7:37:34:8f:54:4c:38:d0:12:1a:ab:de:00:
ee:12:ca:23:03:6e:40:8f:69:13:04:df:bd:0f:e9:
4f:c5:d3:f9:6d:2b:b4:8f:a8:77:b8:7d:dd:03:dd:
57:31:d8:8a:9d:ed:a9:6e:0f:00:ff:1f:83:6f:c5:
eb:13:dc:a2:8f:56:27:3a:81:f3:27:1b:c4:f2:48:
c4:64:18:32:68:fa:f0:86:93:fa:b3:37:c3:c8:69:
6e:3f:87:b8:b2:97:9c:df:5b:c5:fd:b5:de:49:f7:
cf:dc:29:00:82:87:f4:b3:b3:42:92:f8:b2:4a:ed:
ba:19:c6:b3:48:9a:dc:f3:08:49:5f:64:28:fc:2a:
50:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:63:4F:19:88:B2:B7:78:E4:AF:DB:76:A5:67:DE:69:1D:09:D9:8C
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/sWNPGYiyt3jkr9t2pWfeaR0J2Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.87.92.0/24
212.133.164.0/24
Signature Algorithm: sha256WithRSAEncryption
71:61:97:bd:4c:d7:d3:63:cb:c1:cb:5c:23:85:89:e9:62:d5:
93:79:53:f9:7d:7a:ba:ef:4f:74:d3:49:20:f2:14:bd:dc:34:
86:76:e6:8f:13:45:ed:01:df:0f:db:be:70:9b:ab:79:d5:ba:
0d:ad:0c:4f:4d:b9:aa:02:ae:f2:dd:6f:c9:1a:3f:dc:87:f4:
6f:09:dd:bb:c3:9a:f4:ee:18:18:c5:d3:59:ec:13:cb:ed:c2:
22:2f:50:a8:7a:03:34:bc:b0:ae:ed:c2:94:83:f2:71:f3:07:
76:2e:24:9f:8a:21:85:7c:76:63:48:b1:e4:1d:c5:e4:13:0e:
f0:6b:b2:df:20:1e:1c:8a:61:d3:78:50:7f:2e:a9:6f:37:2d:
20:30:04:cd:db:04:6c:17:07:c2:77:fe:2a:e7:b0:d7:2f:60:
f2:ae:95:62:1e:a0:87:cf:ba:d6:7e:53:5f:16:d2:70:fe:b4:
e0:70:6f:5d:8b:a8:0b:86:85:be:c8:1c:cb:87:75:f2:70:57:
d7:73:67:10:0a:81:ef:8c:38:a9:6d:27:53:cb:cf:1e:6c:12:
f0:b1:29:f6:98:d0:31:29:e8:2a:6b:bc:87:14:ca:f0:f9:66:
ab:97:66:48:34:17:fb:c2:a3:2b:a3:61:5f:37:56:30:0f:49:
5b:29:c2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:56 2024 by rpki-client on console-fra.rpki-client.org