Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/6aLqe4k5_oAqlqs8WHAzWFuuTA0.roa
File: 6aLqe4k5_oAqlqs8WHAzWFuuTA0.roa (raw, json)
Hash identifier: HyAXX1zryHkg2cX/BbeGVbOHodX9Y5ANaDClXOw36+c=
Subject key identifier: E9:A2:EA:7B:89:39:FE:80:2A:96:AB:3C:58:70:33:58:5B:AE:4C:0D
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF967D1F05425887B9390B705E709D9
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/6aLqe4k5_oAqlqs8WHAzWFuuTA0.roa
Signing time: Mon 02 Jan 2023 00:54:54 +0000
ROA not before: Mon 02 Jan 2023 00:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21337
IP address blocks: 195.34.112.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:67:d1:f0:54:25:88:7b:93:90:b7:05:e7:09:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9a2ea7b8939fe802a96ab3c587033585bae4c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1e:82:8c:bc:8d:47:cb:39:a0:09:80:53:da:
1d:bb:6e:d6:c8:7d:99:65:46:ea:e5:a1:3c:f1:d5:
49:03:eb:e9:d5:3f:2a:cb:a8:8a:bb:24:e8:67:cd:
44:2e:82:f4:5b:e4:04:83:52:9b:25:a6:ff:99:5b:
5e:01:cd:bd:b1:86:ff:67:26:7d:7f:2c:c9:63:c5:
ec:3f:74:5d:9d:3c:9e:65:a0:62:8a:b2:f2:37:c2:
6a:3d:26:86:54:d2:9d:17:86:f6:80:72:74:cd:24:
f4:47:27:66:a7:55:7d:23:5d:61:62:88:cb:c7:f6:
cd:ae:af:f7:d3:3c:26:38:81:13:13:1c:26:6b:39:
66:e4:36:47:8a:89:c7:6e:07:82:fe:ee:3f:82:33:
6d:bf:de:93:c4:77:9b:fa:ff:69:5e:b8:1a:c2:11:
f6:4c:d6:5c:c3:52:79:dd:60:49:70:9a:44:77:50:
99:43:86:6d:fb:d2:15:31:9a:42:fe:70:a3:b8:1e:
13:32:2d:c2:ae:a7:c9:7a:6c:32:9f:7c:bb:74:d2:
f5:1e:ed:9d:0c:b0:ca:c2:10:bc:d5:8e:ce:ef:c5:
a3:6f:13:3a:d6:ef:6f:09:33:fe:b5:0e:79:e7:e7:
e9:66:8e:b7:03:3f:d5:7f:eb:8e:9e:7e:fb:a7:66:
90:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A2:EA:7B:89:39:FE:80:2A:96:AB:3C:58:70:33:58:5B:AE:4C:0D
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/6aLqe4k5_oAqlqs8WHAzWFuuTA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.34.112.0/24
Signature Algorithm: sha256WithRSAEncryption
22:32:c8:c3:ba:4d:71:2a:18:6d:00:ae:e6:b2:64:42:d9:23:
81:04:6a:ac:f9:45:52:d4:e7:8a:33:fe:55:19:e6:58:ea:ce:
ad:14:f7:d4:ac:1a:d9:d5:e1:38:5e:8b:1b:f0:a2:6e:9b:b0:
71:9a:35:72:2e:49:c9:f1:8d:46:92:e2:3b:8a:83:fc:2a:8a:
7e:3e:28:f4:30:cc:ca:e5:0b:04:8c:f2:10:5f:17:fd:4a:be:
91:64:68:83:ae:73:bd:8d:2e:3d:dc:64:b2:d1:4d:6a:37:f2:
4b:40:6b:d9:4f:b9:a9:3b:3d:b2:6a:49:43:c8:e1:05:a8:8f:
00:d1:09:7b:a2:36:2c:90:ca:dd:8a:8e:22:58:b9:ba:1e:b5:
e9:96:e8:92:13:56:81:a0:46:35:33:f6:39:b7:05:23:81:d1:
c6:d2:3f:9a:d3:f8:d7:36:e4:aa:35:37:94:fa:51:ff:71:e2:
a4:b4:0f:28:5b:f7:e3:cb:d7:8b:3b:cb:2e:24:fc:d1:ab:b5:
fe:44:3c:b4:c3:94:62:97:89:15:d0:63:fa:f3:66:47:08:f3:
96:3b:85:2e:48:8e:90:a7:2f:13:5f:b4:1f:32:bc:dd:bb:9a:
bd:ca:f4:b0:95:d3:fc:98:09:1b:27:cc:d5:f2:57:9c:93:dc:
55:4f:1d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:00 2024 by rpki-client on console-fra.rpki-client.org