Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/i1FjxirDNzTJAIirHZb6WB5Rvn8.roa
File: i1FjxirDNzTJAIirHZb6WB5Rvn8.roa (raw, json)
Hash identifier: SQobaHAb1jdNttmTnRKNqVcqMcDV55AlgLnUaUQ7uH8=
Subject key identifier: 8B:51:63:C6:2A:C3:37:34:C9:00:88:AB:1D:96:FA:58:1E:51:BE:7F
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF97E17041E79467DCF25F45258CB65
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/i1FjxirDNzTJAIirHZb6WB5Rvn8.roa
Signing time: Mon 02 Jan 2023 00:54:59 +0000
ROA not before: Mon 02 Jan 2023 00:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62418
IP address blocks: 195.34.98.0/23 maxlen: 23
62.204.132.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:7e:17:04:1e:79:46:7d:cf:25:f4:52:58:cb:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b5163c62ac33734c90088ab1d96fa581e51be7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2b:e7:04:56:48:55:51:d8:15:a1:c0:e1:2f:
09:d2:f0:71:58:f1:12:45:d0:54:d7:8a:57:8a:e3:
f2:87:04:f2:19:41:68:86:20:29:c3:7a:99:d2:5a:
10:e0:41:f2:b1:da:99:84:14:1d:a8:9b:ac:1e:d7:
7f:d8:d2:c3:a9:6d:e0:38:4f:69:ce:b5:28:f0:83:
51:dc:4f:77:fe:73:36:a5:79:50:a5:69:bc:3c:a2:
a9:4a:35:34:23:f5:f0:0d:62:da:93:66:e6:79:07:
42:ef:3a:0e:b0:00:77:9d:b2:d7:f2:dd:f4:e8:fe:
c3:41:47:f2:9f:a9:fd:27:f1:80:ff:c4:53:9e:72:
00:c2:5d:2a:2a:88:aa:f6:98:a9:52:8b:83:47:b9:
ae:29:71:b7:b7:90:51:22:da:d8:78:d6:f2:98:e3:
4e:f4:96:d8:0d:8f:59:f8:39:79:4c:c0:bd:14:67:
24:5c:5b:37:fe:0d:8d:54:e8:15:24:d4:63:a0:79:
99:c9:0b:32:b4:0f:7e:7f:8d:8b:be:1c:2f:52:d3:
d7:9c:a0:98:38:fc:0a:b6:f8:22:7b:c5:11:2a:10:
d9:25:29:b6:82:2e:1f:2b:95:78:92:49:43:6e:16:
07:5f:6f:bf:1c:d8:20:46:31:be:68:2b:3a:35:07:
6b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:51:63:C6:2A:C3:37:34:C9:00:88:AB:1D:96:FA:58:1E:51:BE:7F
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/i1FjxirDNzTJAIirHZb6WB5Rvn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.132.0/23
195.34.98.0/23
Signature Algorithm: sha256WithRSAEncryption
97:42:f7:f5:3f:56:ba:b8:31:c6:f3:bc:c1:c4:32:2a:c0:6c:
e8:4b:96:0d:84:53:d0:3c:7e:ec:70:2d:cb:36:e8:42:50:16:
ed:5b:e5:f4:44:02:5c:74:6b:b3:47:4e:de:d6:1e:61:79:67:
ca:dc:14:54:2b:e6:eb:d8:54:3e:ad:14:2b:33:32:2b:a7:92:
ec:34:7a:dc:89:05:06:47:4b:bf:77:66:22:f5:68:97:6b:23:
c7:fe:c8:fd:54:6e:18:e1:6e:8d:c8:01:61:c0:ca:03:7e:e4:
49:c5:99:83:94:35:47:51:43:1d:46:2a:14:92:e9:22:db:d5:
b8:75:8b:50:d6:eb:67:03:2f:7c:53:4a:52:c1:bf:4b:ef:43:
c5:15:75:03:46:cc:0d:5d:79:6a:28:a3:e5:33:96:15:c9:1e:
72:e3:c8:cd:33:17:6f:12:77:43:1d:ee:45:ef:35:6d:49:6d:
3c:17:5d:e0:6b:95:f6:da:66:bc:44:6e:6e:6e:4a:66:36:1d:
3e:82:7e:63:8d:d3:cc:a5:68:50:7b:a7:24:22:e3:33:5c:c0:
67:0f:e6:23:30:e8:ce:13:52:fa:54:44:67:31:fd:61:0a:f6:
66:17:a7:cc:66:43:d5:5b:22:3e:6f:cc:00:dd:42:5f:43:f8:
f5:7d:55:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:52 2024 by rpki-client on console-ams.rpki-client.org