Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/IKs4blCLTUSzteJMRbMzk7mQENw.roa
File: IKs4blCLTUSzteJMRbMzk7mQENw.roa (raw, json)
Hash identifier: PDV59i862CDiNKhmxE1CKAvD5+2+W9rDENNwLFC4Cic=
Subject key identifier: 20:AB:38:6E:50:8B:4D:44:B3:B5:E2:4C:45:B3:33:93:B9:90:10:DC
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018C5E0700A341E544F868A02C2EEFF8B41D
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/IKs4blCLTUSzteJMRbMzk7mQENw.roa
Signing time: Tue 12 Dec 2023 12:36:06 +0000
ROA not before: Tue 12 Dec 2023 12:36:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211743
IP address blocks: 195.26.6.0/24 maxlen: 24
2a0e:cbc3::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5e:07:00:a3:41:e5:44:f8:68:a0:2c:2e:ef:f8:b4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Dec 12 12:36:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20ab386e508b4d44b3b5e24c45b33393b99010dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9c:fb:9c:93:29:b0:a1:77:0d:7a:b7:9c:79:
a7:41:74:e4:8b:a6:7d:b5:11:6d:18:f3:0c:27:f4:
57:6a:d0:b2:08:0a:88:55:aa:38:fe:b4:db:d2:89:
79:44:2e:1b:5f:f8:2a:fe:2c:6e:34:2f:33:50:b5:
ee:ec:18:17:ae:c2:08:a7:35:86:c5:d7:f9:b8:16:
1e:e4:a8:68:b6:e6:db:43:51:74:9c:b6:1c:73:da:
af:44:bd:51:3d:fd:9e:bf:3c:7e:79:e1:de:32:e3:
7c:a8:00:26:4d:0d:54:0e:6c:b0:0b:34:0e:6e:a8:
44:47:df:3e:52:a5:f2:ef:6f:7f:25:d3:0f:e5:d3:
a9:88:c1:35:f6:56:75:93:ed:ab:0e:93:5a:e3:09:
aa:7b:76:bc:eb:32:d8:bb:4a:28:91:db:e3:d5:9d:
bd:89:5a:56:02:dd:91:ef:36:9a:b7:4c:c2:2f:94:
05:42:34:83:84:13:ba:36:9e:e3:c4:43:23:33:29:
87:c6:eb:5a:29:c6:1f:30:fe:92:be:be:a9:27:bf:
26:af:34:45:7c:a9:df:9b:19:91:2b:4c:85:7f:b2:
f2:47:c3:a3:b6:b5:59:2e:91:56:66:95:e3:b2:87:
d2:52:02:5d:11:0b:fe:eb:35:0b:12:ba:ff:1c:a6:
82:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AB:38:6E:50:8B:4D:44:B3:B5:E2:4C:45:B3:33:93:B9:90:10:DC
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/IKs4blCLTUSzteJMRbMzk7mQENw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.26.6.0/24
IPv6:
2a0e:cbc3::/32
Signature Algorithm: sha256WithRSAEncryption
91:67:23:6f:69:ee:dd:e6:03:7c:8e:24:5d:90:e8:ce:16:d3:
cd:42:8d:a4:d9:db:8f:52:68:18:d0:e5:11:de:3f:82:26:e8:
d8:62:26:67:2d:d5:b1:a6:91:6c:7b:d0:2e:70:3b:f9:c1:c7:
01:89:63:84:65:39:e8:61:38:9b:da:15:76:80:fe:13:4f:38:
c6:27:60:88:ef:cc:f6:78:7c:78:c3:04:78:b2:16:b1:f8:56:
c3:74:e9:82:3d:0f:4d:be:b7:12:86:4c:ba:f7:05:a9:9b:ce:
8a:58:13:a4:5e:1b:57:8c:96:e5:35:8f:3b:88:d4:e8:09:de:
59:d2:e5:59:7c:3c:5e:c6:79:f5:f9:36:b5:42:3b:46:ef:b3:
56:69:ec:58:81:9a:25:8a:4a:0b:1d:c9:c3:8c:fc:54:44:54:
ed:ee:82:b1:b5:80:81:e2:aa:3d:2b:9b:4f:de:98:c6:9d:12:
01:35:ff:c1:c8:83:6c:e3:f5:37:c4:60:c9:de:4c:26:7e:6c:
fb:a1:a3:54:34:80:89:72:ac:59:42:5f:f0:bb:a7:bd:bb:fd:
b5:d4:b3:07:61:0d:15:2a:a6:b7:b2:12:ec:96:43:7e:d9:c3:
a5:68:30:ff:e7:26:68:f0:b6:8f:ea:21:54:38:b0:c1:66:68:
0a:4f:ad:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org