Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/lTyVH8sPaFahfRJxmsJbGJpMsiw.roa
File: lTyVH8sPaFahfRJxmsJbGJpMsiw.roa (raw, json)
Hash identifier: zlPO0VPhUd0oMMn12jJf9ZVKVETKEd6YnQwMqOuYw0o=
Subject key identifier: 95:3C:95:1F:CB:0F:68:56:A1:7D:12:71:9A:C2:5B:18:9A:4C:B2:2C
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018570676D20A433A5586D252E74E66F6235
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/lTyVH8sPaFahfRJxmsJbGJpMsiw.roa
Signing time: Mon 02 Jan 2023 02:55:04 +0000
ROA not before: Mon 02 Jan 2023 02:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211743
IP address blocks: 195.26.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Dec 2023 12:36:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:6d:20:a4:33:a5:58:6d:25:2e:74:e6:6f:62:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 2 02:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=953c951fcb0f6856a17d12719ac25b189a4cb22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0b:1c:36:06:ed:11:9b:f8:ba:31:3c:23:d8:
52:33:b0:5f:88:c6:c4:9b:c2:c6:a0:25:43:5e:a7:
38:30:ff:67:ba:80:9d:3e:1a:1e:e3:3a:7e:86:e5:
e4:90:2d:0d:6d:78:01:cd:fe:d0:63:18:bb:94:24:
45:5f:be:69:9f:00:34:1d:9a:93:ef:f1:3a:65:81:
d7:3a:fd:37:4d:da:77:0e:d4:4d:51:bf:8e:e4:24:
7b:d6:78:6c:89:10:c6:5e:a5:ab:52:28:23:22:b2:
02:e8:b0:29:51:e4:ba:21:06:c4:bc:66:58:94:a0:
6e:da:a9:6a:4c:fd:44:e3:11:3c:3a:21:d5:be:25:
50:42:9d:6b:30:85:d8:67:4c:06:59:75:cc:97:f6:
bd:d6:58:72:4c:42:6f:75:ca:66:a8:c6:e1:68:ed:
da:9f:84:5d:8c:ec:5f:d0:b1:72:7d:da:d8:86:ab:
a6:04:81:38:ae:e2:a2:12:68:88:01:0b:5c:93:8b:
25:c7:b4:73:5d:86:95:4e:c4:22:26:ac:62:de:95:
c2:51:c4:3e:ce:d2:5d:92:65:ee:2b:5c:5e:1e:30:
a9:ac:6c:7b:1f:8a:88:c4:f8:4e:c6:dc:d5:d5:b7:
bf:4c:4c:bd:89:46:51:c6:db:ca:2c:25:f4:b2:fd:
a7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3C:95:1F:CB:0F:68:56:A1:7D:12:71:9A:C2:5B:18:9A:4C:B2:2C
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/lTyVH8sPaFahfRJxmsJbGJpMsiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.26.6.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:de:bf:be:2f:a7:c2:21:4c:7d:d9:9d:16:e8:f3:ea:1e:90:
4b:39:59:ed:e9:df:eb:1e:73:14:10:a4:83:7d:cd:39:0e:94:
61:d1:0d:af:9d:90:be:d8:09:e8:4b:3d:9d:80:08:21:c6:33:
15:e2:6b:a0:f5:32:58:26:cf:93:39:a6:99:f2:bc:7e:26:04:
44:cb:ae:79:3e:56:b4:aa:e0:0c:36:4a:f2:ff:a8:43:a8:79:
68:ba:09:9c:f8:8d:57:f4:1e:b6:be:21:8a:18:5c:14:f4:75:
c1:89:50:c0:ad:47:b3:f7:69:d4:0c:30:9f:1a:92:c9:0d:db:
2d:41:16:8e:52:ae:38:ab:1f:ee:c0:c8:cc:cb:da:19:c6:54:
79:95:0c:09:27:49:14:22:98:6f:16:24:17:c8:39:eb:b8:1e:
ad:29:0d:1a:f5:ad:6d:13:f2:19:34:e8:46:e7:19:0e:f0:00:
3b:b9:11:7f:c8:7c:35:e2:27:e2:1a:6e:2a:30:b6:d2:d6:b2:
a3:27:df:f8:60:fc:bf:ce:23:62:f5:2f:35:07:30:d3:e9:cb:
ee:a9:65:32:40:88:4d:28:34:a8:ad:5d:fd:2a:cb:e6:81:a1:
f0:cf:ca:37:40:54:88:81:bf:20:2a:86:75:a9:4b:1e:78:58:
cc:da:98:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org