Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/l_ApGU_FYgJ-Z89NBD-WXZbyzRQ.roa
File: l_ApGU_FYgJ-Z89NBD-WXZbyzRQ.roa (raw, json)
Hash identifier: AQxP0JJEGZhxEvK/3oM6AQg5rd0pCOh7coH6feDyo1s=
Subject key identifier: 97:F0:29:19:4F:C5:62:02:7E:67:CF:4D:04:3F:96:5D:96:F2:CD:14
Certificate issuer: /CN=379d103b953071caa9e1a8973808904096e793d8
Certificate serial: 018791323367F2E392E070B4A6FEE2E81EF3
Authority key identifier: 37:9D:10:3B:95:30:71:CA:A9:E1:A8:97:38:08:90:40:96:E7:93:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/l_ApGU_FYgJ-Z89NBD-WXZbyzRQ.roa
Signing time: Mon 17 Apr 2023 21:49:58 +0000
ROA not before: Mon 17 Apr 2023 21:49:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50979
IP address blocks: 195.20.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:91:32:33:67:f2:e3:92:e0:70:b4:a6:fe:e2:e8:1e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379d103b953071caa9e1a8973808904096e793d8
Validity
Not Before: Apr 17 21:49:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97f029194fc562027e67cf4d043f965d96f2cd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:af:c0:ae:c7:4f:f1:b4:79:02:f5:4b:5c:73:
d3:60:ea:bb:20:cb:db:4f:fe:d1:98:f1:ab:a3:7e:
ca:2e:f3:ff:8e:16:4a:d4:9b:e2:3f:8d:52:a3:1f:
34:86:34:fb:1c:6c:28:46:2f:05:e2:cc:9e:57:d4:
fe:57:62:ef:5b:12:fa:7f:d5:e5:8c:12:af:44:83:
c4:80:8b:fd:da:27:cc:a0:4e:ec:37:e1:a6:28:12:
a0:79:fd:7d:4f:76:f2:73:dc:f0:68:d2:5d:5a:52:
0e:3b:1f:65:d1:14:fe:99:dd:c9:e9:61:38:24:86:
d2:33:d2:2d:17:6b:33:31:4f:ff:f9:1e:a0:8a:23:
68:eb:e2:ef:39:b9:f8:d1:23:f5:e1:c3:97:3d:cb:
97:cc:b9:bc:39:7e:93:33:f9:97:26:19:e5:9d:1a:
df:63:38:2f:d1:07:78:ec:d6:5f:e0:c2:2a:0b:fb:
b5:0b:37:04:6e:f5:15:e7:eb:3e:68:a1:c5:1b:63:
28:42:77:9c:54:bf:b1:95:1e:f2:5e:f1:32:5f:9b:
7d:b1:41:e7:da:1f:98:e8:4e:00:cc:82:66:b8:87:
a0:76:b5:ba:dc:ea:de:31:e4:c6:61:d1:b0:e0:7f:
89:93:2f:18:55:76:3c:a1:81:55:0b:c1:1f:4d:99:
f5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F0:29:19:4F:C5:62:02:7E:67:CF:4D:04:3F:96:5D:96:F2:CD:14
X509v3 Authority Key Identifier:
keyid:37:9D:10:3B:95:30:71:CA:A9:E1:A8:97:38:08:90:40:96:E7:93:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/l_ApGU_FYgJ-Z89NBD-WXZbyzRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.208.0/24
Signature Algorithm: sha256WithRSAEncryption
15:09:60:c8:01:fc:b0:6b:da:23:f3:60:9a:fc:d8:6e:62:a1:
c8:94:68:a0:83:b0:a1:8f:27:ba:c4:3b:e5:eb:e0:85:e6:8c:
05:c2:bc:a3:a9:24:92:66:e3:11:5e:a9:4b:c6:94:88:e2:e5:
22:6f:a3:34:a1:0e:e5:f0:5d:95:13:5d:71:5f:b4:ec:3b:1d:
3d:12:d2:e2:a7:28:ef:e7:a7:92:5f:16:5a:c7:24:41:08:7a:
91:87:28:b3:03:48:41:7b:6d:46:56:65:72:25:19:80:fb:70:
7b:0a:e9:7b:2e:cc:a9:74:96:0f:33:8c:ae:f4:5f:e7:69:e2:
3a:6a:c9:d9:2a:a7:6c:b1:d3:d3:7f:22:d8:7a:13:1c:fc:7e:
48:82:28:90:ca:35:80:f7:ab:0f:e2:5b:e5:c4:04:c5:f5:c5:
a3:2b:58:1d:71:d3:47:89:32:bf:88:21:f9:e4:6f:f4:47:08:
4a:4a:71:7d:28:cf:68:5e:1d:a2:87:53:c6:cf:19:16:d3:e9:
a4:91:3c:d8:0b:00:81:f2:0f:aa:a8:1a:46:1e:83:4c:cd:43:
f5:9f:ba:c9:6a:f8:b1:87:b4:61:cd:f6:0b:9a:cd:34:38:d9:
6e:45:d1:ae:fa:54:7d:5e:5e:87:8e:0a:b5:93:a7:f8:1a:b6:
2c:b9:55:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:02 2024 by rpki-client on console-fra.rpki-client.org