Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/0zM0lEt0WWlobrw2pbbLnuj7CJM.roa
File: 0zM0lEt0WWlobrw2pbbLnuj7CJM.roa (raw, json)
Hash identifier: lJj/EecMjA9mXrEa6jnAxBsOrsJVgJMhedPA8egZlNs=
Subject key identifier: D3:33:34:94:4B:74:59:69:68:6E:BC:36:A5:B6:CB:9E:E8:FB:08:93
Certificate issuer: /CN=39f086ca6211bb95d0643089c7da576fe67c2152
Certificate serial: 018964C04ED2AE4CB8ADEDFFAC226E7CC1A1
Authority key identifier: 39:F0:86:CA:62:11:BB:95:D0:64:30:89:C7:DA:57:6F:E6:7C:21:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfCGymIRu5XQZDCJx9pXb-Z8IVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/0zM0lEt0WWlobrw2pbbLnuj7CJM.roa
Signing time: Mon 17 Jul 2023 16:47:51 +0000
ROA not before: Mon 17 Jul 2023 16:47:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 195.211.164.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:4e:d2:ae:4c:b8:ad:ed:ff:ac:22:6e:7c:c1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f086ca6211bb95d0643089c7da576fe67c2152
Validity
Not Before: Jul 17 16:47:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d33334944b745969686ebc36a5b6cb9ee8fb0893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2a:e7:b6:6b:78:05:9b:4d:a3:9e:d5:cb:ca:
20:e2:bf:98:a3:9f:69:e5:3f:06:79:cb:f7:ae:07:
61:27:01:81:74:33:64:25:44:0f:62:c2:85:c2:73:
14:50:26:df:80:e4:b9:fe:64:32:c6:65:fa:6b:91:
54:19:6b:a4:ad:3d:3a:d8:e7:e0:42:0c:15:35:35:
f4:d9:02:8b:ba:a5:23:82:97:af:98:f1:9b:2a:15:
9e:7f:35:5a:e0:46:6f:53:83:b9:3a:fc:5e:75:25:
8e:60:50:cd:d6:c6:28:33:fc:26:2e:e6:09:17:bb:
fa:c7:b7:07:3d:a6:23:61:b2:36:37:70:fe:99:07:
81:cc:d4:69:15:b1:65:58:8b:6d:8b:b7:76:c9:d5:
ba:55:98:fc:ea:0a:21:cd:98:11:88:7b:e6:21:59:
88:ce:78:b0:25:bc:77:44:30:f4:36:b0:53:45:e7:
3c:a1:e5:5a:43:b6:aa:4f:f5:ec:ef:5a:22:ae:b9:
3c:98:c3:41:41:09:12:3e:f4:39:58:e6:c2:4f:9d:
1f:2b:3c:f1:11:d2:81:f8:b5:9a:f2:c2:5a:64:19:
42:d8:77:7e:60:ed:d3:31:eb:34:9d:ed:94:e5:bd:
33:98:a5:2f:6b:89:ad:39:a4:89:d0:19:4b:0d:2a:
38:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:33:34:94:4B:74:59:69:68:6E:BC:36:A5:B6:CB:9E:E8:FB:08:93
X509v3 Authority Key Identifier:
keyid:39:F0:86:CA:62:11:BB:95:D0:64:30:89:C7:DA:57:6F:E6:7C:21:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfCGymIRu5XQZDCJx9pXb-Z8IVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/0zM0lEt0WWlobrw2pbbLnuj7CJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.164.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:0b:59:84:94:e1:fc:e1:86:9b:c1:54:eb:47:fc:82:37:49:
66:54:62:b1:06:1f:33:37:f7:91:fd:ff:de:42:16:ae:52:f5:
8b:fe:9b:7c:fe:14:de:27:e5:c0:64:78:ca:a1:ea:5b:3d:07:
95:b4:53:74:f9:d1:de:ab:21:4e:63:dc:22:9d:9b:22:36:99:
c6:2a:5e:b8:8d:f9:e5:0a:c6:5d:2c:6b:2b:4f:b6:51:1b:29:
92:50:6d:2f:a3:56:98:61:96:65:14:0b:5e:59:a2:99:a3:8f:
05:7b:00:91:f4:f5:90:fd:d6:9f:1f:ee:53:10:60:c7:bf:f1:
bc:25:d2:fa:d3:8a:66:32:d7:76:5c:e2:46:7d:f0:61:c6:6a:
ee:53:33:92:2b:5d:ea:7d:d6:32:63:d5:75:45:b5:0d:02:14:
ee:ea:46:60:a2:f9:6c:3d:a3:d2:28:fe:20:01:55:44:4e:21:
a9:b8:e7:39:49:ef:f8:3d:90:eb:7e:0e:97:83:8b:60:e7:1c:
77:a8:dd:3a:23:b1:5f:2e:5d:c3:62:d6:85:44:e0:97:7f:ba:
2a:68:e4:53:18:2e:5f:64:0f:6a:7c:a1:dc:b4:6f:3c:28:91:
b2:82:da:16:ae:4f:66:60:48:0d:96:c3:a3:6e:78:49:c9:ab:
67:e3:bb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:10:45 2024 by rpki-client on console-ams.rpki-client.org