Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/09l0HMaqjBYEKYZmOG37FsRseVE.roa
File: 09l0HMaqjBYEKYZmOG37FsRseVE.roa (raw, json)
Hash identifier: FI+O9JvPYF/OCKG8gVPKXP+D3tekZbXYDuQvO/v/UTc=
Subject key identifier: D3:D9:74:1C:C6:AA:8C:16:04:29:86:66:38:6D:FB:16:C4:6C:79:51
Certificate issuer: /CN=215181b82776978ad2dbb69528dce9b2098eb07e
Certificate serial: 01856C9CB0F50B3CE7D4675ED1260BAAA725
Authority key identifier: 21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/09l0HMaqjBYEKYZmOG37FsRseVE.roa
Signing time: Sun 01 Jan 2023 09:14:46 +0000
ROA not before: Sun 01 Jan 2023 09:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206293
IP address blocks: 195.5.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:b0:f5:0b:3c:e7:d4:67:5e:d1:26:0b:aa:a7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215181b82776978ad2dbb69528dce9b2098eb07e
Validity
Not Before: Jan 1 09:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3d9741cc6aa8c1604298666386dfb16c46c7951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:03:d4:cb:f1:54:62:11:0a:2a:86:55:4d:38:
90:1d:00:b7:1b:26:51:5d:25:f4:26:f0:9e:9e:23:
71:a1:4d:5e:13:02:88:88:00:db:ef:2b:4a:32:be:
94:95:b4:ec:3c:50:4b:86:af:82:e3:1f:90:48:c1:
95:90:6c:c4:86:4e:c3:95:77:51:2d:a4:08:c8:a1:
a7:dc:a5:bb:80:22:cd:fe:43:28:6a:ac:ab:b9:42:
79:e2:ae:63:4f:52:30:ec:81:d6:2d:65:9c:f7:a0:
df:b6:e0:2f:23:28:5d:41:52:26:03:2c:9f:9e:bd:
20:af:8c:94:70:86:36:04:64:f8:86:22:ba:0c:22:
cd:65:a9:a0:7b:80:d0:59:b9:0d:7f:e3:dd:77:ba:
71:39:62:d3:0f:a3:3e:65:8e:56:03:b9:60:4e:39:
d9:3b:f5:bc:be:47:4e:ae:15:0f:43:ba:e0:ab:0a:
a7:00:87:2c:b4:b9:c0:a0:72:2d:4f:87:6b:e5:b5:
44:9f:7b:ed:61:1d:4e:ef:00:e1:73:8f:8f:80:18:
07:61:3d:f3:c1:7e:d2:65:b9:64:c0:0b:70:5c:1e:
46:78:61:df:05:04:ae:54:fa:11:54:87:cf:75:a3:
37:b7:a0:df:44:19:fc:60:ac:eb:ee:f9:90:37:7f:
98:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D9:74:1C:C6:AA:8C:16:04:29:86:66:38:6D:FB:16:C4:6C:79:51
X509v3 Authority Key Identifier:
keyid:21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/09l0HMaqjBYEKYZmOG37FsRseVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.191.0/24
Signature Algorithm: sha256WithRSAEncryption
87:2c:c3:e3:bb:77:a6:e5:bd:8f:47:9c:69:70:1d:5e:2d:a4:
cd:7a:e6:e4:4d:94:a0:1c:98:56:bd:62:49:e6:bf:f7:b8:6c:
62:ca:a2:23:3e:98:ef:1c:2b:37:4c:32:4e:09:2e:7b:75:80:
8d:d1:0d:79:68:e6:c6:3a:10:2e:cf:1e:1a:95:92:ae:38:3b:
7e:c1:35:3e:df:cb:9c:9c:9b:88:e9:2d:cb:9e:6d:59:da:cd:
a1:bd:f7:26:ab:65:ca:96:5c:6b:d2:b5:83:24:5f:3d:97:08:
50:45:33:d4:db:40:93:96:44:a3:0c:ab:1f:4d:a3:5a:28:6a:
b3:a3:ce:72:4f:1a:02:51:e5:e1:5f:15:62:e6:79:47:45:ef:
8c:ab:77:f9:a8:10:20:d0:41:42:22:16:c3:05:09:2e:62:2a:
0f:84:ce:e8:c9:b9:b1:7c:9b:c8:df:58:e9:4b:28:0f:73:e6:
ed:f7:87:5a:ed:8a:62:46:ae:4f:b7:fe:c0:23:6b:50:42:8b:
00:01:64:86:93:fd:a0:81:89:99:00:67:c5:2f:25:a4:e6:77:
6a:bc:92:82:96:0d:b0:8c:2d:da:af:ef:45:62:9c:9d:97:b0:
c1:be:75:10:6f:17:52:d9:f6:e5:63:64:ec:df:36:25:55:63:
e1:4a:29:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:04 2024 by rpki-client on console-fra.rpki-client.org