Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/Z-F10Qp8lyVSfk2nCC-ivHJ8pbU.roa
File: Z-F10Qp8lyVSfk2nCC-ivHJ8pbU.roa (raw, json)
Hash identifier: cgdLK7LrVBKTC6YHGvExlPKyILO+s62F4i/GuxJ/uUE=
Subject key identifier: 67:E1:75:D1:0A:7C:97:25:52:7E:4D:A7:08:2F:A2:BC:72:7C:A5:B5
Certificate issuer: /CN=ac08815e8c6503601f254cab371bec471bd7eaa6
Certificate serial: 0185704BDD02FBC3550100273375B93A1AD4
Authority key identifier: AC:08:81:5E:8C:65:03:60:1F:25:4C:AB:37:1B:EC:47:1B:D7:EA:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAiBXoxlA2AfJUyrNxvsRxvX6qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/Z-F10Qp8lyVSfk2nCC-ivHJ8pbU.roa
Signing time: Mon 02 Jan 2023 02:24:58 +0000
ROA not before: Mon 02 Jan 2023 02:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42356
IP address blocks: 195.200.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:dd:02:fb:c3:55:01:00:27:33:75:b9:3a:1a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac08815e8c6503601f254cab371bec471bd7eaa6
Validity
Not Before: Jan 2 02:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67e175d10a7c9725527e4da7082fa2bc727ca5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1f:b5:f0:ae:18:0c:92:fa:49:b9:d6:98:0b:
fa:79:be:c7:5c:95:79:23:27:8b:47:dc:fc:aa:ba:
be:47:dc:98:52:e0:63:76:27:29:b8:73:c6:27:82:
bd:ca:c9:58:ee:cb:63:85:15:dd:76:87:29:f1:dc:
38:53:fd:cc:9d:2e:80:15:ed:0c:0a:c3:61:38:8b:
cc:88:9d:44:24:e1:56:09:19:26:5f:5c:96:cf:63:
eb:01:82:ae:d1:f0:2e:fb:12:2d:79:c2:99:b9:51:
d8:a6:af:e3:dc:85:f3:c5:85:5b:e2:3c:f9:ab:4c:
09:04:dd:3e:59:40:f4:b6:ec:53:13:da:86:91:f4:
65:16:5e:01:5b:b4:ed:73:cf:3d:fb:9f:07:37:22:
43:75:6a:80:97:68:ff:54:43:0d:19:7b:c1:a3:25:
3e:0b:2e:b6:4f:9d:8e:87:03:b7:26:49:dd:f2:63:
b4:c2:c8:b9:4c:b5:e4:c5:1e:95:c7:4a:30:f9:be:
15:0b:2b:3e:08:1a:30:b1:20:08:24:0d:8f:6b:66:
b7:6c:da:c8:de:96:60:1a:02:92:6d:70:10:c7:98:
f6:d2:00:bc:d3:c4:e6:d5:d9:c0:85:59:3e:be:22:
af:6b:f5:21:2b:0f:72:b3:2d:f8:d1:fd:65:73:c0:
b3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E1:75:D1:0A:7C:97:25:52:7E:4D:A7:08:2F:A2:BC:72:7C:A5:B5
X509v3 Authority Key Identifier:
keyid:AC:08:81:5E:8C:65:03:60:1F:25:4C:AB:37:1B:EC:47:1B:D7:EA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAiBXoxlA2AfJUyrNxvsRxvX6qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/Z-F10Qp8lyVSfk2nCC-ivHJ8pbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/rAiBXoxlA2AfJUyrNxvsRxvX6qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.208.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:bb:61:26:b7:73:52:ae:b5:f3:22:30:2d:3b:1f:b6:14:1d:
2a:ee:e2:fe:81:7f:22:54:85:b4:01:52:82:27:bd:75:c6:a3:
9e:41:4f:a3:54:35:77:8d:c9:d0:7e:e7:71:67:7f:07:7c:e6:
d4:31:b5:d0:d5:12:33:2d:ef:99:45:cc:4d:c2:de:6a:87:fe:
8e:3a:f5:c3:6f:58:a3:e6:66:e6:41:c7:a2:c1:75:6d:32:5c:
c0:42:4b:30:d8:3f:a0:7d:93:62:e7:f0:99:29:b3:bf:2c:b0:
e7:02:8c:d0:47:79:8e:80:96:f9:89:c9:2a:c6:e9:6b:3d:13:
8d:7a:c4:c4:59:d4:23:df:05:2c:60:73:53:09:51:5a:a6:c2:
b1:be:0f:47:17:de:2a:30:29:8a:96:08:c3:e2:68:84:57:e5:
2d:44:a4:b7:02:03:26:1d:2d:77:e3:e5:87:a8:73:37:db:3c:
46:bb:5f:52:54:a9:70:8a:a0:52:f5:c9:24:09:33:92:06:ed:
9f:16:41:67:42:eb:5b:2a:8d:16:02:47:4a:d8:db:75:a9:2a:
2e:c0:d7:fa:d7:6a:4c:8d:62:3e:48:84:66:d1:ce:0a:2a:4a:
9a:1b:be:09:36:aa:f7:60:95:77:32:19:ed:2d:7e:66:49:ef:
ce:3f:6f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:52 2024 by rpki-client on console-ams.rpki-client.org