Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/c1q8r2QipLsVyGo0R5fHXbIJHm0.roa
File: c1q8r2QipLsVyGo0R5fHXbIJHm0.roa (raw, json)
Hash identifier: Bb+6S6FCZxNGoE7p1Wa9GIvOtRedVC6FUXXWIBRIoFM=
Subject key identifier: 73:5A:BC:AF:64:22:A4:BB:15:C8:6A:34:47:97:C7:5D:B2:09:1E:6D
Certificate issuer: /CN=93f01e9086d40d508f5842e982f253689f7fe4c9
Certificate serial: 0185724C950ACFB3E7AC6770F775C95A44E2
Authority key identifier: 93:F0:1E:90:86:D4:0D:50:8F:58:42:E9:82:F2:53:68:9F:7F:E4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/c1q8r2QipLsVyGo0R5fHXbIJHm0.roa
Signing time: Mon 02 Jan 2023 11:44:59 +0000
ROA not before: Mon 02 Jan 2023 11:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56640
IP address blocks: 195.22.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:95:0a:cf:b3:e7:ac:67:70:f7:75:c9:5a:44:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93f01e9086d40d508f5842e982f253689f7fe4c9
Validity
Not Before: Jan 2 11:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=735abcaf6422a4bb15c86a344797c75db2091e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:41:9c:12:2c:d2:1b:fc:8c:d4:88:94:44:46:
63:c6:fd:56:b7:0a:53:ad:6d:9e:fc:ab:f5:8e:3e:
35:b5:4b:fc:bd:15:b8:af:8e:08:fd:6f:5a:89:53:
40:0f:74:2e:6c:f5:6a:83:b7:9f:87:0b:fa:6e:40:
07:02:9f:25:6f:db:32:2a:e6:6d:70:88:ee:19:61:
b3:29:2f:1d:ac:b2:f5:69:1d:ec:97:47:ca:c0:ed:
65:dd:86:34:15:70:a1:07:c5:76:f8:03:34:ed:71:
d4:84:3f:b0:81:81:f2:d7:da:61:17:b9:28:22:d7:
ce:6d:2e:aa:f8:b5:a7:2f:3a:ad:af:74:99:13:d2:
e2:74:67:05:71:2b:49:8e:c7:9b:d4:ac:20:8d:42:
04:85:13:6d:58:bf:54:b7:dc:49:e6:b1:30:f5:cc:
bb:31:eb:f3:61:0b:7c:c0:0f:c6:c5:7c:8b:82:ba:
09:c1:07:93:84:35:e4:fd:4f:84:6d:ec:89:0e:b3:
bd:41:db:f1:05:69:2d:90:c7:85:2c:00:35:75:c4:
ca:18:2e:d7:f0:da:90:70:80:c8:b5:60:50:4f:97:
87:d7:1e:bd:b3:be:80:5e:5e:8c:cb:e6:70:81:d3:
8a:41:7f:be:45:4d:b0:c2:f6:70:27:0a:93:1f:3a:
08:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5A:BC:AF:64:22:A4:BB:15:C8:6A:34:47:97:C7:5D:B2:09:1E:6D
X509v3 Authority Key Identifier:
keyid:93:F0:1E:90:86:D4:0D:50:8F:58:42:E9:82:F2:53:68:9F:7F:E4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/c1q8r2QipLsVyGo0R5fHXbIJHm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.22.121.0/24
Signature Algorithm: sha256WithRSAEncryption
13:49:62:37:96:3b:55:41:df:8c:77:ba:ce:af:83:90:cd:d3:
ed:13:3d:69:8e:0c:24:f5:04:0e:f6:67:2a:84:15:a0:65:1e:
36:f0:b0:fe:36:a0:17:b6:ba:1c:ef:7d:b3:98:82:a0:8c:05:
05:50:c2:f7:20:2e:1c:cb:2b:b0:a3:9c:5b:cd:51:58:4c:01:
fd:d9:a2:85:95:e4:89:44:b0:af:f3:a7:de:9d:64:46:6d:c2:
aa:c0:77:b4:b4:ef:51:7d:1a:3b:25:aa:31:0a:a9:9b:13:6f:
2b:17:93:ae:47:80:9a:39:f0:45:a4:7a:af:61:46:b1:c1:02:
82:7c:b2:f5:5a:5d:74:68:f8:c1:f4:5e:78:d4:d0:64:c4:f6:
16:dc:54:aa:82:aa:98:7f:2a:a9:3e:80:cc:cf:4e:ad:d1:83:
2c:b8:75:c5:77:d6:05:17:cc:7d:71:eb:ae:7c:e4:6f:d1:14:
61:9d:39:3c:04:d2:36:f9:d9:82:a9:8d:72:7e:c7:d5:e0:8d:
ed:22:1d:41:48:48:b3:77:77:17:a6:05:42:aa:34:c7:bb:06:
98:3c:de:f5:6c:30:16:96:d5:38:64:00:46:df:97:20:7d:1a:
d0:05:d8:1b:0a:8d:71:03:a8:08:78:35:48:65:d3:5f:d3:b7:
54:54:90:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:53 2024 by rpki-client on console-ams.rpki-client.org