Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/DI1iDSoffEbi6wvDa-QLoypT7Lw.roa
File: DI1iDSoffEbi6wvDa-QLoypT7Lw.roa (raw, json)
Hash identifier: IM2NzkrdI81Em0NnVuMqYXVcZnhhjutPIgqE6tdbVMU=
Subject key identifier: 0C:8D:62:0D:2A:1F:7C:46:E2:EB:0B:C3:6B:E4:0B:A3:2A:53:EC:BC
Certificate issuer: /CN=0241ef4436142506f2659383c16ebda1e29b4f86
Certificate serial: 01856E41C8FA82C4349AE244CAF6224A049D
Authority key identifier: 02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/DI1iDSoffEbi6wvDa-QLoypT7Lw.roa
Signing time: Sun 01 Jan 2023 16:54:43 +0000
ROA not before: Sun 01 Jan 2023 16:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 195.47.207.0/24 maxlen: 24
193.164.14.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:41:c8:fa:82:c4:34:9a:e2:44:ca:f6:22:4a:04:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241ef4436142506f2659383c16ebda1e29b4f86
Validity
Not Before: Jan 1 16:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c8d620d2a1f7c46e2eb0bc36be40ba32a53ecbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d7:4f:f6:23:03:c4:d1:18:4a:e4:ca:45:f6:
1d:b2:80:ba:d3:4a:a7:eb:fa:a3:75:92:5c:0f:24:
9c:13:96:66:a0:c7:57:20:3c:8b:e7:9d:0f:67:32:
d7:3e:f4:c0:c2:a7:ed:f6:b9:70:45:49:0c:73:d5:
18:8d:e4:91:0f:57:30:77:ce:bd:6e:69:aa:c7:51:
15:49:e2:a9:6c:62:91:d5:4f:ef:df:ab:c1:76:2b:
5a:55:d0:c3:f0:25:00:0c:b4:78:a9:f2:39:4f:f4:
2e:3c:24:59:0c:9b:8c:c6:77:42:0e:d0:cd:80:d6:
66:c7:6f:ba:76:ed:b7:83:a6:6e:de:3c:cf:bb:65:
bf:64:68:30:14:18:5d:2f:c8:55:63:c2:27:4e:c5:
d9:9f:51:ee:28:d3:e0:84:32:57:25:a5:52:0d:a2:
38:6b:ee:c1:61:76:16:3d:59:5e:68:da:56:cd:49:
4b:39:23:77:94:7e:12:37:06:d4:56:4a:9f:46:15:
f0:94:af:93:bb:aa:a9:1d:bb:0f:73:47:dd:70:82:
e6:70:e7:f1:68:3d:34:21:5c:70:83:81:3f:a0:cb:
07:62:2a:45:7f:f6:ff:09:6e:b1:3d:79:2f:b4:81:
72:5d:a3:a7:d7:0c:0e:c4:63:8e:34:ab:56:28:c8:
2d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8D:62:0D:2A:1F:7C:46:E2:EB:0B:C3:6B:E4:0B:A3:2A:53:EC:BC
X509v3 Authority Key Identifier:
keyid:02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/DI1iDSoffEbi6wvDa-QLoypT7Lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.14.0/24
195.47.207.0/24
Signature Algorithm: sha256WithRSAEncryption
64:3b:11:3b:5f:2c:eb:51:d5:4c:12:03:25:02:47:7e:18:5f:
ac:fe:07:04:cc:3c:80:6c:26:09:bc:4b:6b:3f:75:34:fc:f5:
40:45:57:77:3c:ca:a6:e7:0c:aa:0f:21:22:a4:34:50:50:76:
48:dd:d7:2e:f0:af:b1:69:e1:e6:f9:cb:d5:34:f4:e6:91:53:
c6:b7:64:c9:7a:69:20:cd:86:98:2d:42:d6:66:1d:2a:44:a1:
b5:79:0a:1c:2b:ab:64:81:c4:f7:80:24:71:01:4b:70:d3:52:
3d:15:5d:e9:57:31:93:66:6a:08:fc:dc:cd:5d:a8:3b:68:26:
db:60:9c:21:6c:de:c3:bf:dd:41:6b:f1:a8:68:1e:fe:50:c3:
e2:92:72:45:3f:88:08:2f:da:a2:c6:17:40:f8:a4:bc:cf:ff:
ec:55:fd:03:41:c5:86:01:5e:bc:c4:14:df:cf:49:f0:3f:40:
7d:b8:77:eb:37:11:08:1c:29:b0:67:e1:f9:b0:4c:79:43:de:
64:c2:38:d0:6e:c8:63:a9:f3:4a:17:12:e5:ca:63:51:6f:2c:
34:ab:a8:d7:be:d1:e4:34:28:45:a6:ba:e3:97:75:65:4c:58:
fa:1c:85:f5:20:f0:cd:2d:9b:3b:6e:d5:24:d7:7e:91:00:5e:
bb:32:76:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:29 2024 by rpki-client on console-ams.rpki-client.org