Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/69Q-1EC_RLyzYqzsHJy1zTZOB0Q.roa
File: 69Q-1EC_RLyzYqzsHJy1zTZOB0Q.roa (raw, json)
Hash identifier: qdXlH+d8FwFVuDrg2CFcCQiSXQhO/Y5woE8WkbohASs=
Subject key identifier: EB:D4:3E:D4:40:BF:44:BC:B3:62:AC:EC:1C:9C:B5:CD:36:4E:07:44
Certificate issuer: /CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
Certificate serial: 01914C33F75D8C1F18D7AAC0C00C2AFE1261
Authority key identifier: 94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/69Q-1EC_RLyzYqzsHJy1zTZOB0Q.roa
Signing time: Tue 13 Aug 2024 14:45:59 +0000
ROA not before: Tue 13 Aug 2024 14:45:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29152
IP address blocks: 195.80.154.0/24 maxlen: 24
195.80.155.0/24 maxlen: 24
195.80.156.0/24 maxlen: 24
195.80.157.0/24 maxlen: 24
195.80.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Aug 2024 17:28:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4c:33:f7:5d:8c:1f:18:d7:aa:c0:c0:0c:2a:fe:12:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
Validity
Not Before: Aug 13 14:45:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebd43ed440bf44bcb362acec1c9cb5cd364e0744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c6:bb:34:f5:05:1d:48:70:3d:9d:4a:8b:1f:
39:ef:a9:a3:1e:b9:63:54:33:9d:34:28:66:e2:62:
97:7b:64:d9:1e:ae:92:2d:7f:e7:f2:bf:12:48:a8:
8e:0d:13:18:4b:a8:20:5a:c7:82:6c:a4:7b:d6:c9:
86:a5:41:eb:e1:d3:60:a7:f9:3b:35:5e:57:7a:0f:
7a:5f:83:47:cc:05:5b:45:58:e1:78:79:14:a9:6f:
3d:72:8d:4d:28:cb:0c:cb:85:d2:da:14:fb:42:0f:
65:9d:c0:01:88:3c:6b:d1:d3:05:97:f8:88:df:c3:
1a:62:c2:a9:fb:97:a1:74:b4:f4:97:a5:2f:26:73:
dc:58:b3:69:14:5f:26:5d:f9:cd:00:12:c0:34:f1:
88:06:57:a3:f6:51:a2:b0:1a:e4:df:65:0c:de:98:
a5:34:3f:4a:49:1f:ff:d5:b9:1f:b0:98:66:1a:b5:
c8:c7:85:01:72:39:63:0e:91:f7:a4:e4:b4:a8:c2:
f7:73:e7:3f:f6:8f:d3:a6:05:e5:dc:ee:9a:c8:27:
c3:9c:b1:01:27:15:d3:7c:e8:80:03:f3:60:9f:49:
94:cb:bd:e3:12:f6:11:3a:72:f5:92:22:7e:f8:77:
d4:7f:be:7b:c9:bf:36:f4:92:c5:5e:17:0f:97:d6:
f1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D4:3E:D4:40:BF:44:BC:B3:62:AC:EC:1C:9C:B5:CD:36:4E:07:44
X509v3 Authority Key Identifier:
keyid:94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/69Q-1EC_RLyzYqzsHJy1zTZOB0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.80.154.0-195.80.157.255
195.80.159.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:57:f8:58:b2:0f:5e:4e:ca:5b:e4:90:2e:55:d2:53:05:3b:
cf:28:37:03:05:09:32:d3:0a:b9:de:f6:f0:3e:22:ed:c6:96:
b5:99:a7:11:25:93:03:ab:f0:e2:f3:80:15:cf:4b:39:fb:9e:
b0:e4:a1:c6:b4:fa:e0:65:a4:32:20:32:9b:6b:c6:ba:6f:91:
ed:9a:da:7f:68:a0:85:55:30:b1:ec:a5:e3:ae:bf:c8:50:aa:
f3:4b:41:e1:3a:e6:70:ca:60:fc:c5:03:9f:50:6e:1e:52:15:
c4:6e:6b:83:fc:ed:cb:2f:25:59:d6:81:a0:d5:28:8f:07:d1:
f6:6e:c7:ed:eb:4f:d5:f2:ce:15:cb:81:51:2b:70:05:49:e4:
34:66:6e:77:43:f5:44:72:47:6b:c7:0e:d4:9b:a0:b4:a1:b9:
e6:bd:3d:e2:09:7d:2e:05:c0:49:cc:d8:e6:35:30:98:b3:e1:
44:22:8d:50:53:71:d6:25:0c:08:8c:08:53:47:7d:ce:e9:0a:
88:c7:b0:2d:a7:fe:88:3f:4e:1d:7d:cb:0e:d4:3f:83:f1:48:
0f:3c:d7:da:3d:d2:66:c0:40:a3:05:20:3d:55:6c:fe:50:b4:
95:7b:87:8e:20:cd:15:15:71:94:b2:23:1b:10:30:a2:43:f1:
d0:34:e0:4a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Aug 13 19:14:39 2024 by rpki-client on console-fra.rpki-client.org