Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/7Q6lRTCEzETPASjalY7quj1Y3Gw.roa
File: 7Q6lRTCEzETPASjalY7quj1Y3Gw.roa (raw, json)
Hash identifier: QBP3FmeKAnCys6WgpiiFM4lhgUHaxQlt4J25pgr8jqA=
Subject key identifier: ED:0E:A5:45:30:84:CC:44:CF:01:28:DA:95:8E:EA:BA:3D:58:DC:6C
Certificate issuer: /CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Certificate serial: 018570396313D50522224ACF0C0F06A3878E
Authority key identifier: 69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/7Q6lRTCEzETPASjalY7quj1Y3Gw.roa
Signing time: Mon 02 Jan 2023 02:04:47 +0000
ROA not before: Mon 02 Jan 2023 02:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41543
IP address blocks: 195.95.158.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:63:13:d5:05:22:22:4a:cf:0c:0f:06:a3:87:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Validity
Not Before: Jan 2 02:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed0ea5453084cc44cf0128da958eeaba3d58dc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:06:8d:bc:88:05:16:18:e2:28:99:a0:df:66:
94:1f:36:8b:e8:40:98:f6:61:37:a8:4d:f5:f8:e7:
f0:5c:54:de:9f:d7:3a:08:e0:9d:95:56:e4:8a:a7:
96:d1:77:7b:09:90:13:fb:f4:38:e2:7f:3d:1d:27:
f5:ca:b6:bb:92:3d:8c:a9:f3:fc:2a:51:a1:fc:e6:
b4:f2:fd:98:6e:d0:88:bb:99:99:26:b3:a9:ea:5d:
73:18:ae:bd:69:09:0e:56:b3:3c:64:6e:cb:e2:e6:
07:62:46:20:91:c6:a1:80:09:c5:01:30:a0:05:48:
63:4c:35:51:aa:94:7b:b5:25:e4:bd:2c:79:e9:8b:
f2:79:3b:b0:20:81:e7:48:3f:e2:b9:1a:06:26:ee:
73:98:11:86:6b:46:ae:74:bd:f9:72:ac:52:3a:43:
2d:02:25:ae:4d:d0:c3:17:76:b2:d8:f4:3f:3b:8f:
4c:66:95:5d:94:9f:29:cc:11:7d:49:67:4c:d0:d4:
93:81:b9:62:8b:9d:18:0d:83:f4:6b:68:ab:91:19:
19:4e:b9:b6:0a:0a:ea:91:8a:54:99:71:12:98:aa:
1f:52:e9:47:f0:a2:bd:2d:7f:5f:1d:f3:8d:23:41:
77:93:2c:8f:d4:42:f9:c6:80:56:39:7a:16:69:cc:
0e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0E:A5:45:30:84:CC:44:CF:01:28:DA:95:8E:EA:BA:3D:58:DC:6C
X509v3 Authority Key Identifier:
keyid:69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/7Q6lRTCEzETPASjalY7quj1Y3Gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.158.0/24
Signature Algorithm: sha256WithRSAEncryption
43:09:41:97:ed:96:43:f2:66:5a:80:83:9f:b1:ee:26:79:c3:
7a:cd:88:db:13:4d:46:1c:51:8c:4b:4f:0a:fa:33:e8:cb:2a:
ea:0e:87:0a:70:b5:02:8e:bf:db:f5:75:04:a2:de:bd:c0:9f:
51:51:09:be:f6:2b:39:48:85:e7:30:f4:3c:02:e6:14:08:76:
17:d2:c5:b9:3f:0f:2d:45:13:80:1f:a4:eb:d1:fb:c8:6f:a8:
d0:ff:dd:f7:62:40:17:7d:42:0a:5e:31:44:9e:d1:b5:c3:5c:
99:32:98:3e:82:5d:bf:17:47:53:fa:8d:f4:85:82:38:19:01:
05:d3:37:c7:e1:6c:e6:67:55:94:e0:25:98:f2:0d:32:f7:a9:
05:fd:14:6e:21:f5:f4:79:1f:03:11:ba:16:b5:b9:89:ab:e6:
eb:78:be:22:3c:dd:e9:ea:4a:a9:5f:f4:70:9f:e9:38:af:80:
d4:3e:ed:a5:45:9f:72:5f:b1:82:6b:41:c2:79:b1:4a:2e:d5:
7d:c4:95:4a:99:92:03:61:58:fe:f8:e3:5d:6d:99:f1:f3:cb:
f5:2c:c8:bd:24:8f:5a:05:66:2f:3e:e8:bd:d3:d4:31:5a:e6:
69:43:2b:29:a9:23:0d:e4:57:c3:af:98:fd:87:0d:46:e9:17:
16:08:2e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:49:41 2024 by rpki-client on console-fra.rpki-client.org