Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/c9IWS4fYs30kSOR7spfY1O5WWqI.roa
File: c9IWS4fYs30kSOR7spfY1O5WWqI.roa (raw, json)
Hash identifier: u1TSx5ivsbU+6RDFs8+9rOPmjz/0phoP5EV8bPFhKmk=
Subject key identifier: 73:D2:16:4B:87:D8:B3:7D:24:48:E4:7B:B2:97:D8:D4:EE:56:5A:A2
Certificate issuer: /CN=d23b6477e1c84f52907cd60c63ea83ef5e4ac782
Certificate serial: 0186B6672D85699667EAE93B8080C503E57A
Authority key identifier: D2:3B:64:77:E1:C8:4F:52:90:7C:D6:0C:63:EA:83:EF:5E:4A:C7:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/c9IWS4fYs30kSOR7spfY1O5WWqI.roa
Signing time: Mon 06 Mar 2023 10:11:00 +0000
ROA not before: Mon 06 Mar 2023 10:11:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41299
IP address blocks: 195.60.216.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b6:67:2d:85:69:96:67:ea:e9:3b:80:80:c5:03:e5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23b6477e1c84f52907cd60c63ea83ef5e4ac782
Validity
Not Before: Mar 6 10:11:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73d2164b87d8b37d2448e47bb297d8d4ee565aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:28:7b:15:71:61:59:e0:8f:e1:42:02:63:9e:
da:ab:25:b0:02:97:73:27:11:86:32:ef:2e:fe:b7:
b3:22:1d:cf:82:51:d0:17:58:3a:35:f5:82:f7:26:
b7:fc:38:13:79:d0:4e:33:46:4e:53:f0:be:46:04:
35:1b:fc:6a:76:2a:28:70:f6:81:2a:da:6b:0e:63:
53:5c:ae:dd:44:0b:7d:35:59:9a:6c:6d:63:75:09:
67:3a:39:47:f4:77:a2:e8:9e:e8:e3:2a:4a:b8:0b:
c5:d6:35:c8:b2:27:27:c5:2c:5f:3a:eb:a4:4d:c6:
4d:c3:18:84:c3:a4:5a:ae:70:a6:ef:b5:93:cc:03:
d3:14:ba:ee:16:10:e9:98:68:84:4c:48:a0:d2:fa:
a9:b2:f2:a8:22:0c:42:92:11:3a:0b:82:47:1b:ca:
32:6e:4a:89:62:0c:f2:79:45:6e:66:8a:44:d8:c3:
e3:d4:ba:13:7a:47:c1:db:09:88:56:46:ce:0f:8f:
d4:8c:18:36:3c:87:0f:c2:c3:31:7c:4d:e4:ae:d7:
4d:6f:f2:58:7f:fd:47:2f:bf:c2:a5:1f:75:12:ee:
43:68:20:fc:24:d6:48:d0:62:22:01:af:fe:e4:e7:
d0:e1:1c:08:ab:ba:c2:8a:94:c7:6a:e1:e7:dd:5f:
53:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D2:16:4B:87:D8:B3:7D:24:48:E4:7B:B2:97:D8:D4:EE:56:5A:A2
X509v3 Authority Key Identifier:
keyid:D2:3B:64:77:E1:C8:4F:52:90:7C:D6:0C:63:EA:83:EF:5E:4A:C7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jtkd-HIT1KQfNYMY-qD715Kx4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/c9IWS4fYs30kSOR7spfY1O5WWqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/4559fd-b409-479c-a40f-2255585ddecb/1/0jtkd-HIT1KQfNYMY-qD715Kx4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.216.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:49:4f:2f:cf:42:ef:96:f5:a9:00:c2:c1:a7:fb:bb:56:84:
f8:d8:90:47:46:71:ec:e5:3f:5e:04:ab:8b:d4:05:66:a2:26:
10:97:41:02:0f:ef:3e:7a:1d:ab:89:ac:1f:75:23:6c:5e:83:
c2:4a:a1:42:21:cb:72:07:68:65:1b:b6:76:63:c7:d1:bb:6b:
d5:a7:25:1f:1a:33:ea:98:3c:4e:3e:c1:9f:ef:28:59:90:64:
1a:f1:1c:fc:1e:54:b5:e8:39:e5:2a:c4:05:6a:f8:7a:0c:86:
79:a6:ec:a6:7f:b4:42:8b:6b:60:0f:a6:50:b0:22:82:eb:ac:
7c:9c:9e:c1:c4:b4:b9:05:4a:94:1c:93:02:d8:07:1e:5d:c7:
6d:b6:6a:8b:31:8c:e8:1b:bc:12:a1:8d:fd:3b:a7:5e:08:cd:
21:72:dc:df:5e:a8:35:fa:cd:6a:fa:21:92:7e:d6:90:c6:d8:
2e:71:30:bd:2f:65:06:fa:ee:19:b5:1c:42:10:6e:17:8e:ac:
74:38:51:3e:61:86:4c:21:7b:a6:08:24:73:d1:ec:ed:e8:9e:
0a:8f:5b:58:fa:8e:fd:cf:9d:ee:07:f7:3e:11:f5:df:c4:fc:
10:a4:18:12:38:c5:1d:01:cf:3c:2c:63:fe:52:d6:85:01:3b:
75:3c:95:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:30 2024 by rpki-client on console-ams.rpki-client.org