Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/XxS6viHm0o7-F4FVzNVwCNg1Qg8.roa
File: XxS6viHm0o7-F4FVzNVwCNg1Qg8.roa (raw, json)
Hash identifier: ZfOvrdo8c0arEpi5N4kuOj/L0esu8216N4iHuz4b2hg=
Subject key identifier: 5F:14:BA:BE:21:E6:D2:8E:FE:17:81:55:CC:D5:70:08:D8:35:42:0F
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01856DEF681F6E6066064012ADEE67504D16
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/XxS6viHm0o7-F4FVzNVwCNg1Qg8.roa
Signing time: Sun 01 Jan 2023 15:24:44 +0000
ROA not before: Sun 01 Jan 2023 15:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15606
IP address blocks: 192.195.72.0/24 maxlen: 24
2001:7f9:c::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:68:1f:6e:60:66:06:40:12:ad:ee:67:50:4d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 15:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f14babe21e6d28efe178155ccd57008d835420f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d5:de:05:e8:82:c1:7b:e7:c9:c4:ef:14:9f:
c7:38:98:40:66:5b:86:8d:1a:f4:fe:b9:26:b3:e9:
20:cd:f6:ae:f4:e2:59:66:4f:f2:df:10:da:5d:32:
12:5e:de:1e:f5:e2:28:a4:91:a0:bd:00:2d:0b:45:
05:31:fe:31:37:d8:f4:bd:78:64:43:1d:9c:e7:31:
c2:0e:f1:95:86:c9:84:6d:61:4f:5f:8f:41:fe:90:
13:b1:50:ce:2a:f6:29:a1:67:14:56:5c:26:8e:0e:
1f:9d:01:d1:15:ae:a5:f0:17:01:a1:d6:a2:42:59:
d5:7b:13:b6:40:66:e3:3b:32:80:76:ca:74:1b:61:
24:6d:a5:2f:b4:5c:0e:de:4b:03:96:83:dd:2b:05:
11:f7:57:1e:69:fd:aa:7e:9c:cd:d5:92:5d:d1:f2:
47:91:f7:5c:e1:fa:d9:8e:59:83:dd:df:f6:e3:ae:
6e:32:c0:3b:80:e7:cf:c7:59:d0:44:48:35:be:dd:
9d:a8:ed:3d:a5:89:59:50:5d:95:cb:af:ff:4c:e0:
65:51:7d:11:99:d7:0e:50:63:0a:c9:e7:01:15:dc:
04:f0:a0:3f:0c:0a:f9:d6:e8:43:c5:c3:23:3c:27:
f5:cb:1e:aa:2c:08:cc:4c:b5:66:88:68:a0:5d:08:
f0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:14:BA:BE:21:E6:D2:8E:FE:17:81:55:CC:D5:70:08:D8:35:42:0F
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/XxS6viHm0o7-F4FVzNVwCNg1Qg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.195.72.0/24
IPv6:
2001:7f9:c::/48
Signature Algorithm: sha256WithRSAEncryption
0c:1c:96:e8:c8:05:09:cb:1e:ef:cb:c3:24:21:6f:ee:07:b8:
2a:da:a8:23:c6:fb:b1:73:1a:fc:fa:56:b6:57:89:fe:f5:aa:
7b:1c:c8:7e:65:5f:6e:9c:02:61:d2:5d:6a:78:c7:49:16:ad:
b2:50:cb:f3:d3:7e:97:cb:6e:bc:c2:bb:dc:c9:ea:af:bc:db:
20:5b:7a:74:7c:27:c8:66:3c:be:56:0d:35:38:e1:2b:0a:1a:
a5:63:f4:d6:af:d8:d7:7d:ae:75:14:5b:62:64:cd:24:ac:04:
99:ae:10:09:41:d4:09:36:de:aa:e3:35:fa:a4:3f:b6:8a:a4:
e9:d8:c2:7f:b5:96:69:69:28:d8:02:d7:fb:cd:8a:7c:e4:c3:
a8:7e:c3:06:74:be:2b:5d:af:28:08:ee:f8:c1:8c:c0:85:da:
69:d5:c0:aa:44:2d:ca:07:6f:7d:58:dd:30:74:ce:3d:7e:1c:
ea:ec:4f:41:d9:b4:08:17:f7:28:33:9a:27:71:ea:0f:45:63:
3d:31:8c:da:0c:a8:2e:d9:44:d5:b8:60:07:7f:bf:c0:22:05:
02:6a:b8:74:7e:0c:25:54:ab:64:46:92:ba:9b:81:1f:33:20:
9f:e7:7c:d8:29:96:f0:6e:14:d5:46:fd:c4:da:4f:09:32:d6:
cc:c1:86:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:40 2024 by rpki-client on console-fra.rpki-client.org