Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/aU-deSd6a-RSkixfTXs-m3PS5ds.roa
File: aU-deSd6a-RSkixfTXs-m3PS5ds.roa (raw, json)
Hash identifier: /E1hbPbpGj1Wqr24I++B4ssg+EvqyFvTE8jLTHXV/S8=
Subject key identifier: 69:4F:9D:79:27:7A:6B:E4:52:92:2C:5F:4D:7B:3E:9B:73:D2:E5:DB
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01856DEF80C4A13F2C29A7C30C97A57B27FB
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/aU-deSd6a-RSkixfTXs-m3PS5ds.roa
Signing time: Sun 01 Jan 2023 15:24:50 +0000
ROA not before: Sun 01 Jan 2023 15:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208491
IP address blocks: 195.187.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:80:c4:a1:3f:2c:29:a7:c3:0c:97:a5:7b:27:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 15:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=694f9d79277a6be452922c5f4d7b3e9b73d2e5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fe:94:55:0b:ce:5c:e8:f7:0d:ca:fe:25:28:
ed:01:28:63:79:1b:01:cf:74:61:7d:d3:9c:31:88:
9f:a6:a0:f5:4e:ac:b6:bc:24:cc:3e:35:85:ff:f7:
d9:f3:00:0e:d6:e9:42:0d:ec:a4:dc:50:b4:7c:41:
06:ee:05:da:3a:c8:d7:d8:cf:d5:0e:44:b0:02:c0:
ba:ca:68:e0:e0:89:6e:45:a2:9b:f0:27:95:04:42:
09:7e:a2:ab:f0:3e:6f:0d:07:39:42:6b:77:45:2e:
9b:5c:93:07:c1:98:b3:3d:16:6f:cc:6f:a2:f7:3a:
43:ac:8a:a1:e4:80:1b:dc:88:e5:7e:16:92:2d:e9:
da:a4:3a:4a:5c:7e:9b:10:13:8a:f3:a1:d1:1d:6f:
8f:8f:ae:71:da:4e:79:de:c6:b7:4e:f5:96:bb:1c:
f2:16:95:ce:40:37:5a:e9:1c:bc:2f:14:09:2a:43:
e5:71:f5:90:ad:55:e3:a8:61:2a:25:e0:60:21:55:
5f:8b:42:2b:f7:c8:97:89:16:0c:86:ee:3f:8b:bc:
5e:c2:f8:6c:39:2b:49:6e:2e:06:4e:e3:84:aa:21:
a9:a5:fb:4e:55:32:ff:a2:8b:f4:6f:cc:cb:1d:e5:
9e:6a:b7:1d:03:65:d5:ce:3d:21:69:e1:cb:fc:bf:
c9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4F:9D:79:27:7A:6B:E4:52:92:2C:5F:4D:7B:3E:9B:73:D2:E5:DB
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/aU-deSd6a-RSkixfTXs-m3PS5ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.187.32.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:fd:72:ab:8d:04:8b:8e:76:1a:cf:48:cb:32:cd:c6:68:de:
f0:4c:72:05:9c:8c:37:f4:96:8d:d5:a5:3e:f5:ba:f7:5f:bc:
40:e1:ec:eb:5a:3a:da:e8:bd:5e:1a:11:32:84:11:f9:77:ab:
19:02:35:9c:d9:6b:7f:24:bd:af:0c:29:98:a9:b8:0a:b8:76:
08:a9:99:51:da:4e:ba:01:0f:e5:d0:78:ee:bb:12:d8:cb:04:
24:ca:b2:09:ce:f6:9c:21:ee:9b:63:68:f7:c5:71:9c:e6:b2:
23:4c:9e:7c:3d:33:fb:b4:7b:6c:78:75:30:42:c8:c0:47:0c:
98:71:82:e6:fc:05:40:a3:1d:0e:aa:e1:47:3c:90:59:28:bf:
d8:ff:7c:6b:8a:1f:1b:de:a1:a1:a7:fe:4f:39:f5:f6:16:09:
84:5b:37:26:a2:7f:ac:39:c8:ad:24:cc:37:66:0e:f3:17:5c:
a0:10:d7:98:a0:98:0e:22:93:d8:cb:93:36:0c:47:fd:3f:67:
ec:1c:7d:9b:32:f1:06:a8:b3:c5:2d:64:90:c8:9d:08:cc:7b:
45:c6:f2:29:45:32:2a:3f:6e:6a:62:8a:46:31:18:64:bd:28:
82:ca:ee:4b:d5:16:6b:4d:21:f5:f7:15:b7:e6:9d:1e:c0:36:
7e:45:0a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:40 2024 by rpki-client on console-fra.rpki-client.org