Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/spmdmhI46ZBt4Wa1d-bay0HLSiM.roa
File: spmdmhI46ZBt4Wa1d-bay0HLSiM.roa (raw, json)
Hash identifier: YLhp1rwOtQRXcXze+W79v/AnNFybHos+do9QtxcdqwE=
Subject key identifier: B2:99:9D:9A:12:38:E9:90:6D:E1:66:B5:77:E6:DA:CB:41:CB:4A:23
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01856DEF8479339A4883A44FFF88297DE749
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/spmdmhI46ZBt4Wa1d-bay0HLSiM.roa
Signing time: Sun 01 Jan 2023 15:24:51 +0000
ROA not before: Sun 01 Jan 2023 15:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213088
IP address blocks: 195.187.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:84:79:33:9a:48:83:a4:4f:ff:88:29:7d:e7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 15:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2999d9a1238e9906de166b577e6dacb41cb4a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:23:f7:db:80:d4:26:62:3c:ac:e9:44:ed:87:
ee:71:27:79:e4:ce:61:92:ce:c0:b6:3b:7a:1f:45:
2b:d6:19:9f:c3:2e:d9:79:de:22:f4:69:25:d2:a9:
d8:d8:9c:d5:25:04:f5:3c:1c:c7:b9:a1:7e:3b:f8:
c4:89:35:b9:b9:b2:8c:f7:31:e1:a0:1e:ff:5e:18:
e0:51:ee:d8:46:7f:a0:f3:c2:97:dc:16:e4:70:18:
51:c2:2d:3b:11:3c:6b:5a:01:ab:d2:1f:8b:ff:17:
1b:d9:ea:89:c2:2d:8b:11:5e:5c:f5:8d:77:cf:a2:
b4:b8:d8:15:c3:16:d5:ab:a1:de:b3:55:33:c8:b6:
d6:6c:ba:25:52:63:85:01:e0:10:e7:5e:39:ed:8d:
f9:85:5d:4a:f0:57:8a:e2:dc:94:c0:31:9c:cb:da:
9b:06:f0:59:d8:fd:f5:ff:d3:0b:f1:22:f4:d0:3f:
94:82:17:38:e8:7d:43:94:dc:8d:37:ef:6c:0a:47:
c8:c3:72:64:7b:b5:fa:b0:e7:00:44:5d:31:20:8d:
65:d7:3d:2a:63:a9:d9:f0:52:b8:de:40:77:f4:52:
fa:40:20:1b:e0:61:b7:e8:ed:3b:33:ec:87:00:58:
85:93:50:a7:b7:c3:7e:dd:e6:a1:d3:d9:9e:0d:0d:
de:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:99:9D:9A:12:38:E9:90:6D:E1:66:B5:77:E6:DA:CB:41:CB:4A:23
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/spmdmhI46ZBt4Wa1d-bay0HLSiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.187.76.0/24
Signature Algorithm: sha256WithRSAEncryption
81:b0:ca:e9:f8:58:57:a8:f8:97:b7:c4:99:af:92:35:bc:7d:
db:08:7c:b4:4a:5c:84:2e:8f:1b:91:ed:af:44:b4:ea:84:09:
cf:5b:38:fb:cd:5a:11:b0:1b:3b:3c:a0:3f:0c:66:f2:4d:f4:
4a:32:1f:92:f8:8e:62:af:f3:9d:3f:70:db:e9:a5:e3:60:2f:
9a:09:81:65:96:74:9d:03:21:91:8c:90:12:ea:95:a9:39:44:
50:b1:79:e5:22:91:87:b2:9f:13:8a:51:ec:5a:92:4b:59:8e:
0f:0b:8b:94:55:19:dc:85:ab:aa:29:e0:0f:b0:59:60:d9:0f:
d7:10:a5:a1:b9:80:e4:f2:4c:a3:47:66:76:7b:7b:c3:34:15:
79:48:41:79:8f:a0:72:74:25:b3:46:4d:e7:f5:c9:6b:67:dc:
d7:ab:70:99:1e:39:50:7c:24:d9:11:3e:d1:65:43:99:c9:f5:
bf:7f:fd:95:5c:ac:c0:2b:05:ac:b3:4e:f4:13:0a:1c:71:d8:
76:5f:f8:6d:37:0f:5b:84:2c:56:e7:7f:f6:c8:ed:62:c1:59:
47:89:0c:45:ae:42:67:9c:17:52:e9:85:a0:6c:2d:67:42:0b:
c1:cc:83:33:f4:80:0d:81:82:a6:74:4c:14:16:6e:a5:2f:55:
f9:82:c3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:05 2024 by rpki-client on console-ams.rpki-client.org