Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/988c5a-5897-4d6a-a6cf-9681193d51bc/1/bLuqzSyEbtLwkoqfcmcZT93lB6w.roa
File: bLuqzSyEbtLwkoqfcmcZT93lB6w.roa (raw, json)
Hash identifier: kEaKYREYxOwFPEfuN6KmDws2DU9BGse3CnZEmsI9B30=
Subject key identifier: 6C:BB:AA:CD:2C:84:6E:D2:F0:92:8A:9F:72:67:19:4F:DD:E5:07:AC
Certificate issuer: /CN=680494359a6200c5adcdcec3649e138ab1ed8870
Certificate serial: 018964C05C25685D56F2DBC52C30045A9187
Authority key identifier: 68:04:94:35:9A:62:00:C5:AD:CD:CE:C3:64:9E:13:8A:B1:ED:88:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aASUNZpiAMWtzc7DZJ4TirHtiHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/988c5a-5897-4d6a-a6cf-9681193d51bc/1/bLuqzSyEbtLwkoqfcmcZT93lB6w.roa
Signing time: Mon 17 Jul 2023 16:47:55 +0000
ROA not before: Mon 17 Jul 2023 16:47:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 195.69.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:5c:25:68:5d:56:f2:db:c5:2c:30:04:5a:91:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=680494359a6200c5adcdcec3649e138ab1ed8870
Validity
Not Before: Jul 17 16:47:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6cbbaacd2c846ed2f0928a9f7267194fdde507ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:9d:ea:0c:bd:fb:49:3a:de:04:13:9c:69:
54:55:3c:1e:e7:29:09:f3:f8:c1:77:8f:8d:04:3d:
7f:a4:0f:b9:6c:a1:74:f9:79:40:fa:7a:20:1c:08:
15:f8:e4:6d:d2:43:1c:08:e1:40:7b:75:8a:6b:ab:
23:bf:7d:9b:33:56:81:b7:d2:a8:55:52:8a:f0:34:
8a:16:ae:13:78:29:41:0c:d2:eb:f4:73:26:53:cf:
48:a8:7e:83:09:8b:56:07:a4:f9:1d:c9:c5:89:19:
26:60:6d:ae:82:a5:4c:72:c8:55:37:6f:99:00:b6:
bb:42:a0:f8:ea:8b:08:b6:1c:d5:4e:50:c0:30:01:
3e:76:bd:b0:23:a7:31:2d:a0:4e:c4:d1:b0:b6:fc:
13:71:fb:98:1b:bd:d9:53:a4:b6:8d:4d:7b:d1:06:
08:ae:aa:f4:4a:e3:93:b8:1b:e5:dc:d3:0c:e0:c0:
03:9b:78:da:e2:2b:3b:d2:ca:e5:7e:29:40:09:85:
d1:01:b5:7a:4d:dc:3a:55:ec:b9:84:0f:76:61:00:
44:1a:27:29:42:cb:12:f1:c0:74:db:e7:d4:47:2a:
d9:b2:69:e2:2b:7f:ea:50:c0:bf:f0:8b:90:b1:2c:
67:0b:72:92:17:4a:f2:ad:63:37:e9:6d:0d:90:c7:
99:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BB:AA:CD:2C:84:6E:D2:F0:92:8A:9F:72:67:19:4F:DD:E5:07:AC
X509v3 Authority Key Identifier:
keyid:68:04:94:35:9A:62:00:C5:AD:CD:CE:C3:64:9E:13:8A:B1:ED:88:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aASUNZpiAMWtzc7DZJ4TirHtiHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/988c5a-5897-4d6a-a6cf-9681193d51bc/1/bLuqzSyEbtLwkoqfcmcZT93lB6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/988c5a-5897-4d6a-a6cf-9681193d51bc/1/aASUNZpiAMWtzc7DZJ4TirHtiHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.161.0/24
Signature Algorithm: sha256WithRSAEncryption
26:0f:a3:c3:e7:12:35:4b:eb:83:b2:6b:c9:c2:9a:80:bb:bf:
5e:53:6b:2f:4d:ea:4b:7b:5b:3a:77:b6:72:f3:1c:ef:0a:26:
3f:0e:2a:af:01:ee:3d:e3:de:25:8d:ce:23:86:45:c4:17:5b:
76:f4:dc:4e:43:18:8d:a1:87:b6:fc:fb:1f:66:50:2b:e9:dd:
1c:f2:5b:3b:54:4d:85:63:e1:15:bb:92:b9:7d:43:94:63:c6:
1f:ab:a0:b5:f6:7e:9c:74:b8:c0:ea:3a:4c:eb:8e:70:a3:4f:
6f:60:46:71:ef:ad:5f:e2:b6:cc:57:7b:c2:17:3c:17:d8:bd:
3c:13:a0:c7:d3:18:4d:23:5c:43:cf:14:13:2b:ee:ab:fe:4b:
b7:b9:fd:94:f1:4b:e3:54:7f:d7:33:48:21:18:af:34:14:6b:
c2:c4:fe:d3:c9:12:ee:d8:5a:1d:e4:61:23:ae:4d:28:20:2e:
eb:2e:3d:db:5d:db:c0:84:01:e2:bb:6c:4e:45:7f:4b:45:f1:
06:76:e6:82:6d:79:7f:3e:7b:b3:55:24:42:42:ff:83:c1:46:
0c:7c:7f:3e:8b:22:ac:c7:36:03:a6:79:46:69:87:15:9b:e8:
06:36:34:79:47:98:32:f0:ca:bc:cf:c3:c4:a5:53:17:32:cf:
a4:64:89:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:09 2024 by rpki-client on console-fra.rpki-client.org