Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/pMExSX6naVFr-ruv9DKEmnP3OQ4.roa
File: pMExSX6naVFr-ruv9DKEmnP3OQ4.roa (raw, json)
Hash identifier: Q7NgjkueqlVoZB6OTT4mT5obRqzJWEs72e0jgeB5c10=
Subject key identifier: A4:C1:31:49:7E:A7:69:51:6B:FA:BB:AF:F4:32:84:9A:73:F7:39:0E
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 0190A2BE3B4D7889F5E1418E9B81D6A4BB68
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/pMExSX6naVFr-ruv9DKEmnP3OQ4.roa
Signing time: Thu 11 Jul 2024 17:01:34 +0000
ROA not before: Thu 11 Jul 2024 17:01:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 195.206.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Sep 2024 13:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a2:be:3b:4d:78:89:f5:e1:41:8e:9b:81:d6:a4:bb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Jul 11 17:01:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4c131497ea769516bfabbaff432849a73f7390e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:77:93:24:47:36:45:d6:60:c3:e9:99:57:f5:
99:ac:01:47:ac:7d:64:c3:8c:cc:75:41:eb:d4:ea:
b5:85:8d:fb:c3:10:6f:29:06:30:ae:b6:87:77:32:
69:b7:97:98:ce:ae:69:91:52:93:e2:e2:10:4c:d8:
08:d8:e1:33:af:14:3e:55:f9:ec:4a:91:12:ce:6c:
02:c2:51:d0:c3:b8:75:33:42:78:60:51:70:45:3d:
a8:33:55:5f:d7:80:a5:0b:f2:d9:25:12:a4:3d:af:
35:9f:59:5c:c1:d5:61:b3:a8:51:c3:37:68:21:1e:
6f:4b:a0:1b:f3:8d:f2:95:a9:0e:7d:5b:1d:91:fe:
51:98:ff:5e:eb:0b:b5:99:68:6a:b8:26:e0:cf:3b:
d8:49:04:10:a2:a8:0a:f4:1a:3b:b2:64:2a:c6:5a:
5c:2a:0f:4d:4f:37:6c:45:51:f7:f3:8d:c5:bc:0a:
1d:25:3a:c2:58:56:00:a5:de:34:00:d8:8f:af:ff:
16:c8:f2:f4:9e:ee:8c:e3:aa:c8:9c:5e:0a:01:81:
cc:3a:fb:fc:62:c5:60:9c:3e:56:97:ca:39:17:b3:
24:29:00:a2:fa:93:86:82:cb:10:39:2c:0f:36:78:
cb:82:db:aa:79:7b:dc:e4:48:5c:a8:31:de:30:34:
ff:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C1:31:49:7E:A7:69:51:6B:FA:BB:AF:F4:32:84:9A:73:F7:39:0E
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/pMExSX6naVFr-ruv9DKEmnP3OQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.206.109.0/24
Signature Algorithm: sha256WithRSAEncryption
63:17:1b:39:99:2d:ad:33:ce:89:d4:0c:c9:e5:74:d7:83:b2:
2e:61:37:07:4f:fa:05:fe:fe:63:5f:5a:8e:e7:2f:52:8a:55:
6f:e5:09:42:5a:c9:ff:eb:c3:c7:0a:50:59:fd:31:9c:5b:f8:
51:a8:da:17:7e:21:ab:ae:e9:2a:be:f2:b2:2a:d4:17:ad:a5:
66:fd:e5:b3:ca:b4:e0:e6:2f:9d:61:4c:06:ef:5c:c5:3f:77:
6e:db:94:df:df:66:32:ff:3a:4d:df:6f:5c:45:c7:c0:c2:f4:
74:48:9d:a5:8e:33:10:b2:9a:44:3f:24:bd:8d:bc:d2:8e:36:
21:24:43:b3:dc:85:e5:89:4b:b1:df:54:fa:80:44:27:69:bb:
13:f6:6c:df:05:0d:55:7a:d3:a0:4b:31:19:f1:3d:a3:12:67:
25:ed:f1:48:be:f8:0d:3f:9e:08:60:a5:ca:a1:a4:e1:eb:8c:
44:37:7d:d9:b7:3f:12:e1:15:dd:4e:d0:85:86:90:09:94:03:
82:fb:1a:a0:99:75:3c:35:e7:67:75:ed:1e:fc:09:42:63:10:
f1:38:7b:23:74:70:fd:c4:f7:e9:61:5f:51:88:ac:1d:1f:0a:
d1:ca:b2:bc:d2:40:32:b1:16:30:6e:4c:6a:cc:be:dd:00:0d:
b7:52:d4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 18:00:47 2024 by rpki-client on console-fra.rpki-client.org