Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/CnYCP7fgA5o0_pcHbcO4KEZI0Yw.roa
File: CnYCP7fgA5o0_pcHbcO4KEZI0Yw.roa (raw, json)
Hash identifier: EZ7C9J/ASm83RDgXnoEwy+0/oUBWWthk7u/1VhnWJiI=
Subject key identifier: 0A:76:02:3F:B7:E0:03:9A:34:FE:97:07:6D:C3:B8:28:46:48:D1:8C
Certificate issuer: /CN=4b1cdcb90b9832016748a7e268cc1eff239262f8
Certificate serial: 01856CAF30A770651959289E149E135BC8FC
Authority key identifier: 4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/CnYCP7fgA5o0_pcHbcO4KEZI0Yw.roa
Signing time: Sun 01 Jan 2023 09:34:58 +0000
ROA not before: Sun 01 Jan 2023 09:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44183
IP address blocks: 195.184.88.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:30:a7:70:65:19:59:28:9e:14:9e:13:5b:c8:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b1cdcb90b9832016748a7e268cc1eff239262f8
Validity
Not Before: Jan 1 09:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a76023fb7e0039a34fe97076dc3b8284648d18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:92:d1:3d:c2:67:39:1a:b6:28:a5:34:15:d9:
22:04:e7:28:ae:50:cc:c5:6a:46:d3:3a:44:68:e1:
40:7c:4e:68:d5:06:59:f8:5b:76:ca:29:82:ae:f0:
c9:df:85:13:81:5e:f5:1c:27:04:e4:3d:03:80:bf:
f8:83:74:62:38:21:79:80:63:c5:bf:60:ae:3a:88:
4f:b4:9c:75:b2:e8:44:22:1f:de:d3:22:1f:c6:22:
7d:0d:72:1b:8a:26:ec:5e:23:e1:8c:d4:60:55:4d:
50:28:25:7a:35:8f:e3:b9:20:72:2e:95:ec:1c:42:
68:19:cb:d9:13:26:44:02:bb:f4:2c:f0:c5:cd:80:
ba:12:25:87:56:9b:70:b1:07:70:b0:e0:c5:6d:91:
c8:33:07:4b:d8:32:d8:68:25:72:52:d5:bd:60:2a:
c0:d2:f4:32:48:1f:88:bd:e9:17:d4:4a:56:e9:d6:
27:f8:ac:a4:5a:81:73:00:67:2b:52:16:f6:fe:30:
5d:51:b5:14:4b:c1:d5:83:b1:73:6d:68:4f:e3:c7:
1d:23:92:47:79:a8:46:9c:d6:00:e5:11:d3:07:8b:
75:c9:4b:36:f2:94:f1:0a:06:0c:c7:09:40:5b:2d:
f2:64:c7:1b:66:3b:f5:be:b9:4c:4d:a2:67:88:9f:
1f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:76:02:3F:B7:E0:03:9A:34:FE:97:07:6D:C3:B8:28:46:48:D1:8C
X509v3 Authority Key Identifier:
keyid:4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/CnYCP7fgA5o0_pcHbcO4KEZI0Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.184.88.0/23
Signature Algorithm: sha256WithRSAEncryption
51:4e:c2:64:a0:09:26:f7:5d:58:fa:6c:d2:a5:68:85:42:7c:
08:38:23:86:8d:00:a9:a8:3d:d9:fb:a7:2b:5f:f3:1a:f7:a5:
6d:12:da:66:fa:2d:4d:b6:1c:96:b5:cc:49:1d:2a:47:97:cf:
a0:8d:74:3f:f9:f9:d3:ef:98:6d:0c:18:13:f2:64:41:b5:af:
0f:ab:15:41:3f:6c:3f:68:f8:fd:c6:42:ed:d7:c0:32:76:bf:
6e:8e:e2:3b:5f:79:ea:ea:76:0b:19:7b:66:42:e3:5b:d9:ea:
c3:67:77:0e:86:8b:28:10:b0:d9:f4:81:1d:66:d2:46:6a:bc:
dd:2b:42:5a:44:7a:25:94:4c:02:08:14:10:f4:ea:65:b9:d6:
ab:5c:46:7a:70:dd:de:60:c1:46:d0:24:ef:15:41:1e:33:7a:
77:ee:b2:ac:60:ef:5d:66:c6:af:2d:e6:59:c5:7f:1b:8a:8e:
95:d7:c8:be:e7:08:6b:ec:24:e5:03:6e:d5:eb:44:92:6f:e9:
ab:14:80:ad:7a:09:8b:b7:3e:fb:f0:04:4d:0e:76:b5:b3:a3:
4e:be:77:1c:cc:30:60:e7:6b:b2:f5:e7:cc:bc:01:3a:87:c2:
a9:58:f2:c0:73:91:b7:c5:3b:97:d1:f2:3a:0e:52:a9:c3:83:
40:8c:c5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:57 2024 by rpki-client on console-ams.rpki-client.org