Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/456eac-65df-4dd1-bf9c-0103a899c2de/1/4_m1R5IbdQ7JrA9J7vQAqsi0uGM.roa
File: 4_m1R5IbdQ7JrA9J7vQAqsi0uGM.roa (raw, json)
Hash identifier: p9QZ++iIzM4ud01SlWCowPBn0uQD4X6UgM8c8fSxWRc=
Subject key identifier: E3:F9:B5:47:92:1B:75:0E:C9:AC:0F:49:EE:F4:00:AA:C8:B4:B8:63
Certificate issuer: /CN=99fad2527eafa95215a8fed67a27fad3cfb2d37f
Certificate serial: 018BD9E71441EE9181F70EDE85D4CB8B11BF
Authority key identifier: 99:FA:D2:52:7E:AF:A9:52:15:A8:FE:D6:7A:27:FA:D3:CF:B2:D3:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfrSUn6vqVIVqP7Weif608-y038.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/456eac-65df-4dd1-bf9c-0103a899c2de/1/4_m1R5IbdQ7JrA9J7vQAqsi0uGM.roa
Signing time: Thu 16 Nov 2023 20:51:21 +0000
ROA not before: Thu 16 Nov 2023 20:51:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216308
IP address blocks: 195.184.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d9:e7:14:41:ee:91:81:f7:0e:de:85:d4:cb:8b:11:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fad2527eafa95215a8fed67a27fad3cfb2d37f
Validity
Not Before: Nov 16 20:51:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3f9b547921b750ec9ac0f49eef400aac8b4b863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:41:95:a2:46:9e:cb:e2:e9:35:36:cf:86:40:
a3:ec:47:67:95:54:a6:66:7e:45:18:13:c0:54:7c:
aa:ff:c6:95:9a:ae:5b:59:3c:3b:22:0a:d6:d1:ee:
25:92:8d:d2:27:91:92:58:b0:62:3b:77:a6:df:96:
0d:51:19:e2:b1:b0:46:87:bf:46:3f:bf:71:44:81:
67:89:95:d2:9a:22:1f:d2:dd:a2:83:38:45:c7:2f:
ff:ed:79:50:06:91:50:44:92:ab:b0:de:58:35:72:
9c:16:6e:96:91:a2:6b:38:8e:d7:28:71:4b:44:30:
3a:ef:39:8b:27:23:30:3b:bd:ff:47:de:5e:f7:09:
d2:da:05:d5:7b:ef:70:bb:b4:66:8d:c0:71:e9:69:
e5:7f:1e:64:9b:f7:65:5d:e8:a2:20:f2:12:a0:5b:
2c:61:d6:57:49:a9:3a:f4:e7:f3:96:23:80:b1:dd:
fa:b4:75:2e:fd:fc:5c:a5:c2:33:58:4f:b9:88:e8:
4f:94:33:b1:4d:ea:b0:7f:96:7b:0a:f9:b1:6b:9c:
0c:13:3e:b3:3b:fb:7a:21:4d:54:e8:69:ed:6f:a2:
2b:f8:62:c3:27:aa:b8:e0:21:0d:cf:44:a5:71:20:
b5:08:60:81:7e:25:56:42:7f:c5:52:d8:98:ae:9f:
fe:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F9:B5:47:92:1B:75:0E:C9:AC:0F:49:EE:F4:00:AA:C8:B4:B8:63
X509v3 Authority Key Identifier:
keyid:99:FA:D2:52:7E:AF:A9:52:15:A8:FE:D6:7A:27:FA:D3:CF:B2:D3:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfrSUn6vqVIVqP7Weif608-y038.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/456eac-65df-4dd1-bf9c-0103a899c2de/1/4_m1R5IbdQ7JrA9J7vQAqsi0uGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/456eac-65df-4dd1-bf9c-0103a899c2de/1/mfrSUn6vqVIVqP7Weif608-y038.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.184.76.0/24
Signature Algorithm: sha256WithRSAEncryption
26:86:e2:53:62:26:2b:23:59:04:22:33:1e:52:93:fd:0e:1d:
f9:5f:44:8f:ba:55:1d:3f:a6:12:49:49:92:e6:ff:a8:2c:64:
e4:7b:c9:68:ec:6c:54:f1:b8:83:ee:a4:ff:4d:d0:93:1f:90:
ff:d6:7c:e4:c5:ca:cb:15:6f:08:cd:0c:6e:ad:93:22:67:7b:
a0:38:ad:9a:9b:f6:e3:7c:7c:86:4c:8a:c3:70:4b:04:e0:ad:
31:0b:68:b1:e7:55:47:fa:cf:89:91:b9:48:c5:c4:3f:de:e4:
4f:7c:ae:fb:a1:ea:13:20:59:33:46:47:a9:e1:a3:67:50:a3:
3a:00:67:99:a2:2b:8a:6b:c3:45:36:9f:c3:24:12:84:95:be:
ec:d3:4a:b1:0c:90:28:cc:b0:da:5a:3f:a7:2e:77:7b:bf:2f:
bd:13:75:be:a3:4f:29:4a:e2:78:30:9a:5d:94:62:3a:09:92:
b1:b3:18:f8:2b:b1:0a:2e:91:06:d1:2e:a0:9f:af:d5:c3:c6:
b5:92:5a:67:e2:06:7f:4a:41:57:70:ed:c8:2d:f7:27:a6:3b:
83:2d:dd:37:09:c5:78:bb:be:8f:fd:7d:7c:65:e6:84:0d:88:
60:1f:43:24:86:ca:e8:aa:ab:ab:19:1e:a2:d5:bd:9a:b8:e7:
ff:e2:d3:b5
-----BEGIN CERTIFICATE-----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Generated at Fri Nov 24 23:24:42 2023 by rpki-client on console-ams.rpki-client.org