Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/bqProc3j5CymYlQStcQo9cc8HzU.roa
File: bqProc3j5CymYlQStcQo9cc8HzU.roa (raw, json)
Hash identifier: M08DB+c0DLkNOVTve+IkbnVWgnAvVGyYkdFFF21wix4=
Subject key identifier: 6E:A3:EB:A1:CD:E3:E4:2C:A6:62:54:12:B5:C4:28:F5:C7:3C:1F:35
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0191C3AF2B735AB14A567AB9F5AC5DBC35B7
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/bqProc3j5CymYlQStcQo9cc8HzU.roa
Signing time: Thu 05 Sep 2024 19:35:22 +0000
ROA not before: Thu 05 Sep 2024 19:35:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 195.177.92.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
2a01:7120:7::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 26 Oct 2024 08:37:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c3:af:2b:73:5a:b1:4a:56:7a:b9:f5:ac:5d:bc:35:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 5 19:35:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ea3eba1cde3e42ca6625412b5c428f5c73c1f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:52:ac:b6:44:7f:4b:98:27:be:c7:d7:32:7e:
4b:00:0e:91:42:9b:37:82:8b:38:14:d9:e4:50:4f:
66:9d:2b:e1:b6:c8:11:e1:0d:6d:f8:48:2c:7d:10:
c1:b6:0c:67:47:ff:6e:b6:34:62:51:34:96:45:2f:
e5:d5:1f:8c:28:55:b3:b1:a2:13:d5:76:a9:46:1a:
d6:50:70:16:ba:21:fc:5f:ce:c6:ff:88:a6:d6:cf:
1d:76:82:f7:44:e9:8c:f1:51:a7:fb:35:e4:31:1e:
89:84:d8:c9:12:e6:c6:2a:d0:5b:95:8c:a9:f0:5a:
60:66:db:61:69:8a:7a:8a:5a:8a:f6:c1:82:10:bf:
c7:6d:d5:b9:8b:54:e8:4c:ad:e3:fa:7c:98:1a:f7:
04:15:ed:05:a1:ac:12:54:46:b9:15:33:16:eb:6c:
49:5e:69:b1:f4:fd:d8:1a:c3:48:46:d3:6e:92:71:
d8:15:6e:ee:63:31:ff:64:0c:e8:b1:57:d2:3d:fc:
c6:7c:c5:c2:51:12:36:6d:1f:42:7f:06:4a:d1:46:
44:ae:9b:50:2a:f2:90:70:a1:00:bd:eb:fc:5f:a1:
f9:22:f4:e7:65:2a:c4:d3:68:6c:05:bc:f5:8e:6e:
52:be:f0:79:6f:31:0e:b6:fc:f3:39:53:c9:35:65:
fc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A3:EB:A1:CD:E3:E4:2C:A6:62:54:12:B5:C4:28:F5:C7:3C:1F:35
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/bqProc3j5CymYlQStcQo9cc8HzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.92.0/23
195.177.95.0/24
IPv6:
2a01:7120:7::/48
Signature Algorithm: sha256WithRSAEncryption
1b:08:20:2f:e7:4a:e7:11:15:a2:61:25:69:11:3d:3d:4c:e4:
c3:75:0b:ff:8b:ae:4c:39:c3:9b:a8:39:f5:02:57:c6:ea:41:
83:8f:bc:28:78:2f:3d:59:67:10:95:dd:bb:bf:c6:2e:55:2c:
ac:c7:ba:fb:8f:3a:e6:17:79:7a:60:a8:81:2b:10:d3:13:8d:
b7:d6:57:d5:8d:99:86:d3:11:ee:eb:db:03:83:d0:d7:e4:36:
4c:1e:a9:68:b7:be:d1:5d:44:0e:12:8b:8b:8b:c6:13:49:02:
7b:09:e1:f8:74:1a:81:98:4f:df:83:b8:92:55:a1:11:c0:08:
00:3a:59:56:7a:e0:16:5f:4e:b5:71:fc:e6:e8:ad:5e:93:c7:
08:f4:6c:5d:60:d5:b1:6c:6e:96:e0:c6:1c:19:f0:dd:96:21:
4b:04:28:2b:dc:26:65:ef:fe:c9:3a:67:41:55:d4:ba:67:88:
4d:c3:2c:40:09:a1:52:2c:66:97:84:46:c1:35:d2:eb:1a:30:
a3:f3:79:e1:c6:63:50:6e:2c:ad:74:3a:e0:37:43:b9:57:cd:
85:c0:81:f6:9b:f2:f0:6c:c0:bd:9b:f3:55:68:63:a9:23:32:
a5:0b:6c:7b:b2:b6:10:c7:fd:14:60:88:d7:80:2f:77:a2:83:
b0:38:08:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 26 11:10:50 2024 by rpki-client on console-fra.rpki-client.org