Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/sEM4Xkktdh4nm0of7WHyFTUbVtA.roa
File: sEM4Xkktdh4nm0of7WHyFTUbVtA.roa (raw, json)
Hash identifier: fP5Z1F3zG95WxMPrQ1HwAEoEqMKeh9J6uIAMDyFuqXs=
Subject key identifier: B0:43:38:5E:49:2D:76:1E:27:9B:4A:1F:ED:61:F2:15:35:1B:56:D0
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018C02E7998CF8B1CEC0765B39D8BF75EFF9
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/sEM4Xkktdh4nm0of7WHyFTUbVtA.roa
Signing time: Fri 24 Nov 2023 19:56:21 +0000
ROA not before: Fri 24 Nov 2023 19:56:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16589
IP address blocks: 195.62.24.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:02:e7:99:8c:f8:b1:ce:c0:76:5b:39:d8:bf:75:ef:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 24 19:56:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b043385e492d761e279b4a1fed61f215351b56d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d0:de:f6:4b:ce:18:50:17:8a:5c:30:d7:c6:
89:75:bb:23:3e:00:4b:ed:22:46:1e:58:cc:ba:dc:
04:f1:1d:82:ee:0e:df:2e:ac:0e:90:2a:48:fe:e0:
e3:4b:72:22:14:be:37:87:58:d6:e7:9d:24:e5:ae:
70:2b:a1:65:ec:23:41:05:79:f2:11:b5:9a:fe:3d:
cd:27:7b:57:58:bf:ad:6f:5a:3d:c9:e3:1b:a6:3e:
e8:10:92:db:d7:12:99:34:8c:61:92:f9:5e:00:79:
e1:47:c6:76:69:fa:0d:81:35:1d:59:1e:93:60:03:
cf:89:21:17:ee:d5:39:7a:9d:7a:38:84:d2:3d:93:
78:1f:a8:7b:12:14:40:69:c1:b0:90:b4:4d:15:48:
8f:84:db:2c:64:07:46:37:7e:9f:91:38:59:bc:63:
bd:46:f1:a3:ba:67:a0:da:50:0f:6a:43:25:09:6a:
7d:24:96:6d:61:16:f4:0c:43:85:8f:d2:43:05:03:
97:d7:3d:4e:e7:44:26:95:21:e4:53:12:a3:1b:d0:
e2:26:21:06:05:7f:75:11:99:54:eb:37:c0:10:69:
ea:59:b1:97:a5:4c:09:f1:6a:cb:e1:50:b0:1c:ce:
95:aa:d5:f9:31:e1:46:5d:e2:7f:74:18:2b:38:23:
56:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:43:38:5E:49:2D:76:1E:27:9B:4A:1F:ED:61:F2:15:35:1B:56:D0
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/sEM4Xkktdh4nm0of7WHyFTUbVtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.62.24.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:24:e1:ef:c4:16:6f:4c:02:52:61:6c:5e:ef:57:2c:59:3c:
26:71:a9:e3:9c:bb:e9:e9:37:6a:d1:b6:d0:db:d5:16:b7:19:
c4:d8:4a:8f:01:22:ca:8b:26:b3:f8:6b:50:22:cb:c9:37:d7:
66:06:ae:03:48:db:d0:c7:55:96:4f:14:83:4b:57:c8:df:3d:
f2:88:8a:8b:f0:a9:5a:c7:5f:f4:2d:a7:d5:04:02:37:49:2c:
b1:60:47:59:e3:79:be:38:b2:11:88:d2:d6:f4:4c:c2:f5:f5:
61:3f:3b:17:0b:b5:ad:0f:e4:a5:5c:84:52:73:84:a7:b8:f7:
c6:18:cb:db:ad:40:22:cc:6b:9a:0a:7b:c5:e3:4f:1a:14:b4:
33:d2:e7:13:22:6a:e2:b2:00:38:ad:8b:b0:37:1b:03:bf:5d:
7c:ab:57:27:3b:ec:78:ed:51:50:2b:4c:ed:d0:e8:07:85:87:
06:cc:55:d7:7c:ef:c7:6b:6a:3d:7f:e8:db:f6:06:1c:d5:90:
27:01:7f:ca:77:34:c9:41:96:6a:19:77:0c:50:54:c9:64:5c:
30:8a:1e:6c:a0:65:7f:35:1c:33:18:3c:92:4b:ea:d2:07:09:
90:e2:24:0d:3d:8e:1c:3f:17:3d:9c:03:f0:57:6b:0d:6a:79:
94:23:14:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 28 10:38:16 2023 by rpki-client on console-ams.rpki-client.org