Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/swROmRpERrpYY-GUOLWjYBtx9CM.roa
File: swROmRpERrpYY-GUOLWjYBtx9CM.roa (raw, json)
Hash identifier: DBpGHd93YElaiuA8LtMDm2AUbD7IULkWGroDcxJRAS0=
Subject key identifier: B3:04:4E:99:1A:44:46:BA:58:63:E1:94:38:B5:A3:60:1B:71:F4:23
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0192C7F8FF9D92E241BF7C0069509D43FA72
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/swROmRpERrpYY-GUOLWjYBtx9CM.roa
Signing time: Sat 26 Oct 2024 08:37:17 +0000
ROA not before: Sat 26 Oct 2024 08:37:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 195.177.92.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
2a01:7120:6::/48 maxlen: 48
2a01:7120:7::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 16 Nov 2024 09:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c7:f8:ff:9d:92:e2:41:bf:7c:00:69:50:9d:43:fa:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 26 08:37:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3044e991a4446ba5863e19438b5a3601b71f423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cb:e0:2a:29:01:0f:0a:c4:a9:75:28:e4:d9:
29:c0:25:8d:6f:6c:eb:f6:c3:f6:a3:b9:53:bb:77:
7c:f3:68:f1:40:ff:f5:5c:ae:e2:44:95:c3:c7:5e:
96:13:10:86:41:b7:97:fa:e6:ce:cc:03:1a:6a:ce:
59:7d:fb:cf:cc:7e:f1:a4:ad:1c:8a:60:00:d1:10:
55:5b:e3:be:78:85:38:36:11:36:77:a1:22:60:16:
cd:ca:ce:4b:66:71:92:a9:ee:01:53:2f:32:d6:5a:
71:f3:ef:5e:c2:dd:95:e8:22:a8:89:af:04:3b:17:
58:b1:93:90:f6:5a:ff:64:14:10:65:19:64:a2:0a:
8c:aa:46:82:d7:97:31:6d:91:d5:28:3d:59:9c:3a:
52:a5:c6:93:59:19:b6:f9:88:ad:ff:05:bf:db:f9:
3d:9e:de:45:63:17:7d:97:cd:76:09:05:18:df:d5:
c1:ca:7f:ca:d7:dd:6d:95:c1:bf:cc:a0:b2:83:e7:
5a:1f:0f:83:60:e3:46:f7:a9:87:f6:c2:21:8e:38:
38:b8:f3:e0:97:3d:84:a5:18:5d:1e:66:8d:d8:86:
bd:95:e3:38:84:8c:a7:db:d7:5f:85:7d:95:b2:63:
52:bb:12:61:f6:36:81:89:56:d0:52:6f:95:52:a8:
97:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:04:4E:99:1A:44:46:BA:58:63:E1:94:38:B5:A3:60:1B:71:F4:23
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/swROmRpERrpYY-GUOLWjYBtx9CM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.92.0/23
195.177.95.0/24
IPv6:
2a01:7120:6::/47
Signature Algorithm: sha256WithRSAEncryption
6d:50:3e:39:7f:49:e1:0b:a0:80:37:fc:34:39:4e:06:f3:41:
45:86:e8:94:aa:66:f0:3f:14:aa:be:c2:a9:d3:60:6f:5b:a3:
0c:9f:aa:b1:b8:a4:cc:62:4c:74:a9:d8:8d:60:7c:f5:d9:91:
cf:38:75:a9:0c:12:de:66:ba:35:b9:e6:e9:0c:ad:9c:6a:3a:
8b:f7:7e:67:7a:f3:13:aa:d0:df:15:1b:0c:0c:7b:49:a2:18:
f1:f0:09:e2:99:ca:35:81:b8:0c:6e:d2:06:8c:9c:60:18:13:
3d:9d:01:6f:ea:23:ce:76:b8:20:38:fa:5b:5c:82:03:6f:8d:
4a:7f:23:ff:33:46:c0:99:a9:1b:96:b9:08:6f:08:6b:95:3d:
5b:9e:40:dc:24:40:e8:2e:80:2b:48:e4:17:d2:68:5d:7c:e9:
04:13:e2:55:4b:10:3b:8e:b4:cb:f5:33:42:88:63:ce:e9:30:
07:09:80:30:c3:f3:1d:c2:7e:80:97:dc:25:e7:f1:5d:10:de:
4f:ea:65:40:a0:51:83:5b:ba:78:ae:cb:e9:12:fa:9f:cb:1c:
cc:89:e1:3b:8c:e9:28:36:f2:05:a2:81:51:11:41:db:3c:bd:
e7:96:27:c5:ee:fb:c5:fc:3d:c5:0d:74:2f:c6:c4:89:a5:7b:
fb:0e:b7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 10:36:31 2024 by rpki-client on console-fra.rpki-client.org