Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/DZI_gV7n3wnJ_jlwWExcZq6-GTc.roa
File: DZI_gV7n3wnJ_jlwWExcZq6-GTc.roa (raw, json)
Hash identifier: DzSG6H4ypxUtUaXe/wemmDlza+cRitlzImeaMiGbSYY=
Subject key identifier: 0D:92:3F:81:5E:E7:DF:09:C9:FE:39:70:58:4C:5C:66:AE:BE:19:37
Certificate issuer: /CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
Certificate serial: 0185714C1DD0870D60F6086657F400D7E9E5
Authority key identifier: 4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/DZI_gV7n3wnJ_jlwWExcZq6-GTc.roa
Signing time: Mon 02 Jan 2023 07:04:51 +0000
ROA not before: Mon 02 Jan 2023 07:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202311
IP address blocks: 195.26.68.0/22 maxlen: 24
2a07:f680::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:1d:d0:87:0d:60:f6:08:66:57:f4:00:d7:e9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
Validity
Not Before: Jan 2 07:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d923f815ee7df09c9fe3970584c5c66aebe1937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:aa:67:d9:2c:08:fd:82:ce:14:9d:6d:c0:55:
40:6b:ed:de:e4:3b:7b:3f:6b:ec:7a:54:33:fa:ad:
4d:8f:9f:3d:85:0b:e6:d3:b9:54:42:97:e3:53:c7:
9e:a6:d6:23:18:01:01:b9:9f:c9:06:7c:17:47:71:
85:bc:71:2a:57:f3:db:5a:f1:7c:34:ff:3d:5a:a3:
df:14:7d:0c:68:99:64:ca:a7:a9:35:ae:8d:2d:aa:
56:c5:6d:37:5a:14:bf:7b:3b:10:ec:8a:c6:6b:b1:
22:a0:d1:67:bf:f7:fb:47:83:70:b7:85:43:ea:4e:
c7:fd:cf:24:e5:f2:48:7b:95:88:e1:8d:1b:19:bb:
80:aa:0a:35:a5:31:14:55:3d:07:38:58:f2:39:da:
e7:61:37:cf:3d:44:1c:bb:a7:bd:28:7a:f5:98:21:
78:a5:1c:a0:aa:07:e8:17:98:89:b0:1c:4b:c6:33:
d9:45:82:9d:4f:1e:31:4c:b2:b2:36:71:d4:bd:91:
36:dc:8d:61:b5:d4:55:7f:f2:de:e0:b0:bb:1b:a5:
0d:aa:8a:a8:04:b6:06:e4:d7:8a:39:fb:e3:c9:c4:
9a:a9:d1:6d:00:04:a0:30:7e:88:4d:ef:99:f7:cf:
1f:61:2a:2c:2f:5b:08:33:c6:85:99:0c:d2:1b:f7:
90:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:92:3F:81:5E:E7:DF:09:C9:FE:39:70:58:4C:5C:66:AE:BE:19:37
X509v3 Authority Key Identifier:
keyid:4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/DZI_gV7n3wnJ_jlwWExcZq6-GTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.26.68.0/22
IPv6:
2a07:f680::/29
Signature Algorithm: sha256WithRSAEncryption
a5:00:fb:95:41:49:fd:4c:62:b9:b2:09:89:63:5e:1a:35:6e:
51:1d:28:7c:66:50:1d:62:4f:be:8f:54:7c:65:19:4d:bf:7c:
c0:20:cd:9c:4c:5f:6f:c5:ce:72:24:f8:f9:9d:0d:4f:45:7c:
8a:fa:df:ab:98:8b:32:27:58:4e:32:74:08:82:53:c6:7c:de:
c7:dd:88:86:9d:73:6e:a1:c2:2a:fb:79:fd:74:32:e2:6f:7e:
19:08:72:4f:56:36:5c:12:0d:a9:47:d9:aa:a7:8c:cc:91:d2:
54:c1:dc:14:36:b5:ca:5b:17:91:0f:d9:cf:c7:e5:3e:ed:90:
9d:8a:a5:fa:37:1e:bc:c2:e9:87:71:5a:9f:69:79:e6:93:04:
df:d5:0a:3f:f6:9b:4d:97:af:35:a2:c1:ce:c8:ca:8c:07:7f:
b4:d8:4c:98:f3:82:2c:2a:70:51:cb:28:c3:69:76:d3:26:b4:
1e:fd:fa:1a:a1:dc:50:af:26:d2:d0:dc:c2:9a:d2:7d:1d:7d:
bb:21:9e:19:66:e9:fc:af:a3:99:a9:6e:95:fd:24:ec:73:4f:
96:c6:df:7b:b6:5a:ae:6c:91:3b:6d:c1:30:46:63:d1:0b:84:
46:80:23:24:28:2b:78:dd:ec:8f:cd:c6:77:dc:06:9f:6f:e2:
75:cd:e9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:33 2024 by rpki-client on console-ams.rpki-client.org