Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/nVV8e3BcP5z78iF5yL-RuO-0Au8.roa
File: nVV8e3BcP5z78iF5yL-RuO-0Au8.roa (raw, json)
Hash identifier: zzo/G157GpklG7V5QJnedkP1stUTUFT47/axrXOPbpk=
Subject key identifier: 9D:55:7C:7B:70:5C:3F:9C:FB:F2:21:79:C8:BF:91:B8:EF:B4:02:EF
Certificate issuer: /CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
Certificate serial: 01857227E9F26236EFFCC89028BBE85860E8
Authority key identifier: 1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/nVV8e3BcP5z78iF5yL-RuO-0Au8.roa
Signing time: Mon 02 Jan 2023 11:04:56 +0000
ROA not before: Mon 02 Jan 2023 11:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12735
IP address blocks: 195.49.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:e9:f2:62:36:ef:fc:c8:90:28:bb:e8:58:60:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
Validity
Not Before: Jan 2 11:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d557c7b705c3f9cfbf22179c8bf91b8efb402ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5d:e0:67:6e:82:b4:56:3c:0c:9f:45:02:96:
71:84:67:3d:45:72:18:c6:9a:c7:56:4d:90:11:b1:
c8:08:bf:9c:11:2d:5c:80:9a:38:b1:1e:62:32:e6:
5b:b9:4e:16:ca:6a:f0:7d:ff:db:7f:8a:f8:d8:3f:
9c:9b:0c:a0:e6:e1:75:c0:05:32:65:6e:88:35:5b:
30:07:70:33:3c:ef:c3:26:d3:7b:a9:d4:26:79:86:
e8:db:4d:72:86:2f:38:ed:ee:04:48:19:9e:01:94:
3f:0d:90:8e:64:47:54:c2:05:da:fb:86:f0:86:ba:
a4:da:12:80:3b:bd:43:03:ac:eb:2d:53:d5:18:34:
11:30:33:18:72:9c:0f:68:7a:1d:f0:5c:c5:33:1e:
73:7c:f6:86:15:53:ab:81:6b:d8:e0:8c:c0:3a:e8:
17:4c:63:0e:20:71:04:4a:02:76:39:7e:0c:ad:52:
01:c8:97:fe:0b:24:73:1b:2e:4d:e2:84:d2:d3:c4:
01:27:94:16:a0:b6:85:02:07:ce:62:9e:8d:85:6e:
d1:54:b8:81:4b:de:2a:94:7e:cb:ee:84:b6:23:36:
67:b0:d6:00:bd:05:24:81:23:5d:cd:f9:ad:09:b0:
bb:97:7d:00:0a:9e:e7:50:39:5e:51:39:28:f3:78:
e6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:55:7C:7B:70:5C:3F:9C:FB:F2:21:79:C8:BF:91:B8:EF:B4:02:EF
X509v3 Authority Key Identifier:
keyid:1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/nVV8e3BcP5z78iF5yL-RuO-0Au8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.49.239.0/24
Signature Algorithm: sha256WithRSAEncryption
35:c4:cf:8d:6b:b8:c3:3f:a4:fe:47:0a:eb:39:5b:81:3b:11:
5e:ce:e3:2c:06:7f:b2:59:ab:85:30:9d:1e:9e:4a:9e:48:83:
85:1d:70:5d:de:e1:0d:03:c0:3e:5c:20:ba:5e:7f:bc:fd:0e:
f3:e0:1a:14:0f:84:22:01:cf:89:d7:ef:9c:8b:ec:3b:c8:c9:
09:9e:8c:b9:05:46:5b:8c:4c:d8:b1:77:60:33:c3:6d:f9:5e:
94:88:87:c4:c0:51:7a:4a:47:25:51:4f:cd:55:f4:54:d2:c4:
8e:76:0a:c5:37:0c:f2:15:eb:52:4c:7b:ee:31:32:11:b1:c0:
8b:3c:12:6e:7d:78:cd:e9:38:49:4a:6c:70:a8:25:05:9b:50:
4b:00:b0:00:80:1e:8a:c7:45:e8:bb:23:f3:8b:7a:ed:a1:19:
34:52:d4:69:4a:5b:5f:35:47:65:e4:29:a4:2e:f5:f4:a0:31:
00:23:b0:9a:02:86:7a:6b:b3:3f:7d:a9:a7:1b:aa:62:f5:fe:
9f:d0:59:7b:34:60:d2:2e:11:f8:e4:14:7e:5b:65:54:1f:4e:
30:5b:83:52:49:b6:d5:e8:ce:97:7a:3b:1a:46:13:0c:24:18:
77:58:15:6f:1c:f7:f5:10:d4:6c:99:9b:10:06:b0:f7:54:7b:
be:47:a9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:06 2024 by rpki-client on console-fra.rpki-client.org