Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/5ISNUS6fGVycSAYOwrJZ4hL29w4.roa
File: 5ISNUS6fGVycSAYOwrJZ4hL29w4.roa (raw, json)
Hash identifier: VK+zTx+BdfUvDCwIgBk9Zjjbyxn0uHqwZ0gLAEcMCQ0=
Subject key identifier: E4:84:8D:51:2E:9F:19:5C:9C:48:06:0E:C2:B2:59:E2:12:F6:F7:0E
Certificate issuer: /CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Certificate serial: 01856EA6AB0B2D36F01AE486B6EA3EC35E5F
Authority key identifier: E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/5ISNUS6fGVycSAYOwrJZ4hL29w4.roa
Signing time: Sun 01 Jan 2023 18:44:54 +0000
ROA not before: Sun 01 Jan 2023 18:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3308
IP address blocks: 195.110.16.0/24 maxlen: 24
195.110.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:ab:0b:2d:36:f0:1a:e4:86:b6:ea:3e:c3:5e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Validity
Not Before: Jan 1 18:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4848d512e9f195c9c48060ec2b259e212f6f70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:74:c1:39:5f:02:62:af:61:b6:9a:c3:53:8d:
a2:ef:2b:b0:28:7f:10:b8:31:da:10:61:74:d5:5f:
df:66:42:82:cb:3d:22:8b:d3:35:a4:e5:a2:8b:e5:
20:a6:35:18:21:45:ba:0c:cf:a9:6b:4e:15:58:cf:
ad:26:27:50:89:eb:74:3d:15:7a:46:72:07:34:11:
cb:91:4f:cf:b9:65:4c:10:54:97:1d:61:29:6e:e5:
cd:1c:17:03:7e:ef:99:6e:f9:60:c1:d7:c4:c5:57:
a3:65:46:f3:a9:fd:0c:5b:a6:f8:b6:0d:a4:14:80:
e1:ff:06:01:51:4f:7c:b4:02:fa:2a:6b:34:8a:4a:
62:64:4c:dc:56:8c:0c:5c:e3:50:b0:78:f9:0c:72:
5b:92:57:3e:f3:94:4e:4a:39:8d:a1:d2:7a:1d:3e:
52:03:c2:e2:cd:89:bd:e5:13:39:ac:96:a7:fc:68:
15:65:dc:80:07:32:b1:80:71:00:1e:c4:32:5e:e4:
b1:28:bd:56:fd:bc:98:5f:92:ca:0f:d4:82:56:6c:
57:f8:93:e7:aa:43:de:45:13:53:01:83:2c:3a:76:
80:7a:43:b0:18:84:88:c5:c0:bd:7d:47:b4:86:36:
b0:83:de:e8:53:26:c0:7f:5d:56:f3:90:25:9c:92:
3d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:84:8D:51:2E:9F:19:5C:9C:48:06:0E:C2:B2:59:E2:12:F6:F7:0E
X509v3 Authority Key Identifier:
keyid:E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/5ISNUS6fGVycSAYOwrJZ4hL29w4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.110.16.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:c1:e9:5d:b6:0d:d5:e3:56:e8:42:e8:1b:ba:fd:24:09:7d:
80:60:58:f8:7b:0b:39:1b:33:a5:66:ce:cd:de:64:ff:51:3f:
33:68:b2:7c:4d:c9:27:8e:c4:c4:77:b5:35:e0:7b:89:0d:91:
36:d0:5b:bd:78:4f:bf:7d:f1:09:b4:ce:53:a6:8f:1f:b6:38:
b5:47:93:10:f2:b3:c4:db:ff:d6:21:c6:ae:dd:52:03:c3:5c:
89:e3:2b:11:45:28:11:19:18:ad:13:e9:e7:a1:ca:d1:4e:f6:
0d:3a:58:df:8e:35:dc:50:f5:ea:33:f7:c3:c2:d8:9f:5c:f3:
93:1c:a6:6b:f9:be:97:e4:e0:63:60:85:1b:02:d7:d5:7f:d3:
b2:28:42:bc:61:ad:7f:7c:3a:0f:e1:01:15:92:6a:0e:d9:f3:
aa:f6:ed:94:77:07:3c:aa:8a:82:4b:5c:50:23:7b:4e:4c:3d:
80:28:50:ea:3d:3a:b6:8d:0f:84:b7:a5:80:02:d9:a4:d1:07:
73:92:ff:e8:66:ed:bb:06:3d:7d:6a:84:c6:ee:77:c6:91:57:
8a:e6:95:9f:90:da:3b:5c:d0:c9:bc:76:5e:53:df:a1:33:28:
96:09:7e:2c:39:3a:ac:a5:aa:25:1a:64:f2:e3:45:94:60:9c:
85:92:76:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:17 2024 by rpki-client on console-fra.rpki-client.org