Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/3m_d22wlpPEZ_t40krlUculWVRY.roa
File: 3m_d22wlpPEZ_t40krlUculWVRY.roa (raw, json)
Hash identifier: J7Zb+sVM8EksBdiyAouM/gEnh2gx87KzFCcih9cu1VY=
Subject key identifier: DE:6F:DD:DB:6C:25:A4:F1:19:FE:DE:34:92:B9:54:72:E9:56:55:16
Certificate issuer: /CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
Certificate serial: 018FF0E6C9317CC42D3BF3A5367129B2C36E
Authority key identifier: 06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/3m_d22wlpPEZ_t40krlUculWVRY.roa
Signing time: Fri 07 Jun 2024 04:13:27 +0000
ROA not before: Fri 07 Jun 2024 04:13:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 195.66.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Jun 2024 15:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f0:e6:c9:31:7c:c4:2d:3b:f3:a5:36:71:29:b2:c3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
Validity
Not Before: Jun 7 04:13:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de6fdddb6c25a4f119fede3492b95472e9565516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:80:76:10:79:ec:c5:f8:08:c8:91:e4:a2:
21:5a:9b:02:79:9e:03:ee:0b:f4:2d:b6:ad:81:43:
5d:6f:ad:0d:46:97:48:d8:c9:d3:28:c6:7c:3b:26:
85:f7:16:4b:83:67:e5:39:35:ac:98:83:37:3d:ee:
4b:a8:89:9f:ec:73:e1:e5:85:d2:45:3f:78:a7:86:
28:55:d5:b4:e3:dd:42:50:fe:fa:07:d8:1f:88:67:
93:97:f7:46:a8:64:29:53:d8:91:b7:98:28:74:5b:
b7:6c:eb:8b:2b:32:3b:6e:50:40:45:d7:d0:29:98:
82:97:72:52:7b:4c:95:5e:a5:f0:9d:9b:d0:2d:18:
7e:0f:85:a5:b9:f4:60:1c:f5:4d:6b:8c:f5:ea:71:
8f:0d:6c:c1:06:11:1e:b7:7e:97:5f:a9:30:56:67:
ae:e8:d3:83:b2:bb:78:08:bf:03:f6:80:72:4f:0e:
bb:aa:2e:f5:60:c1:63:46:51:23:f1:c0:f0:88:6b:
2c:4a:40:21:80:1c:cc:80:65:53:b7:4c:73:ce:df:
fa:93:b1:cf:5c:00:2c:60:e1:97:50:f5:10:18:24:
41:08:69:c6:0c:cc:81:a1:9d:94:6d:b9:98:17:bb:
a6:1e:a0:a9:d0:64:b4:3f:7f:19:58:4c:2f:f3:c7:
57:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6F:DD:DB:6C:25:A4:F1:19:FE:DE:34:92:B9:54:72:E9:56:55:16
X509v3 Authority Key Identifier:
keyid:06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/3m_d22wlpPEZ_t40krlUculWVRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.101.0/24
Signature Algorithm: sha256WithRSAEncryption
11:4a:8a:dd:84:8e:c5:b4:e3:db:42:d0:00:4e:99:14:08:f5:
1a:bf:bd:c2:45:df:23:b8:fd:cd:2d:d2:ee:ea:49:23:18:7f:
46:0a:fa:5e:4f:a4:43:1b:7e:49:2b:75:e6:84:20:e7:e9:53:
ab:17:ab:f0:30:18:e7:26:8a:71:07:29:f2:9a:e0:d7:4b:00:
90:c1:2e:65:01:32:8a:c2:3c:e0:c4:d1:6e:ca:80:85:ad:84:
7d:9a:52:bd:35:11:c2:76:21:5d:b9:98:27:3c:a6:ca:ab:3d:
e5:51:f1:d3:0b:8c:02:8e:83:5c:f8:83:62:20:80:f2:f9:7a:
d7:0b:f8:c7:70:eb:e1:03:88:8f:08:8a:79:4b:16:48:b5:4e:
47:09:21:fa:0d:c2:ff:8e:f4:6e:15:5a:25:6b:42:78:3d:40:
78:1e:f1:7c:0f:32:73:10:de:43:37:8e:13:61:86:80:07:a2:
0e:63:fb:14:d4:77:67:d9:09:07:8c:64:6d:8b:c6:bd:f0:94:
ef:b8:2f:38:0a:27:44:c4:a3:49:16:53:d8:50:b3:88:8e:de:
34:a9:03:4a:94:c3:1d:b6:92:dc:63:24:c0:0a:74:a7:43:b8:
51:4e:03:7f:a2:8c:57:37:74:62:03:e9:dd:46:c0:28:50:c3:
0a:99:05:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 16:45:57 2024 by rpki-client on console-fra.rpki-client.org