Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/IApEEna6iQPYNruybVi42LusHWc.roa
File: IApEEna6iQPYNruybVi42LusHWc.roa (raw, json)
Hash identifier: QzJmAULv0v0RfSW5d4EsqUCSIf+q9SM4tFG0SBQp454=
Subject key identifier: 20:0A:44:12:76:BA:89:03:D8:36:BB:B2:6D:58:B8:D8:BB:AC:1D:67
Certificate issuer: /CN=1627b80681f5b48e126898295983e0df29971b98
Certificate serial: 018572B44327A4BA06B557829C30267C1DA0
Authority key identifier: 16:27:B8:06:81:F5:B4:8E:12:68:98:29:59:83:E0:DF:29:97:1B:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/IApEEna6iQPYNruybVi42LusHWc.roa
Signing time: Mon 02 Jan 2023 13:38:14 +0000
ROA not before: Mon 02 Jan 2023 13:38:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39387
IP address blocks: 195.178.118.0/23 maxlen: 23
2001:67c:300::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:43:27:a4:ba:06:b5:57:82:9c:30:26:7c:1d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1627b80681f5b48e126898295983e0df29971b98
Validity
Not Before: Jan 2 13:38:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=200a441276ba8903d836bbb26d58b8d8bbac1d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:09:8b:39:15:61:a9:37:5a:ab:94:69:df:63:
3a:79:bb:bc:f0:94:34:6c:81:cd:4d:ff:3a:5e:96:
bf:d1:4c:5a:10:1c:6c:39:b2:ba:90:6f:47:a6:d8:
d7:d6:25:d2:cd:7d:5c:dd:fe:74:b4:17:e1:f4:b9:
33:ee:79:fc:04:12:2b:97:34:16:cf:ed:51:d1:da:
b6:ae:96:8d:f6:95:b3:8c:f4:88:cc:e9:af:d4:0d:
6c:c9:75:65:be:23:82:82:b9:19:e1:d5:b3:da:29:
b7:f2:2e:d5:19:3a:54:d1:9f:2f:ad:e5:ab:e0:bd:
c1:55:e9:42:c1:48:20:54:3f:85:50:39:94:62:c1:
12:bb:e3:b0:21:ff:53:8e:af:ac:35:d4:26:44:2a:
b7:b5:7b:73:93:1f:45:15:70:bd:bd:2c:d6:6a:c5:
60:06:1e:5b:67:2a:87:d7:f0:e0:d7:2c:6b:43:d6:
fa:5d:6c:3e:f4:64:cb:7f:d7:dd:c9:4d:6d:c4:8b:
52:b7:a6:a4:eb:5c:03:5c:fd:48:88:8b:10:fe:47:
32:c0:11:e1:4d:fd:6f:8d:45:32:af:66:ac:15:b9:
7d:01:85:b1:ad:b7:98:63:d2:9b:c5:3c:cc:38:db:
01:63:48:06:fa:a0:76:ed:09:65:e1:98:6e:79:ef:
a6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0A:44:12:76:BA:89:03:D8:36:BB:B2:6D:58:B8:D8:BB:AC:1D:67
X509v3 Authority Key Identifier:
keyid:16:27:B8:06:81:F5:B4:8E:12:68:98:29:59:83:E0:DF:29:97:1B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/IApEEna6iQPYNruybVi42LusHWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.118.0/23
IPv6:
2001:67c:300::/48
Signature Algorithm: sha256WithRSAEncryption
1f:33:2e:fc:c9:3c:af:6e:71:4d:50:aa:02:95:1a:5a:cb:c5:
b9:6c:7b:c2:03:99:d5:2f:a9:c2:86:e0:05:09:09:8a:fc:1d:
c7:6a:e5:69:fa:b4:b6:76:38:b6:ab:93:78:92:36:37:a2:be:
37:cb:75:28:75:f4:54:0c:96:d5:64:48:a1:57:b0:40:c6:f8:
51:47:d7:95:5e:68:a0:d8:1b:f4:1e:f6:5d:7d:71:c6:04:5f:
21:82:fd:e9:83:9b:92:cf:48:97:fc:2d:ed:5e:08:57:22:57:
b6:f3:b7:23:e2:bb:10:3a:dc:ed:27:06:25:5f:51:8c:42:d4:
6f:aa:e0:c2:bb:74:85:61:8c:8c:f8:fc:02:ec:c0:5b:e3:d4:
2b:e5:e5:29:71:71:46:e5:f2:01:4e:27:a7:9c:84:67:36:e6:
23:57:8a:ff:6d:70:83:5d:17:11:af:92:3b:4e:e7:8b:20:95:
f2:b6:32:1a:5b:9c:d8:fa:12:d6:a1:3b:95:e4:d6:c5:69:ef:
61:3d:45:1b:62:15:78:e5:50:a7:56:57:29:e3:ea:f3:fa:52:
fc:7b:32:94:56:32:e8:1b:5e:f7:6a:e2:4b:cd:1c:01:0a:bc:
2a:11:38:31:5f:ff:b3:d1:db:99:6b:51:e0:36:b0:dd:14:12:
cd:0c:fc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:35 2024 by rpki-client on console-fra.rpki-client.org