Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/SfrjA9CjxllVpS73T94bA1qnf04.roa
File: SfrjA9CjxllVpS73T94bA1qnf04.roa (raw, json)
Hash identifier: NpBEjtVnn1CkHqO5zQVZQz3MTwjtP9fZCF2QJY8yIyQ=
Subject key identifier: 49:FA:E3:03:D0:A3:C6:59:55:A5:2E:F7:4F:DE:1B:03:5A:A7:7F:4E
Certificate issuer: /CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Certificate serial: 01857115559D2568DE232416C48D53BAA922
Authority key identifier: 13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/SfrjA9CjxllVpS73T94bA1qnf04.roa
Signing time: Mon 02 Jan 2023 06:05:01 +0000
ROA not before: Mon 02 Jan 2023 06:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 195.242.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:32:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:55:9d:25:68:de:23:24:16:c4:8d:53:ba:a9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Validity
Not Before: Jan 2 06:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49fae303d0a3c65955a52ef74fde1b035aa77f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ee:ab:e3:f0:de:c7:d9:cf:f5:3a:a0:f6:57:
ac:a1:be:c0:26:bb:b3:02:8d:30:a2:8f:2a:4b:e8:
55:9e:6d:62:97:c1:48:55:23:83:16:ad:0b:97:c4:
94:41:c5:a0:21:81:97:90:34:86:49:10:58:ad:d6:
d1:05:c6:fc:db:98:67:a0:0a:c6:d1:96:66:38:9b:
66:14:58:08:d6:2f:a4:3c:43:72:2d:ba:eb:66:35:
c6:b8:8a:35:44:1c:50:11:e2:0f:78:ee:a4:b1:6a:
a3:46:69:0f:eb:f6:fb:2e:79:18:22:a5:69:39:09:
3c:05:d6:f4:3b:0d:81:ba:29:14:51:56:04:c7:24:
d8:7f:c9:e0:56:be:ad:2d:02:46:3f:a3:ac:e3:63:
b4:cc:07:11:79:2e:31:e9:4e:e6:5d:8d:5d:51:04:
43:12:cd:70:83:b9:ee:4c:19:3c:f5:f3:43:1e:57:
8c:41:59:d9:73:2f:7c:55:a2:44:66:fc:78:03:fe:
5a:de:0c:e6:78:f6:c0:1b:da:72:d7:35:22:13:f9:
8f:e8:46:e6:b3:03:86:f4:d4:dc:90:04:df:ea:74:
83:7a:5d:c1:1c:0d:a7:41:69:e0:23:a8:c2:0c:56:
d1:79:86:f8:b7:ca:67:3a:1e:2d:e0:fe:31:71:d7:
98:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FA:E3:03:D0:A3:C6:59:55:A5:2E:F7:4F:DE:1B:03:5A:A7:7F:4E
X509v3 Authority Key Identifier:
keyid:13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/SfrjA9CjxllVpS73T94bA1qnf04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.237.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:70:35:b3:ce:c4:a3:74:7b:8e:a0:bc:6a:d9:bc:51:41:c3:
16:1c:71:2f:95:22:fe:d3:eb:23:c8:d2:df:27:36:fc:75:54:
9a:1f:bc:36:c6:da:0c:1b:d0:02:60:c1:35:08:c5:99:d5:ae:
f3:5d:4b:fb:ce:36:55:1d:54:5d:fc:7b:b3:d5:1f:2e:7c:37:
69:8b:de:ac:16:aa:ef:a1:9c:31:af:d7:80:4b:90:3e:1f:54:
c4:0d:87:89:ca:72:9d:29:cc:fe:ca:fc:c3:82:91:89:87:4e:
a6:45:5e:dc:2e:c7:b2:be:0e:94:95:62:8e:05:21:88:71:40:
3c:a0:66:9d:8b:c8:17:fa:1e:47:0a:0f:de:1b:29:94:79:50:
b5:7d:10:35:e7:ac:e3:f6:e2:0e:23:2f:b0:68:23:3d:fa:2e:
1d:87:45:79:5f:59:d5:80:1d:40:43:c2:7e:12:ef:c2:42:5a:
33:d1:8f:1d:cb:8f:07:10:ed:e0:ac:cd:27:b2:28:fb:56:f1:
72:d7:94:bd:e4:15:82:3d:d2:fa:81:75:61:fa:cb:c4:5a:b2:
32:b9:84:be:71:ea:bd:6c:49:ee:46:74:a0:f5:8b:2d:e3:28:
1a:93:f8:2e:27:24:59:7e:79:fb:b2:eb:8a:0d:36:c8:39:6e:
1e:18:e3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:55 2024 by rpki-client on console-fra.rpki-client.org