Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/1njTs6aklR2hN0nSw_EbaHp4m1M.roa
File: 1njTs6aklR2hN0nSw_EbaHp4m1M.roa (raw, json)
Hash identifier: w0vj5CbbRZBvGiqnXv6ePjEp7BMCLg7gXJROWi1E1AY=
Subject key identifier: D6:78:D3:B3:A6:A4:95:1D:A1:37:49:D2:C3:F1:1B:68:7A:78:9B:53
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 018C4391C19320162B05F7C775C0F5B699A6
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/1njTs6aklR2hN0nSw_EbaHp4m1M.roa
Signing time: Thu 07 Dec 2023 09:17:54 +0000
ROA not before: Thu 07 Dec 2023 09:17:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206271
IP address blocks: 195.93.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:43:91:c1:93:20:16:2b:05:f7:c7:75:c0:f5:b6:99:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Dec 7 09:17:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d678d3b3a6a4951da13749d2c3f11b687a789b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2e:f8:1a:51:15:73:e9:47:1d:a5:37:10:7e:
8a:13:63:e4:87:bb:9c:e6:1b:a7:d8:9e:95:0f:1d:
96:7e:c2:b0:a2:c6:0d:78:75:3c:c5:52:bf:be:c5:
00:4d:72:18:31:b4:f6:b2:bc:1a:28:34:20:e0:14:
c8:d6:72:4d:f6:36:5f:63:bc:e3:38:fd:b6:58:33:
9d:66:d1:1f:1b:c3:72:56:b1:3a:73:fc:d2:48:50:
8d:24:20:43:4a:b7:54:15:fa:84:94:6b:c1:54:2a:
86:08:9e:b0:c7:42:37:8a:5d:ae:3a:21:83:38:19:
10:8b:0a:29:ae:a1:91:33:54:76:9e:60:81:42:68:
ba:68:3a:52:84:4a:d8:12:57:62:56:aa:83:d8:dd:
47:55:96:fd:ad:61:3b:5f:98:85:4c:42:83:39:14:
58:c1:20:fc:ef:1d:28:5b:1b:05:c2:55:5c:62:50:
cf:b7:ce:f0:c2:fe:fc:ac:21:9f:51:ca:d4:ad:9c:
7d:21:e6:ac:96:9f:93:2d:79:0f:72:a7:3f:95:f1:
38:c6:a3:b4:3d:99:da:6f:81:64:06:72:91:b8:6e:
85:ca:70:8e:18:ad:c8:3a:67:b8:4f:b4:84:02:e2:
e3:2c:d4:96:a3:e5:07:b1:46:30:1f:4f:a6:d6:d6:
51:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:78:D3:B3:A6:A4:95:1D:A1:37:49:D2:C3:F1:1B:68:7A:78:9B:53
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/1njTs6aklR2hN0nSw_EbaHp4m1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.226.0/24
Signature Algorithm: sha256WithRSAEncryption
18:55:46:0c:df:28:90:14:a4:ef:71:06:91:4a:d4:0a:ab:db:
11:97:c8:80:46:d3:43:f5:06:64:19:5e:94:e3:31:0f:44:85:
26:0a:12:e0:4f:79:e9:9d:ec:4f:00:ba:ac:78:34:8b:94:98:
63:27:54:5f:d0:64:fd:32:b1:7d:4a:e9:a5:85:17:83:a1:2f:
4b:2c:ae:09:9a:9a:27:ef:94:e1:2e:8f:07:20:59:0e:1c:d0:
81:7b:89:ce:e1:31:74:7c:76:3e:29:c9:0b:2b:3d:65:28:2d:
71:28:5d:c0:31:9b:4f:a6:ca:0c:0b:11:5c:b2:8d:7d:fa:69:
c6:6b:14:2c:5d:84:7a:e2:65:8b:5b:cf:30:05:cf:e4:8a:62:
ba:8b:28:4b:6a:06:f6:c5:b2:50:57:8f:80:89:a4:75:34:91:
2d:36:9c:0c:ed:f9:7f:79:1f:49:88:a9:1e:e7:a3:b3:41:1f:
e1:2a:ee:83:23:05:f9:b4:a5:a3:63:77:65:18:01:d3:5b:e6:
7a:e3:eb:1d:1d:3f:a2:c0:20:2c:96:a1:bb:77:d7:7e:a7:e9:
09:8d:29:d7:4b:26:cb:2d:51:9f:9b:36:03:4e:c4:7f:e3:f2:
de:b3:d8:3e:1b:ce:a7:f8:77:c0:a2:ee:d6:86:92:fd:1b:42:
3e:8a:e9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:32 2024 by rpki-client on console-ams.rpki-client.org