Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/DLkrknrrhl0stAa0ZT34zNIGIcQ.roa
File: DLkrknrrhl0stAa0ZT34zNIGIcQ.roa (raw, json)
Hash identifier: 4FblRxhggrp9SBjQC7eCzC/ncYnd7xdqYEjForv3F78=
Subject key identifier: 0C:B9:2B:92:7A:EB:86:5D:2C:B4:06:B4:65:3D:F8:CC:D2:06:21:C4
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 0190FD6F8E08E78D4E41D11EFC4581218CDD
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/DLkrknrrhl0stAa0ZT34zNIGIcQ.roa
Signing time: Mon 29 Jul 2024 07:41:04 +0000
ROA not before: Mon 29 Jul 2024 07:41:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206271
IP address blocks: 195.93.226.0/24 maxlen: 24
2a0a:280::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 Aug 2024 18:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fd:6f:8e:08:e7:8d:4e:41:d1:1e:fc:45:81:21:8c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Jul 29 07:41:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0cb92b927aeb865d2cb406b4653df8ccd20621c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:18:f1:a1:f6:39:df:6b:e4:87:69:73:12:58:
43:ea:47:9f:6a:73:83:a5:02:6c:f1:94:3b:65:ea:
25:f4:4d:39:7b:30:ea:f2:77:ae:30:1f:aa:0d:af:
de:45:56:49:c6:28:74:61:83:cc:a9:14:64:33:e8:
00:0c:7f:a4:84:7b:01:42:39:44:48:b9:5f:4b:35:
a1:bb:c2:da:8f:9a:6e:54:4e:3f:0b:e3:60:e6:c7:
f2:0a:b0:bf:a0:4e:0d:4f:5f:dc:e5:59:e1:cd:0c:
46:26:8a:5e:8d:ce:06:f1:9f:f0:48:92:5a:65:d9:
e2:db:8d:13:74:36:13:eb:30:23:6b:ea:80:b2:97:
e8:47:ba:1e:13:8c:29:bd:18:f6:6b:36:0a:f4:10:
db:45:5a:16:95:c4:2e:60:4b:b5:25:09:84:d2:e0:
53:56:c9:50:79:6c:f4:57:f4:db:2c:d6:7d:84:7b:
85:af:7e:22:82:1a:51:64:c4:5a:e2:7f:b1:05:d4:
2e:3a:f3:22:2b:07:13:2c:52:d1:b3:5c:15:7a:ae:
c4:6e:21:3d:b0:33:a4:7a:38:c9:9b:98:b8:c3:aa:
27:96:67:3c:59:25:8a:d2:d4:0a:2a:c3:47:d8:e9:
4d:81:32:25:56:66:a9:58:89:e0:9e:7b:22:03:c9:
8f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B9:2B:92:7A:EB:86:5D:2C:B4:06:B4:65:3D:F8:CC:D2:06:21:C4
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/DLkrknrrhl0stAa0ZT34zNIGIcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.226.0/24
IPv6:
2a0a:280::/29
Signature Algorithm: sha256WithRSAEncryption
3a:d3:e2:bd:9c:d4:aa:46:29:b0:76:b6:3a:f2:ff:00:2a:60:
04:fb:c2:af:fc:59:d0:d2:4c:ce:bf:48:4d:97:92:25:3c:b2:
46:25:f6:f8:f9:7a:00:75:57:b8:af:48:4e:54:77:e4:1b:bd:
e3:ed:12:61:24:94:e1:bc:3e:10:85:cd:09:40:99:97:24:b2:
d5:77:49:b2:fe:74:db:74:13:21:40:4d:62:3a:35:84:4b:c5:
68:d6:bd:5e:31:b8:49:ae:e4:26:a9:f9:b8:1d:e1:45:64:c1:
15:62:07:55:25:4a:9d:5c:d8:79:64:ec:d5:b1:db:6d:25:5c:
03:97:5c:d6:9a:6e:c7:5f:e2:cf:09:cb:b8:ae:30:b6:35:ff:
92:b2:64:27:14:35:8d:1b:54:ef:bf:92:7c:20:03:72:cb:81:
a3:9b:a0:53:57:43:b1:79:6a:7d:77:40:c5:dd:30:f7:5e:ff:
28:98:48:6b:e1:68:42:e9:47:e2:fd:61:d7:d1:3a:27:66:06:
d9:2b:2b:86:80:21:81:71:bd:68:62:eb:b9:22:70:b2:3a:86:
bb:73:ad:b0:c8:6a:09:37:f9:5b:bc:f7:b8:23:48:c7:24:38:
05:8a:cd:70:31:ca:94:b9:53:41:29:2b:a6:17:88:27:91:ce:
d1:8c:fd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 21:33:35 2024 by rpki-client on console-ams.rpki-client.org