Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/pUeWgep3HrHoKMo0ihxSaKZnfQk.roa
File: pUeWgep3HrHoKMo0ihxSaKZnfQk.roa (raw, json)
Hash identifier: 6IcGQ8ciyax2krD+YIdBbzBpNKmDAtru/9DlUH5aW1A=
Subject key identifier: A5:47:96:81:EA:77:1E:B1:E8:28:CA:34:8A:1C:52:68:A6:67:7D:09
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 0190ED798DD8EE3ED8C9A96E07B5D5BE1162
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/pUeWgep3HrHoKMo0ihxSaKZnfQk.roa
Signing time: Fri 26 Jul 2024 05:18:04 +0000
ROA not before: Fri 26 Jul 2024 05:18:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206271
IP address blocks: 195.93.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jul 2024 07:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ed:79:8d:d8:ee:3e:d8:c9:a9:6e:07:b5:d5:be:11:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Jul 26 05:18:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5479681ea771eb1e828ca348a1c5268a6677d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:be:6f:3b:90:22:e0:7e:79:4e:6f:ca:39:
85:d0:0a:86:4a:2c:5c:83:d7:1a:66:4c:63:f7:96:
28:0a:7d:a6:37:c3:63:8e:49:8a:29:4f:79:e4:67:
f8:6c:a5:26:c2:57:43:1b:6c:97:45:84:37:1c:dc:
30:73:41:10:04:4b:76:90:77:b1:53:e3:46:ef:01:
c4:16:d6:4e:f1:0b:09:1d:e0:6d:e8:bf:9a:40:75:
db:91:7e:33:29:dc:32:3b:48:be:9c:de:42:68:52:
ec:a4:57:95:05:84:dc:0e:58:2c:67:53:c6:ee:46:
4b:63:88:c3:91:4c:aa:c7:18:b6:f3:3b:60:d5:f0:
c6:af:20:6c:aa:9f:6a:68:4f:84:26:39:fa:ba:c7:
e2:82:f9:92:49:92:d6:0b:3c:79:45:47:ac:01:30:
81:3f:d3:60:03:23:99:75:92:ed:f4:69:90:8c:3e:
f9:d3:10:08:53:10:58:d9:59:b4:e8:db:f5:f1:f5:
3b:29:b1:00:2e:b5:c5:20:e4:29:42:da:33:e6:3b:
fa:5c:34:df:a0:18:9e:d6:f0:9d:e2:96:c0:df:af:
be:8e:50:00:27:4f:bf:0b:13:00:32:b7:7d:ab:95:
e1:65:e9:3c:d4:df:5c:70:32:60:3f:41:d1:6c:01:
4f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:47:96:81:EA:77:1E:B1:E8:28:CA:34:8A:1C:52:68:A6:67:7D:09
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/pUeWgep3HrHoKMo0ihxSaKZnfQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.226.0/24
Signature Algorithm: sha256WithRSAEncryption
74:96:51:92:91:d2:ae:cf:90:cc:4a:9a:38:0d:b8:bd:f2:90:
0b:63:bd:43:2f:eb:15:66:35:88:ac:79:30:46:7c:89:9a:9d:
57:c8:69:a7:1e:9b:94:ec:55:f6:19:8c:47:13:a1:81:21:cd:
b8:6e:d4:55:28:bb:30:18:3e:8b:c5:49:62:63:f3:0f:17:eb:
7e:e4:21:8b:17:ea:51:57:58:f1:16:aa:5c:70:88:f9:35:55:
17:01:2d:3a:80:74:5f:bc:d9:15:7d:41:6e:89:13:0a:78:54:
6b:8e:10:f1:a7:a8:d5:ab:46:55:9a:b1:8b:7d:b9:c8:a3:11:
36:f1:ae:8c:75:65:f7:e8:0e:ab:ec:a5:5c:ea:94:6d:e3:ee:
b9:c3:96:85:32:15:3f:01:a8:25:d3:de:f7:66:96:f3:76:be:
a9:ce:28:f2:e6:26:68:ed:2c:39:9e:bd:0c:c2:4e:85:98:7e:
d9:9b:f4:c6:44:d7:ec:cd:a6:56:6d:47:5e:59:0a:4f:e7:1a:
59:4b:16:6f:5b:e1:1b:45:d9:cc:7a:e3:75:58:81:b8:05:6f:
e8:c9:41:b4:04:ad:fa:06:7c:d5:f8:3f:11:bf:23:2f:af:e6:
fb:c7:45:ef:2b:07:4f:a7:a9:85:09:73:07:c1:ca:98:74:2d:
c0:01:27:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 10:02:42 2024 by rpki-client on console-fra.rpki-client.org