Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/1-YgZLKPJs-6r1li7hjBXsIfXjnU.roa
File: 1-YgZLKPJs-6r1li7hjBXsIfXjnU.roa (raw, json)
Hash identifier: glRPG48YDP7FV0dYkcztsIzXlnmSneH5KzwFaoz/A5M=
Subject key identifier: F9:88:19:2C:A3:C9:B3:EE:AB:D6:58:BB:86:30:57:B0:87:D7:8E:75
Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial: 01856F1D8124E577E0E3997EE754A9AB0971
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/1-YgZLKPJs-6r1li7hjBXsIfXjnU.roa
Signing time: Sun 01 Jan 2023 20:54:42 +0000
ROA not before: Sun 01 Jan 2023 20:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 195.210.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:81:24:e5:77:e0:e3:99:7e:e7:54:a9:ab:09:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Validity
Not Before: Jan 1 20:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f988192ca3c9b3eeabd658bb863057b087d78e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a2:07:04:e0:6f:35:c7:e9:ec:c5:b2:8b:f3:
1c:7b:9c:77:58:1f:65:f1:14:65:c9:17:3c:f6:72:
27:7c:5e:f3:34:f9:19:94:ab:c5:8f:10:a4:18:98:
11:72:7f:63:da:e4:b3:0a:a8:17:c2:d5:84:c8:72:
6d:27:e9:b6:3d:4b:a7:83:b0:e7:2f:41:02:02:95:
85:bc:a2:db:7d:6e:a3:e9:ac:18:16:05:4d:93:18:
76:63:d7:c5:42:47:7f:b9:a9:f9:30:fb:9f:88:eb:
2e:3d:e6:fc:31:62:3a:bb:8e:ef:30:c5:a3:63:28:
35:2a:d3:0f:79:4d:22:db:1c:d3:81:09:f5:d2:3c:
33:60:36:47:23:b5:09:ef:a6:65:8f:95:3d:5d:98:
37:cb:55:e5:da:c0:66:4c:c5:b6:d9:a8:fd:7a:4b:
16:f1:d4:eb:ac:0c:63:51:57:bf:28:63:98:99:c1:
19:1f:fe:b6:4f:05:f6:f7:89:37:32:ee:ea:92:2e:
25:05:7f:2c:58:aa:70:fc:ee:af:d5:97:bb:35:b5:
9f:c5:f4:d0:a0:cc:1e:85:7f:75:00:af:ab:a5:b8:
eb:69:e2:7b:f0:88:9d:51:e5:99:40:c3:65:3a:96:
63:69:00:56:eb:83:87:34:43:91:41:2c:73:b2:b0:
2b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:88:19:2C:A3:C9:B3:EE:AB:D6:58:BB:86:30:57:B0:87:D7:8E:75
X509v3 Authority Key Identifier:
keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/1-YgZLKPJs-6r1li7hjBXsIfXjnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.109.0/24
Signature Algorithm: sha256WithRSAEncryption
be:e7:ae:c4:07:40:d1:90:9c:6a:ed:85:44:8d:14:5c:ca:38:
d0:8d:5a:59:1f:c5:50:7c:64:00:38:a9:c6:45:92:74:a0:60:
7f:ef:a2:ed:87:d0:58:ae:ea:5c:bd:64:1e:1c:6e:23:ce:ea:
c0:0a:77:db:17:8d:f2:97:82:cf:46:10:1c:98:e0:8c:c9:56:
4c:5c:3d:84:a9:a5:68:4b:75:b0:b8:0f:b4:dd:21:00:e6:c9:
47:53:26:13:2c:9f:cd:dc:9a:49:03:db:84:fa:d8:85:07:57:
64:8f:35:b3:9e:a9:4e:b1:f5:dd:67:4d:0a:0d:e7:d3:9e:3c:
83:32:d2:81:11:3e:6c:3f:e0:d3:29:21:08:72:59:29:cc:a5:
17:0d:39:01:eb:46:ba:58:6a:fe:f7:ce:64:2b:cb:5e:5e:96:
d8:73:81:8f:e4:ad:22:c1:4c:ee:aa:b8:1e:80:e8:8a:3c:68:
a3:ac:bf:69:ac:39:ef:12:80:2a:5d:65:47:92:50:43:95:b5:
4e:b8:24:c8:59:b3:ed:ab:55:c9:9a:a5:72:8e:f5:48:4e:b4:
00:e7:00:90:d0:48:99:4e:22:82:93:f0:f1:30:1f:62:66:e4:
54:d5:3a:10:d1:d1:da:f4:af:d8:6c:dc:23:e3:81:97:88:c1:
64:df:4f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:49 2024 by rpki-client on console-fra.rpki-client.org