Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/1eUzrYandYRVLngbQZy9K3KrceA.roa
File: 1eUzrYandYRVLngbQZy9K3KrceA.roa (raw, json)
Hash identifier: OuMGTkxUuOVBB9OGzOOh3MHDTEXiC6iWLDeXJn7+n7A=
Subject key identifier: D5:E5:33:AD:86:A7:75:84:55:2E:78:1B:41:9C:BD:2B:72:AB:71:E0
Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial: 018CB63334D7A33656929A7006194628A53A
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/1eUzrYandYRVLngbQZy9K3KrceA.roa
Signing time: Fri 29 Dec 2023 15:30:58 +0000
ROA not before: Fri 29 Dec 2023 15:30:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 195.210.108.0/24 maxlen: 24
195.210.112.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b6:33:34:d7:a3:36:56:92:9a:70:06:19:46:28:a5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Validity
Not Before: Dec 29 15:30:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5e533ad86a77584552e781b419cbd2b72ab71e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:12:ac:79:77:26:b9:e2:0c:2c:d3:54:5d:53:
c9:4d:09:e6:08:5f:fb:0c:12:cc:c2:a9:a3:e9:0c:
d4:b6:86:c4:66:3f:00:3b:7e:77:ed:38:81:d8:fd:
94:66:b8:dc:d2:6e:55:c9:8f:e0:19:68:10:2d:c3:
36:ba:de:56:dd:9d:84:61:3f:69:1e:c5:e5:9a:3e:
6d:74:d9:44:57:5b:4d:28:db:10:84:56:da:19:91:
72:14:6d:60:48:24:35:84:97:d2:8d:3a:d2:49:a7:
02:37:fe:47:48:c1:de:71:f5:00:98:5b:a2:6e:ff:
05:71:8e:bd:3c:d7:d3:83:80:70:38:14:ae:e7:9e:
76:b5:c7:b1:a3:3b:8d:50:65:fc:a1:1b:83:b9:37:
ca:5a:0b:87:b6:de:40:a7:23:4a:35:9d:6e:58:d3:
79:e3:0e:4b:ab:66:29:5f:33:53:81:b3:b2:3f:6e:
22:23:0b:f6:13:ee:87:81:ab:e6:e3:49:9f:9c:f3:
36:28:3f:7f:5b:7c:3d:85:5e:58:18:88:4a:d7:0c:
41:96:f4:37:0c:8f:88:15:eb:8d:77:fa:38:bb:d8:
e5:a0:65:c3:27:be:bc:bf:ab:92:2e:96:7e:9d:65:
2f:3f:18:74:1e:93:ca:a4:1d:ab:33:e7:89:7f:27:
fb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E5:33:AD:86:A7:75:84:55:2E:78:1B:41:9C:BD:2B:72:AB:71:E0
X509v3 Authority Key Identifier:
keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/1eUzrYandYRVLngbQZy9K3KrceA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.108.0/24
195.210.112.0/22
Signature Algorithm: sha256WithRSAEncryption
78:6a:0b:3e:12:1a:bc:07:89:89:c4:62:16:23:e4:01:d5:48:
5d:7c:5d:03:32:22:66:70:54:dd:0b:fc:20:37:9c:94:8f:ab:
01:d8:e1:2d:d1:c3:ef:5e:1c:2a:3c:f0:82:b5:44:44:09:dc:
18:66:6a:0d:f3:6d:60:c1:cd:cb:50:52:aa:f9:02:34:41:54:
c0:ec:19:5b:ea:30:7a:ac:9f:8f:8e:3b:c9:5f:84:64:65:aa:
91:21:d1:b1:39:c1:c7:77:d3:b6:0d:14:67:31:54:c5:65:f3:
06:58:21:55:53:a5:09:28:e7:9c:99:ff:c8:1b:37:29:c1:ec:
4f:01:8e:53:98:2f:61:dc:c5:a7:c5:f3:14:43:9f:60:1a:8b:
54:7c:39:95:aa:2a:8b:ca:c8:cd:44:00:74:3a:ce:72:91:17:
13:cc:84:88:01:6d:07:00:03:79:58:79:e5:06:99:80:ce:5c:
03:d5:81:9f:6a:d4:7e:f9:52:dd:de:45:b1:20:df:1d:c8:6d:
1f:6b:c7:80:a8:27:7d:e5:a6:a3:f9:02:6b:ec:61:de:52:76:
28:c2:5f:c9:53:4c:30:1c:f7:d1:73:9d:e6:b9:2d:39:8a:74:
b7:59:75:3e:d2:9c:74:fd:64:9e:1c:0e:31:8f:af:fe:c2:3b:
26:54:e2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:48 2024 by rpki-client on console-ams.rpki-client.org