Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/kYMmwn9vwSytScXK0CdpAuu1-L8.roa
File: kYMmwn9vwSytScXK0CdpAuu1-L8.roa (raw, json)
Hash identifier: zjmYTy4WWi7MJpHZWZAi7TXCWkJfJk+QC+//Iwuzbww=
Subject key identifier: 91:83:26:C2:7F:6F:C1:2C:AD:49:C5:CA:D0:27:69:02:EB:B5:F8:BF
Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial: 01856F1D7F8CA235C66DCB40123707161C15
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/kYMmwn9vwSytScXK0CdpAuu1-L8.roa
Signing time: Sun 01 Jan 2023 20:54:42 +0000
ROA not before: Sun 01 Jan 2023 20:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 195.210.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Dec 2023 15:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:7f:8c:a2:35:c6:6d:cb:40:12:37:07:16:1c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Validity
Not Before: Jan 1 20:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=918326c27f6fc12cad49c5cad0276902ebb5f8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d3:78:b9:df:61:96:0b:0f:20:33:20:8b:98:
db:f4:52:e9:16:8c:e7:3c:27:93:3c:7d:14:2a:c4:
e9:48:06:18:f2:a4:ff:25:a4:7b:da:8e:9f:e2:73:
2b:14:cc:85:9d:25:4c:aa:81:3f:13:71:f1:43:e0:
8f:c1:70:f4:ec:61:dc:7c:e8:aa:29:05:9f:48:78:
81:b5:a6:d9:3b:6e:b1:ed:b6:92:8b:f2:40:d3:22:
10:7a:3c:2a:c0:b9:1f:56:10:79:34:bb:7a:f5:09:
ad:6a:e9:fe:7f:ef:d8:77:3b:cb:e8:3e:f4:b4:4b:
68:ef:b8:7b:b1:45:3b:85:18:2b:7d:c3:a6:d5:68:
c1:38:cf:e9:ee:72:1e:a8:b5:bb:84:f0:fe:a8:b2:
d1:a5:d1:b2:df:26:8a:60:6c:6e:c3:41:c9:f9:5c:
5a:35:08:5f:7a:88:44:dd:8a:98:b5:63:00:4c:5e:
21:0d:cd:8a:6b:98:1a:c0:4d:47:5d:a0:f1:3f:82:
9b:2a:8b:5a:ef:1f:fd:c7:23:f9:41:8a:17:c6:e8:
c3:f0:2d:d1:b1:63:76:bb:a8:7a:97:4f:27:da:cd:
0b:d8:16:a8:d4:99:f8:3a:2a:61:23:0a:73:77:fc:
74:17:cd:94:b0:e3:85:df:c3:f9:f4:32:b7:11:36:
6c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:83:26:C2:7F:6F:C1:2C:AD:49:C5:CA:D0:27:69:02:EB:B5:F8:BF
X509v3 Authority Key Identifier:
keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/kYMmwn9vwSytScXK0CdpAuu1-L8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.108.0/24
Signature Algorithm: sha256WithRSAEncryption
da:d1:87:51:51:86:7a:b0:f8:02:17:8c:c3:2c:a0:d8:fd:1a:
70:a2:85:14:4b:4a:61:1d:44:97:b1:7b:19:dd:d4:fa:cc:21:
0f:1c:c9:f1:02:c1:85:1b:36:52:25:f4:86:02:ab:00:80:ec:
f1:98:06:a6:6d:3c:22:90:59:6e:41:ae:0b:9e:c3:0d:6c:ca:
42:78:58:08:42:03:1c:bb:e6:0e:02:24:a5:8c:1e:4f:89:a4:
76:2c:5e:94:91:c2:87:7c:6e:6a:62:1e:05:bd:3c:58:3a:23:
e5:6b:93:7f:c5:b5:29:c1:f3:ea:f0:41:d0:48:0f:47:db:05:
38:fa:86:f0:6b:76:0f:03:03:2b:f1:b5:9f:c2:d6:c3:31:ea:
bd:80:82:e4:20:0b:42:5a:95:33:0b:77:6e:ff:01:cc:29:72:
4a:dc:e4:10:69:bf:6e:10:5b:0d:e1:83:31:59:9f:7e:e6:ac:
79:47:68:ce:a1:fa:21:8e:eb:71:64:dc:68:33:a4:bc:7c:3e:
9d:09:4c:de:1e:2d:08:fa:35:21:55:ea:fd:72:93:ec:24:24:
05:d1:2f:0c:ef:ee:be:17:c3:5e:e5:e8:55:21:65:a9:e7:a3:
55:cc:0e:bb:4b:79:8c:4d:60:5e:78:12:48:01:0c:5b:bd:88:
a3:e1:af:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:48 2024 by rpki-client on console-ams.rpki-client.org