Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/Pp_dAWVb_L-nQYFlsNEbFTO2bpI.roa
File: Pp_dAWVb_L-nQYFlsNEbFTO2bpI.roa (raw, json)
Hash identifier: oYuGBD5COsg/kXlx0x22LnfrIQiHXkDBqOBDgllMBws=
Subject key identifier: 3E:9F:DD:01:65:5B:FC:BF:A7:41:81:65:B0:D1:1B:15:33:B6:6E:92
Certificate issuer: /CN=7df7cfd6c8826a67f642a373d131955308d9c1ca
Certificate serial: 0185DDE12367020E7841526DAFBFA809A7B2
Authority key identifier: 7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/Pp_dAWVb_L-nQYFlsNEbFTO2bpI.roa
Signing time: Mon 23 Jan 2023 09:06:37 +0000
ROA not before: Mon 23 Jan 2023 09:06:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205654
IP address blocks: 195.234.95.0/24 maxlen: 24
185.211.20.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:dd:e1:23:67:02:0e:78:41:52:6d:af:bf:a8:09:a7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df7cfd6c8826a67f642a373d131955308d9c1ca
Validity
Not Before: Jan 23 09:06:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e9fdd01655bfcbfa7418165b0d11b1533b66e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:82:1e:e3:e8:b3:01:98:64:a8:e3:05:e7:0e:
ef:16:06:c2:5b:2a:c8:aa:dc:49:44:ae:91:f8:dc:
d8:3b:28:d6:27:01:a5:8a:c7:bc:3c:aa:75:3f:4c:
25:f8:e6:6e:38:09:23:b2:ce:24:d6:cc:11:f9:e1:
bf:0e:93:d6:a4:1f:39:71:e2:0b:5a:21:05:45:8a:
6a:d5:8e:83:63:f0:1d:da:a0:33:28:91:02:f6:3f:
88:df:ba:3f:c3:54:42:22:12:b3:a5:76:75:38:de:
2b:59:1f:47:c5:ec:38:8a:ee:43:d9:b5:96:a4:aa:
b1:71:43:10:86:51:f8:0a:64:b6:cd:f6:9a:b7:b3:
e9:cf:1c:ca:ee:1a:84:f5:46:b5:e3:6c:0e:f0:b8:
69:95:40:ef:71:90:50:25:68:05:d1:83:eb:91:23:
8e:3a:2b:81:e4:be:0c:b6:8c:ee:68:c6:8b:12:1d:
f4:d6:84:aa:e9:38:88:ca:3f:19:cc:2f:3b:98:41:
9e:78:61:3d:20:8d:af:3a:ea:83:d5:70:cb:0f:5b:
2b:0d:8c:f7:e3:ba:3a:f7:2a:dd:e4:6f:01:a5:80:
b1:08:b7:dd:c9:93:a9:85:56:08:ba:8b:c6:c9:3e:
81:2b:04:59:ca:05:47:8b:54:a9:54:19:ac:8f:56:
a9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9F:DD:01:65:5B:FC:BF:A7:41:81:65:B0:D1:1B:15:33:B6:6E:92
X509v3 Authority Key Identifier:
keyid:7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/Pp_dAWVb_L-nQYFlsNEbFTO2bpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.20.0/22
195.234.95.0/24
Signature Algorithm: sha256WithRSAEncryption
23:56:53:c3:ff:23:b5:c7:be:e8:ab:6b:04:4d:cd:ec:31:52:
17:04:b3:76:b0:47:52:e1:6b:db:5e:c8:f5:dd:94:d9:73:07:
79:84:4a:c0:53:7b:5a:62:30:49:22:14:fd:69:df:eb:09:7f:
b9:98:b0:bf:53:07:7e:9f:85:21:cc:51:24:a8:fd:5e:12:f2:
f2:83:e0:4e:6c:93:4f:d8:ca:c7:84:83:a6:e2:ca:b5:76:0c:
b7:94:25:c5:fc:d5:ff:43:0e:32:e6:4d:32:a7:f2:3a:e9:b7:
c3:6f:77:aa:97:d0:d5:92:49:6a:dd:5d:b9:58:51:f5:14:63:
53:18:9f:80:77:d5:29:91:2d:94:4a:f6:42:70:ae:96:ae:e7:
07:b8:77:49:ce:8a:90:fd:7e:b1:b0:e6:e1:be:b9:c7:d7:d2:
8b:dc:02:7e:b5:a2:8c:a6:45:9c:b7:b5:e0:c8:1b:63:9e:d2:
a1:4d:2e:bd:6d:cf:17:7a:4a:00:50:96:87:d9:7f:2e:86:2e:
27:52:38:08:2e:f6:c4:cc:74:68:27:c2:4c:e0:8a:7d:d9:29:
f4:c5:ce:03:dc:cf:4a:57:87:d9:05:cd:69:6f:5a:5d:5d:81:
a9:06:49:ad:63:78:e3:7b:c9:f7:ab:e2:88:96:35:01:ed:88:
11:f2:06:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:50 2024 by rpki-client on console-ams.rpki-client.org