Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/1-6F3Xqjc4zQsRze8h7EZ3d_ezQ4.roa
File: 1-6F3Xqjc4zQsRze8h7EZ3d_ezQ4.roa (raw, json)
Hash identifier: g6Ojnn6euxf8u8aNVst0Dm6HpouW63IvjxDJe9zgonc=
Subject key identifier: FB:A1:77:5E:A8:DC:E3:34:2C:47:37:BC:87:B1:19:DD:DF:DE:CD:0E
Certificate issuer: /CN=8af7f32d33f6646779a51fb23201c6442d1451ca
Certificate serial: 018B476D991F25E71242279D209EA267C325
Authority key identifier: 8A:F7:F3:2D:33:F6:64:67:79:A5:1F:B2:32:01:C6:44:2D:14:51:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivfzLTP2ZGd5pR-yMgHGRC0UUco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/1-6F3Xqjc4zQsRze8h7EZ3d_ezQ4.roa
Signing time: Thu 19 Oct 2023 10:14:06 +0000
ROA not before: Thu 19 Oct 2023 10:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6730
IP address blocks: 195.242.140.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:47:6d:99:1f:25:e7:12:42:27:9d:20:9e:a2:67:c3:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8af7f32d33f6646779a51fb23201c6442d1451ca
Validity
Not Before: Oct 19 10:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fba1775ea8dce3342c4737bc87b119dddfdecd0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c8:3b:95:25:68:b9:61:72:96:e4:c0:3d:72:
92:42:84:46:30:e3:a0:80:0e:29:fd:26:3a:cd:a0:
05:30:5a:ee:2c:f4:7d:01:45:bd:f5:d4:fe:38:8f:
61:83:c9:da:34:9c:33:0e:98:44:07:4d:54:a0:42:
dd:d4:e8:21:67:22:40:4c:bc:18:19:61:b6:88:3a:
65:e1:dc:14:ce:c7:bc:69:4b:ec:e5:54:fe:15:d5:
53:c5:71:10:05:7b:3e:d3:fc:80:eb:84:b6:8b:a7:
b2:c9:0f:57:05:c2:a8:f1:89:b1:d0:69:da:f0:d6:
a3:0a:9f:df:98:e2:61:e0:86:05:7a:60:48:e7:cb:
6b:89:da:7a:09:3d:bb:c8:42:0d:ce:a8:8c:67:76:
73:79:a3:4a:e9:f2:ff:b7:bf:ae:94:9a:6f:71:5d:
ff:ca:d0:17:db:f3:5e:95:23:90:85:58:a7:fd:e7:
0e:02:9a:b2:11:7c:58:f8:cf:81:3b:32:86:ad:d9:
3c:70:46:4e:5a:4b:d0:ce:f5:9c:f6:04:15:e4:f3:
05:42:38:70:e2:9c:81:6b:60:a2:b7:56:70:db:63:
30:5c:67:3c:a8:0d:8a:e2:2f:eb:cc:44:cb:2e:59:
3a:b5:b1:55:3a:1e:b8:01:3d:8b:48:76:e8:5a:9b:
5a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A1:77:5E:A8:DC:E3:34:2C:47:37:BC:87:B1:19:DD:DF:DE:CD:0E
X509v3 Authority Key Identifier:
keyid:8A:F7:F3:2D:33:F6:64:67:79:A5:1F:B2:32:01:C6:44:2D:14:51:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivfzLTP2ZGd5pR-yMgHGRC0UUco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/1-6F3Xqjc4zQsRze8h7EZ3d_ezQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.140.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:c3:05:ac:b7:db:40:64:fb:d5:57:9e:d1:8d:69:d9:e1:19:
3b:a3:29:a5:c9:7e:55:b4:a2:8f:a3:71:9b:83:63:03:a2:d2:
90:28:11:9a:e2:6c:00:f1:fa:24:73:43:94:36:4c:cd:b0:77:
d9:2a:97:1f:71:de:8d:dd:66:08:ad:da:fa:9b:6f:d8:70:7c:
38:c4:2f:07:e9:eb:81:41:74:38:f3:07:a3:17:16:7f:ae:29:
ff:d4:54:2a:2b:17:f2:be:c6:8b:ba:f1:41:47:b5:a4:3b:12:
6e:03:74:9b:a2:1b:bf:4a:07:9d:0a:68:0a:20:05:00:71:a8:
22:aa:85:fc:b2:15:01:4f:1f:e9:56:a4:28:65:54:a5:96:44:
03:93:ad:f0:dd:fd:a6:8a:34:67:24:8f:ed:4e:24:6d:cb:46:
1b:6e:be:b6:94:72:d5:92:2e:77:20:f7:b3:97:d2:13:85:03:
50:41:1d:9c:c5:3b:f2:d4:81:64:5b:62:f4:97:61:2e:28:1c:
83:ef:7b:77:6f:4e:33:d4:8f:ba:3d:b1:53:c8:a2:89:bb:b1:
ad:9c:32:68:8d:9e:70:9e:91:a8:89:ee:f6:9d:78:63:1b:93:
ee:c1:70:5f:60:07:2f:c3:4b:cc:40:c6:27:97:d7:78:53:5e:
4b:6c:2f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:35 2024 by rpki-client on console-fra.rpki-client.org