Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/wBYlZP11r6lI9HFiJByX-qHmVWg.roa
File: wBYlZP11r6lI9HFiJByX-qHmVWg.roa (raw, json)
Hash identifier: N+SJucOvSUmGeSNnEL4W9JJrmqSdhpXfiZYJYkAa8FQ=
Subject key identifier: C0:16:25:64:FD:75:AF:A9:48:F4:71:62:24:1C:97:FA:A1:E6:55:68
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01880B14ADD7FB7DE582CB8AB7A07987B1E2
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/wBYlZP11r6lI9HFiJByX-qHmVWg.roa
Signing time: Thu 11 May 2023 13:51:24 +0000
ROA not before: Thu 11 May 2023 13:51:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3257
IP address blocks: 195.138.122.0/23 maxlen: 23
195.138.122.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0b:14:ad:d7:fb:7d:e5:82:cb:8a:b7:a0:79:87:b1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: May 11 13:51:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0162564fd75afa948f47162241c97faa1e65568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:34:5c:42:e1:dc:b9:2a:28:0f:e0:62:e5:ec:
60:bf:05:04:be:66:d7:47:fb:93:ab:0a:c7:48:dd:
87:44:f0:6f:78:1f:c9:30:6a:53:c9:9b:b9:43:1c:
28:9f:24:9a:78:01:c4:c5:2b:b3:d3:52:b3:20:cf:
7b:25:1f:18:1c:a5:1b:b0:16:bd:90:af:0b:66:6b:
ab:40:f3:5f:9c:13:d4:58:bb:36:e2:ff:86:de:36:
d5:c9:54:c8:a9:1f:29:fb:0b:41:6b:35:d4:44:c2:
2e:d1:28:05:e1:8b:62:68:b9:89:df:ec:a9:39:fa:
8c:18:5a:f6:26:ac:53:87:3d:73:33:55:41:e2:85:
b8:ac:3c:5e:26:26:52:a3:1d:0c:5b:71:c5:e3:c7:
a0:20:40:07:9e:27:c4:af:cd:29:7a:14:d0:16:91:
45:d9:f9:b7:77:bd:40:e9:b8:54:df:c8:7d:93:8e:
91:8a:60:bc:d8:3a:03:0c:76:72:21:10:4c:65:48:
81:4d:b9:a3:4d:58:73:6a:5f:2a:38:2d:31:a1:b3:
6f:8f:72:c6:be:fd:18:d1:f8:a5:92:d2:f1:ec:12:
58:ed:96:42:bf:06:12:1e:8a:90:b7:85:bd:f0:f1:
b1:97:5c:ba:12:26:43:d6:d8:78:0d:cc:8c:31:6a:
e4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:16:25:64:FD:75:AF:A9:48:F4:71:62:24:1C:97:FA:A1:E6:55:68
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/wBYlZP11r6lI9HFiJByX-qHmVWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.138.122.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:e9:ab:22:4b:61:e1:29:64:49:f3:44:bb:ca:58:a6:56:a1:
dd:6e:07:de:b8:8f:52:79:f6:2a:7e:9b:f9:4f:f6:17:0b:07:
e6:2b:91:cb:54:67:03:ca:4f:df:c2:73:17:15:be:ad:74:1c:
d1:4f:d4:f2:a5:5a:6b:12:42:e4:c5:e9:4f:82:9c:63:4f:0a:
13:0f:07:7e:13:c1:d0:02:76:ce:4a:07:c3:82:8b:ed:64:4b:
8d:80:6e:e9:ba:cc:9d:e5:ad:b6:bb:13:16:d9:81:0d:b7:af:
36:73:27:f9:4e:41:43:56:9f:e8:da:5f:03:3e:81:34:5d:c2:
7c:1c:03:9e:f9:0a:98:96:2c:f7:e7:10:b3:16:fd:06:83:f2:
c3:17:56:22:f4:0b:0b:15:b5:a0:2f:79:fb:bd:c0:2c:e3:80:
82:d5:6b:60:74:e3:14:9f:4b:40:c3:08:8c:9a:47:e1:42:12:
b8:99:b4:20:43:59:42:30:ce:00:28:b1:85:cb:5a:24:f6:66:
0e:a4:a2:3b:d7:9f:b4:54:c3:57:2f:76:0f:b2:9c:44:37:6a:
2d:67:54:e4:3d:f1:cd:90:5e:0c:bd:96:bb:ec:8f:d3:7a:18:
2f:02:27:db:d2:e0:cb:ed:46:b6:a6:57:ee:9d:d1:8f:0d:e7:
21:14:34:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-fra.rpki-client.org