Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/7oJ3nvmNd5mr7OdifXUzBDpYrlE.roa
File: 7oJ3nvmNd5mr7OdifXUzBDpYrlE.roa (raw, json)
Hash identifier: 3BFRt92o4SRmHis96IYFXdefhKpp3Og/5xquR9muP7w=
Subject key identifier: EE:82:77:9E:F9:8D:77:99:AB:EC:E7:62:7D:75:33:04:3A:58:AE:51
Certificate issuer: /CN=f56403bc1c874eef09b8a1344155abc3f0575b15
Certificate serial: 01856D13BC20DCE3695947B6E0DC9E85377E
Authority key identifier: F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/7oJ3nvmNd5mr7OdifXUzBDpYrlE.roa
Signing time: Sun 01 Jan 2023 11:24:47 +0000
ROA not before: Sun 01 Jan 2023 11:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8412
IP address blocks: 195.190.131.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:bc:20:dc:e3:69:59:47:b6:e0:dc:9e:85:37:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56403bc1c874eef09b8a1344155abc3f0575b15
Validity
Not Before: Jan 1 11:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee82779ef98d7799abece7627d7533043a58ae51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a2:26:06:3e:20:c1:c9:da:39:4d:ef:14:0e:
71:39:b4:0a:39:d8:2f:73:9b:99:5e:03:01:ab:5a:
4c:25:c0:a3:3a:bd:be:87:75:1f:9a:3c:35:4c:be:
15:69:2f:76:a9:75:e3:36:15:7e:3d:36:b6:02:97:
fa:aa:33:0b:fb:e6:83:4e:91:58:0f:2b:0c:36:bc:
f0:c9:9b:24:4f:8d:77:8b:f1:2d:6d:a5:00:a3:d5:
b5:ea:4f:44:6d:16:82:2a:16:61:61:91:7f:ec:35:
98:c5:87:85:25:73:f7:82:e1:c9:28:92:18:27:a5:
81:39:fa:26:3d:97:a3:93:8f:61:21:b9:d2:2a:3b:
2d:bd:16:34:91:34:c9:5f:8d:55:a7:10:a8:65:02:
3d:9d:40:a8:24:1b:ce:72:94:ab:8c:93:4f:eb:c2:
86:a9:5a:fa:86:f4:5a:54:5b:6a:af:a8:93:82:2a:
49:68:5f:ad:fe:af:04:4e:81:c8:c2:9b:6c:80:a0:
40:3d:d1:5d:c1:a2:7e:78:8a:eb:ea:19:7c:7a:7b:
13:2c:88:7e:3e:48:fe:8f:04:0b:3b:40:b5:99:d5:
69:62:1c:09:69:31:df:6b:73:c4:e8:41:75:b5:f1:
4e:72:18:08:bb:88:61:41:95:2d:eb:21:cd:f3:e4:
ae:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:82:77:9E:F9:8D:77:99:AB:EC:E7:62:7D:75:33:04:3A:58:AE:51
X509v3 Authority Key Identifier:
keyid:F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/7oJ3nvmNd5mr7OdifXUzBDpYrlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.131.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:a9:2d:57:6d:5b:90:db:a4:85:20:fd:26:b2:08:c2:fa:dd:
61:8d:94:39:0c:01:cf:ce:ed:2a:35:40:e8:f0:0f:fc:1e:ca:
0c:2a:4b:cf:05:ec:b2:eb:23:81:93:a6:45:ff:08:01:41:b3:
18:d7:73:34:05:98:ec:7f:41:38:d7:de:10:b0:85:f5:b8:15:
5d:19:6c:56:58:f9:6e:e9:e2:dd:20:d1:ee:69:0a:31:d5:17:
b8:56:86:10:00:44:5a:7f:e6:ca:0f:7d:5a:9d:17:50:ac:db:
83:5d:86:04:06:f3:64:41:e9:5e:89:32:12:89:b5:25:5a:86:
94:08:4d:ba:00:46:5b:62:26:4e:5f:03:c4:57:52:3f:7d:30:
17:81:38:3e:2b:e2:9f:ef:fc:c6:a1:4f:df:a2:dc:d2:dd:ab:
c7:0a:82:a7:81:61:b7:a7:03:3a:be:33:29:56:a9:46:a2:e0:
39:5c:f2:53:90:53:cd:0f:98:3b:74:f0:9a:b4:97:4e:a0:2e:
dc:57:d9:b2:d1:aa:be:d4:f7:31:f3:ef:04:ab:a4:c8:16:99:
9a:37:f4:ef:c4:b8:1a:18:46:61:5c:02:9e:db:5c:48:69:75:
28:76:42:f7:19:4c:0d:3a:5f:5c:28:55:c2:52:44:a4:b2:b0:
86:65:e2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:09 2024 by rpki-client on console-fra.rpki-client.org