Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/ArncEC_T_kJMPGAFeRVNNGS67ts.roa
File: ArncEC_T_kJMPGAFeRVNNGS67ts.roa (raw, json)
Hash identifier: ZhwQPrXmtVHx6J0LX8zDskGMh2Qkfr4XMEv0H+JG6Q0=
Subject key identifier: 02:B9:DC:10:2F:D3:FE:42:4C:3C:60:05:79:15:4D:34:64:BA:EE:DB
Certificate issuer: /CN=d010ee78bbd487d39d79cb198085e984f702a208
Certificate serial: 0187571B0A7DF0CAA1E8004ABDF6ECC47852
Authority key identifier: D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/ArncEC_T_kJMPGAFeRVNNGS67ts.roa
Signing time: Thu 06 Apr 2023 15:06:42 +0000
ROA not before: Thu 06 Apr 2023 15:06:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49544
IP address blocks: 195.85.225.0/24 maxlen: 24
2a13:d780::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 06 Apr 2023 15:47:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:57:1b:0a:7d:f0:ca:a1:e8:00:4a:bd:f6:ec:c4:78:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d010ee78bbd487d39d79cb198085e984f702a208
Validity
Not Before: Apr 6 15:06:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02b9dc102fd3fe424c3c600579154d3464baeedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7b:19:88:f0:19:07:96:23:9a:5b:83:af:9f:
47:73:52:68:a6:56:4b:a6:3a:f9:7b:d9:be:41:df:
a0:23:67:c6:6c:4c:31:73:68:6b:44:4d:7d:97:8d:
11:b3:1f:5c:4f:06:6c:9f:b5:b8:c9:36:91:25:62:
eb:d1:18:39:aa:25:5b:d7:e5:08:6e:da:c6:dc:0c:
e3:e4:9e:06:c4:ed:de:7a:0a:7b:ff:ba:fb:2e:06:
86:a8:98:cc:86:46:3f:10:b0:87:57:b4:de:28:7f:
01:11:97:4b:40:13:ff:24:b9:b6:50:4e:ac:44:9c:
cc:23:a6:aa:8f:1b:39:81:3e:b3:53:26:27:d9:e5:
8b:00:95:46:32:4e:26:51:b6:40:69:55:ce:dc:7d:
dd:70:4e:99:48:cb:85:68:d4:f2:77:61:57:cb:cf:
ce:63:3b:2b:ca:49:00:4b:ae:3f:7d:36:95:90:9b:
e8:ce:50:41:a7:c9:09:05:94:45:bb:a2:79:30:c3:
97:4c:08:a7:39:55:86:5f:b4:d6:e6:1a:29:c5:e7:
f9:62:7c:95:03:4d:4c:ca:e2:58:30:ee:88:2d:bf:
2c:6b:7c:ee:16:54:f5:2e:da:97:5f:6b:49:01:35:
56:6c:40:73:af:c7:82:5f:39:52:a8:ad:e7:a1:73:
4a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B9:DC:10:2F:D3:FE:42:4C:3C:60:05:79:15:4D:34:64:BA:EE:DB
X509v3 Authority Key Identifier:
keyid:D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/ArncEC_T_kJMPGAFeRVNNGS67ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.225.0/24
IPv6:
2a13:d780::/29
Signature Algorithm: sha256WithRSAEncryption
6d:58:f0:b1:95:31:21:62:ad:e9:dd:ed:f5:40:7f:3a:4d:90:
b7:95:9a:68:d8:45:d2:35:57:14:c4:61:3d:49:5e:c7:7a:3c:
18:5a:4e:bc:8b:6e:d7:d7:4f:b7:36:e1:30:c3:33:c2:f5:fc:
4b:b6:1b:e4:9b:f0:2f:06:f4:05:72:d9:7f:fe:d5:ef:b3:1a:
7a:31:14:7d:22:60:4c:3a:39:03:83:5b:8a:15:3f:32:e2:53:
8f:06:e5:6d:56:a1:b0:f1:55:b3:ea:9f:60:ad:db:1f:75:8b:
4b:09:e7:fa:17:63:17:72:9f:ea:4c:25:e0:79:04:6f:31:61:
75:17:b5:c9:17:44:2e:98:b5:94:76:09:6a:e6:4c:78:3e:63:
46:c8:84:fb:ee:0f:2f:ec:f6:fe:54:91:1f:62:37:3a:ec:ac:
cf:4f:65:80:56:97:e1:f2:ca:6e:11:a9:81:a2:cb:71:1e:b5:
59:26:8f:fb:32:7c:63:e1:67:10:16:b3:4e:c7:61:63:ca:38:
27:c3:12:7f:dd:8d:c8:61:8f:26:17:51:f7:15:1e:1a:5f:f6:
8b:ec:da:9c:aa:fb:40:61:bb:48:f8:83:11:3f:40:52:ba:38:
ea:a7:9d:8c:8a:4f:66:52:ec:c9:1a:97:a2:38:67:4e:20:3c:
b3:d9:fb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:40 2024 by rpki-client on console-ams.rpki-client.org