Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/2KhFcd6IyzNnMmEnJce4T_kPChM.roa
File: 2KhFcd6IyzNnMmEnJce4T_kPChM.roa (raw, json)
Hash identifier: hUvMm2xxnbjBkUwhMxupDKcYeX8J3Yq8sWuAjRBQ/P4=
Subject key identifier: D8:A8:45:71:DE:88:CB:33:67:32:61:27:25:C7:B8:4F:F9:0F:0A:13
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018570029159E4901FEE6B68E01C02003CC8
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/2KhFcd6IyzNnMmEnJce4T_kPChM.roa
Signing time: Mon 02 Jan 2023 01:04:54 +0000
ROA not before: Mon 02 Jan 2023 01:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142111
IP address blocks: 195.242.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:91:59:e4:90:1f:ee:6b:68:e0:1c:02:00:3c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jan 2 01:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8a84571de88cb336732612725c7b84ff90f0a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:72:a1:23:97:5f:23:8a:1c:07:2f:5f:42:13:
b5:e8:21:45:74:d3:58:74:75:c4:da:95:de:90:48:
30:c2:c1:7b:42:c6:1d:2b:c5:15:ae:58:56:d9:3e:
47:59:80:2b:be:b5:a4:74:08:72:65:28:c7:01:ed:
36:8c:98:b7:d4:2d:17:c6:50:3d:92:45:24:e1:7f:
0e:52:ff:62:61:a1:b8:ac:bf:c0:4f:4c:65:84:9b:
e6:e2:7b:3b:48:d8:73:54:46:24:08:86:d0:52:38:
f8:d6:1e:21:b0:b4:d3:d5:9f:99:3d:b6:a9:17:d1:
d3:28:6c:70:93:6f:9e:41:ca:eb:3d:c7:0e:da:34:
ed:0e:9c:17:da:f5:30:89:c7:93:ae:32:63:bb:ca:
fd:04:65:c5:8f:a2:f9:4f:b1:04:54:86:e8:ba:3f:
4e:50:c7:59:6a:51:2c:ed:6b:36:2a:ec:a4:35:11:
c4:bd:a5:13:d9:e7:d5:5e:70:80:0a:93:6e:58:87:
f7:fa:9c:d9:11:da:0d:5d:32:a3:6d:9e:42:79:47:
6a:45:9c:4e:df:d9:db:dd:c8:ef:bc:e3:34:8b:b8:
6b:d0:af:87:23:35:6b:3e:49:fd:98:d9:07:85:af:
97:39:bc:a6:42:1e:32:69:be:e0:f8:f1:68:9d:b8:
47:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A8:45:71:DE:88:CB:33:67:32:61:27:25:C7:B8:4F:F9:0F:0A:13
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/2KhFcd6IyzNnMmEnJce4T_kPChM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.242.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:26:05:5e:8e:39:fb:f1:40:f9:27:d1:68:e6:79:12:53:d6:
72:43:c2:27:a3:a4:f8:fc:71:b5:fc:d1:6a:0e:4d:3b:36:fa:
7a:14:9f:88:d4:3f:c5:28:46:a8:26:6e:33:c0:f2:ab:ec:a3:
24:0c:f2:ae:b5:a6:cf:8b:dd:dc:b3:6d:64:56:27:77:18:eb:
56:e3:ef:35:0a:90:08:d0:37:ad:59:43:23:74:ec:12:d7:b2:
ec:cc:10:0a:57:99:e0:bc:6e:5e:4c:cd:b3:b7:6a:39:38:cd:
97:0e:b2:87:bc:40:75:53:5a:ac:7a:b3:fd:b1:a7:05:5a:55:
ea:13:48:6d:e6:22:f3:04:57:b8:30:4a:ce:60:eb:c4:97:c5:
fc:cc:dd:dd:bd:1b:18:35:cc:9d:68:40:85:e0:f6:a9:80:8a:
93:cd:21:6a:95:17:a1:e9:4e:f9:d9:d0:19:c4:17:02:42:ac:
05:49:85:ba:e7:e8:b7:c2:f3:98:a3:4b:d1:a5:18:88:7f:ce:
7a:79:ab:d4:f1:ba:8e:fa:b0:e0:46:3b:98:c5:27:ae:48:12:
8a:b9:7b:cc:c5:2e:02:30:bd:2f:0c:4d:b0:53:2e:66:fb:25:
ea:ab:7f:a8:8c:cf:0f:e4:08:7a:25:59:3e:bd:6c:f2:97:e9:
44:65:2f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:55 2024 by rpki-client on console-fra.rpki-client.org