Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/R1FAloNkGLOfukt4Ebr0maMFT9U.roa
File: R1FAloNkGLOfukt4Ebr0maMFT9U.roa (raw, json)
Hash identifier: hgrchOcFTJn0M88DmYX0jNNTFBPjEQmFvTUXuikDnCw=
Subject key identifier: 47:51:40:96:83:64:18:B3:9F:BA:4B:78:11:BA:F4:99:A3:05:4F:D5
Certificate issuer: /CN=88652fe652966d728a527aee6e43c485c6939f45
Certificate serial: 01857315D0BAE786B6C8C67AEB8352A0834C
Authority key identifier: 88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/R1FAloNkGLOfukt4Ebr0maMFT9U.roa
Signing time: Mon 02 Jan 2023 15:24:47 +0000
ROA not before: Mon 02 Jan 2023 15:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29663
IP address blocks: 195.149.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:d0:ba:e7:86:b6:c8:c6:7a:eb:83:52:a0:83:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88652fe652966d728a527aee6e43c485c6939f45
Validity
Not Before: Jan 2 15:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47514096836418b39fba4b7811baf499a3054fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:df:ba:12:2b:07:a9:6a:ae:43:f0:27:83:
bf:eb:9a:35:41:15:e4:8b:2f:52:64:8e:a6:48:7f:
96:04:ee:1f:cc:d2:11:f1:89:a6:91:45:0e:95:b3:
02:9d:da:9d:59:11:17:45:7d:11:34:47:20:4b:10:
81:5b:89:4b:15:62:7b:be:87:76:17:db:42:65:7e:
c1:2d:26:5e:34:82:7e:65:0b:f5:79:7a:d2:89:19:
85:48:60:63:d0:76:27:bc:0b:ef:5e:2b:a0:d9:9f:
a0:b3:b5:a8:e0:ad:db:70:c5:dd:16:de:95:2b:d7:
dd:3b:00:61:5a:60:47:fb:d7:45:8f:02:c3:10:b2:
af:5a:8f:79:01:3c:5a:b2:67:3e:c2:d4:26:fa:d5:
29:70:f6:62:86:3c:e5:b2:35:eb:70:13:ab:6e:fe:
73:ad:79:8b:fa:f0:19:3c:ca:53:44:a1:d0:32:c7:
71:bc:9e:d3:00:8c:cd:9f:96:7a:e9:f3:f2:9f:11:
c0:4c:9e:14:96:19:5f:bb:2f:a0:04:d2:94:6a:67:
d8:cb:81:4a:dc:c3:7b:15:fa:6e:e0:03:7b:c1:b9:
c6:ab:a7:98:97:4d:7d:94:ff:40:59:5a:9d:d2:7c:
aa:7e:3c:0e:10:38:05:00:c3:8b:48:26:65:d6:b3:
08:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:51:40:96:83:64:18:B3:9F:BA:4B:78:11:BA:F4:99:A3:05:4F:D5
X509v3 Authority Key Identifier:
keyid:88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/R1FAloNkGLOfukt4Ebr0maMFT9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.112.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:10:9e:a9:89:3f:a0:07:03:d2:da:3f:e3:db:14:23:50:31:
1e:65:92:ec:6a:8f:70:ee:93:2a:8a:c7:4c:2f:0f:51:fd:fd:
c1:24:81:22:54:4f:6c:85:e4:05:1e:a8:a9:f1:b7:38:52:0e:
eb:e9:a5:60:f2:a8:da:d8:94:0d:a8:60:e9:6b:6d:28:c7:32:
d4:94:09:43:7b:fe:0b:ee:df:d0:e4:0e:91:85:2e:31:2a:5b:
3a:31:02:ad:b9:13:a2:3a:af:08:d9:05:6f:5a:29:b6:90:5b:
6d:2a:f1:36:bf:d0:32:6a:f9:d9:6f:47:0c:bb:93:dc:34:d5:
e1:f0:76:4c:5b:df:41:94:3c:be:aa:31:41:01:b5:b0:ec:64:
91:13:9d:7a:a6:74:5f:68:95:e4:34:df:18:97:bb:9d:41:c6:
2d:7d:1a:e4:a8:87:b2:ff:67:5a:98:b1:17:f0:75:26:d9:c4:
95:fd:c9:23:c9:36:63:0d:27:e8:7b:a8:c3:c4:27:b7:06:c4:
73:a6:89:e6:ac:8e:78:0f:54:a2:96:c4:7b:b9:71:a5:bd:f3:
6b:46:74:13:b5:ee:35:a2:27:38:cc:06:11:7c:fe:27:b3:19:
1f:ff:b4:fd:9d:b0:cc:c4:d0:66:c0:6c:0c:88:e9:3c:eb:ba:
ae:72:7b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:44 2024 by rpki-client on console-fra.rpki-client.org