Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/1-JXORWNmUA0c4_IDiqdztI3aHCU.roa
File: 1-JXORWNmUA0c4_IDiqdztI3aHCU.roa (raw, json)
Hash identifier: 9ZJ3pAR+0J3aM5IPv0LMSnY/SHMlt0fHSbCAu7BjZAM=
Subject key identifier: F8:95:CE:45:63:66:50:0D:1C:E3:F2:03:8A:A7:73:B4:8D:DA:1C:25
Certificate issuer: /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Certificate serial: 01882531BFCA50AF31C369DBEC61F50E3311
Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/1-JXORWNmUA0c4_IDiqdztI3aHCU.roa
Signing time: Tue 16 May 2023 15:33:17 +0000
ROA not before: Tue 16 May 2023 15:33:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198584
IP address blocks: 195.62.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Jun 2023 15:24:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:25:31:bf:ca:50:af:31:c3:69:db:ec:61:f5:0e:33:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Validity
Not Before: May 16 15:33:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f895ce456366500d1ce3f2038aa773b48dda1c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f5:9a:1f:6d:5d:b4:02:f8:44:39:44:92:cc:
79:a8:e3:97:d8:b5:6d:db:6f:fc:e6:0c:f9:6a:07:
08:ea:f0:dd:ce:f9:f1:48:c6:58:1d:3c:58:80:49:
5f:74:90:77:b1:87:d2:14:1b:f8:0d:6e:aa:4c:f1:
fa:f6:34:ab:50:05:ae:fa:4c:f3:e5:01:ca:5a:97:
34:be:53:02:06:4e:03:40:e5:95:67:22:9b:f5:e7:
ae:3d:e1:73:3c:c6:b8:e3:d9:a7:d3:85:81:b4:d0:
e6:56:a6:0b:96:d3:67:7f:ba:b5:09:c0:e7:dd:53:
9f:12:f3:d8:26:f3:f0:24:a5:46:cc:21:4f:13:6d:
d1:a6:ef:eb:13:98:39:0a:47:44:61:15:4c:43:39:
89:8f:e3:18:9c:84:95:a9:bf:6d:33:b1:d6:32:26:
06:fa:39:79:0a:d8:9b:47:d6:e0:94:aa:2c:57:ef:
cc:b2:c5:1b:17:f9:32:44:df:3f:a5:71:c2:e0:05:
2d:8a:23:f9:6e:d6:f9:a4:f3:80:4a:0d:9a:b7:de:
21:ee:f3:a5:b8:a9:53:b3:ff:24:6a:84:79:db:6d:
08:3b:25:2d:09:62:3a:48:4f:f2:52:94:80:7b:66:
78:81:b9:11:75:dc:1e:53:a0:4e:e5:21:5d:c4:c3:
1b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:95:CE:45:63:66:50:0D:1C:E3:F2:03:8A:A7:73:B4:8D:DA:1C:25
X509v3 Authority Key Identifier:
keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/1-JXORWNmUA0c4_IDiqdztI3aHCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.62.32.0/24
Signature Algorithm: sha256WithRSAEncryption
43:08:9e:12:be:b2:03:a6:3c:cc:03:5d:c6:35:53:fc:70:42:
40:57:12:ee:15:a8:b5:cc:24:48:de:26:38:3e:f2:e8:2c:f1:
77:63:16:74:81:91:98:28:ee:88:bd:c6:3d:94:b1:68:a6:13:
f7:8c:26:7d:b6:d0:09:18:4f:ce:4d:2b:4b:13:50:d5:15:6f:
ce:89:b5:92:61:53:70:9a:1e:da:d9:e6:cc:bf:9e:6d:70:6c:
57:6d:ba:06:5d:af:51:98:c6:99:fa:99:a2:13:7a:51:2e:6f:
f7:8c:28:98:52:3d:24:b2:bd:6f:19:aa:3a:1a:c1:6c:4d:09:
15:4f:fb:51:4c:64:e1:b1:f8:aa:41:f9:5b:74:43:14:bb:e3:
84:f8:29:70:35:fd:59:4f:9c:53:d2:7d:4e:43:cc:db:5b:ad:
0e:56:7d:e8:db:c3:f7:fe:24:8c:3b:3e:1c:cd:98:36:fd:93:
0b:c2:ad:6a:60:bc:ac:19:95:1b:e4:bc:63:08:32:ee:dc:5a:
22:e7:7d:9c:b8:17:d1:34:f0:6c:ae:6d:e4:47:79:a6:e7:13:
f7:d0:b1:c7:c0:d7:40:8c:01:72:d1:5c:d7:52:36:fe:03:fb:
ef:2e:95:82:b5:66:da:6e:b2:50:87:98:28:91:b1:c0:ca:16:
2b:ab:f1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:29 2024 by rpki-client on console-ams.rpki-client.org