Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/0WXnTbIuP0GKKJEFRe2rP7pidjg.roa
File: 0WXnTbIuP0GKKJEFRe2rP7pidjg.roa (raw, json)
Hash identifier: OmrnTUJGe2qxC7n3EGR7erE+XliFklggI6PMfdZ6uiw=
Subject key identifier: D1:65:E7:4D:B2:2E:3F:41:8A:28:91:05:45:ED:AB:3F:BA:62:76:38
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 018C3AB7D4FCD187D9EB4295888082CC900A
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/0WXnTbIuP0GKKJEFRe2rP7pidjg.roa
Signing time: Tue 05 Dec 2023 16:02:55 +0000
ROA not before: Tue 05 Dec 2023 16:02:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44386
IP address blocks: 195.34.20.0/23 maxlen: 23
195.34.20.0/24 maxlen: 24
195.34.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3a:b7:d4:fc:d1:87:d9:eb:42:95:88:80:82:cc:90:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Dec 5 16:02:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d165e74db22e3f418a28910545edab3fba627638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b3:35:0c:d4:60:02:b5:38:b9:7b:7f:4f:ac:
20:e0:d6:9f:38:74:d8:04:1d:08:9e:18:df:18:08:
31:4d:8f:cb:0b:5a:f0:9d:2d:f9:4b:ed:ba:3f:cc:
55:ba:82:5e:eb:d5:19:5c:ca:24:29:33:d1:bf:8e:
04:74:a8:3b:ac:d6:1b:d7:90:68:55:64:f6:c0:22:
ff:1b:79:51:c6:15:49:4c:88:a8:f1:e9:a6:b1:2a:
85:40:ae:04:80:53:4e:a2:a6:6f:71:ae:b9:2e:67:
d9:2f:c7:18:aa:3f:d4:48:a9:eb:4c:1c:52:7d:83:
dd:5d:d3:41:29:31:9b:78:cd:a0:a1:da:75:7b:3d:
4d:f6:11:2b:9a:5b:9e:50:29:e9:7e:50:a6:92:b0:
87:1b:66:03:77:c2:39:a0:62:e8:82:63:b4:8e:e6:
49:07:fe:f5:9b:0b:a8:0e:58:00:15:db:c2:b9:af:
57:52:e8:82:99:14:2c:c2:e6:82:fa:5f:a0:84:1b:
9e:25:0d:13:19:2a:a0:9b:5c:f9:ad:b3:95:86:ed:
75:0f:25:9b:22:b5:79:dc:42:6e:fd:21:d7:9b:d7:
96:43:c3:3b:44:61:b6:51:2a:ce:a9:36:fa:e6:df:
89:d5:d1:54:ff:b8:78:dd:7f:5c:1f:06:85:d3:f5:
2a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:65:E7:4D:B2:2E:3F:41:8A:28:91:05:45:ED:AB:3F:BA:62:76:38
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/0WXnTbIuP0GKKJEFRe2rP7pidjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.34.20.0/23
Signature Algorithm: sha256WithRSAEncryption
47:80:0b:9c:50:6f:ba:06:3a:c3:19:ec:d4:e5:4b:ea:bf:a9:
35:0e:3a:0e:2d:90:2f:5d:20:73:64:82:97:65:d1:16:64:23:
72:fb:e9:33:22:8d:23:be:e5:22:1c:d0:4c:39:d1:38:c9:e8:
c8:55:4c:a3:a5:ce:54:66:53:78:55:c3:35:bf:ef:15:82:1d:
3d:55:66:af:7c:ab:bf:0a:f5:09:48:b8:55:86:0e:3d:e1:5c:
24:b6:95:f7:cd:11:b8:9e:19:72:24:13:78:1a:01:53:62:15:
70:bd:5a:58:94:73:28:f8:c9:58:5c:e7:b9:10:95:fc:09:b8:
f9:03:ca:23:60:3f:40:6c:02:82:26:1f:26:be:f1:3a:02:86:
6e:24:a4:e0:02:e9:f4:7e:50:dd:5e:ad:e8:f3:2c:b4:54:06:
df:f8:fe:2e:37:50:38:19:ff:d5:f6:7e:d0:ee:ea:50:84:6b:
5d:3b:11:f0:8c:c8:45:b6:47:26:ff:48:a8:93:40:f7:a9:65:
27:84:fe:16:3b:ce:e0:85:be:c9:42:50:be:0c:0e:2c:67:49:
cc:31:81:0d:40:a9:1e:57:95:55:5a:54:8a:0d:a1:7e:46:ee:
97:5d:0b:72:40:df:09:3b:fd:13:e6:05:7f:79:0c:41:8b:ec:
37:aa:2e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:30 2024 by rpki-client on console-ams.rpki-client.org