Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/j5zQSZyRmEKSnDlk-SQLDTC-zXI.roa
File: j5zQSZyRmEKSnDlk-SQLDTC-zXI.roa (raw, json)
Hash identifier: f+AY7S7ypRum++/eqwm1FjX90Va65F4byHZv/QJaedk=
Subject key identifier: 8F:9C:D0:49:9C:91:98:42:92:9C:39:64:F9:24:0B:0D:30:BE:CD:72
Certificate issuer: /CN=6b7d1f1e877c12798274e01334554f899f38eac1
Certificate serial: 01879DCFEB3AD308F7C42971D5621761C728
Authority key identifier: 6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/j5zQSZyRmEKSnDlk-SQLDTC-zXI.roa
Signing time: Thu 20 Apr 2023 08:37:41 +0000
ROA not before: Thu 20 Apr 2023 08:37:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53856
IP address blocks: 195.160.192.0/24 maxlen: 24
195.160.193.0/24 maxlen: 24
194.145.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Sep 2023 13:54:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9d:cf:eb:3a:d3:08:f7:c4:29:71:d5:62:17:61:c7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7d1f1e877c12798274e01334554f899f38eac1
Validity
Not Before: Apr 20 08:37:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f9cd0499c919842929c3964f9240b0d30becd72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:87:78:45:65:5e:b6:37:4a:ad:a8:df:a0:a2:
28:26:89:e5:41:ab:90:63:1e:2e:f2:5b:42:1e:b1:
15:1a:00:e9:f2:94:75:15:38:e3:32:c2:8a:57:a2:
84:5b:e7:78:29:8a:4f:74:cf:54:48:04:43:32:ff:
56:0f:2b:ed:7f:8d:98:38:a3:01:5c:94:61:a3:bb:
fb:e7:47:a2:7f:29:ce:7e:81:99:aa:2a:d4:2c:c0:
ae:d8:d5:4c:ec:ae:ad:d0:ff:10:69:3e:03:b4:9b:
28:ee:a1:b0:11:cc:14:37:d0:db:9f:58:1e:2e:f5:
e8:b1:27:77:7e:67:3e:24:89:e6:59:b3:ee:00:9e:
aa:d7:21:db:5a:8c:fc:9c:3c:9d:0d:9c:61:cc:87:
a5:f6:f8:84:6d:d7:b7:a6:0f:e9:0f:56:85:df:d1:
c9:f4:09:9c:0c:50:89:37:24:75:8d:09:d5:25:23:
9a:7f:4a:e2:a7:7f:33:40:4d:62:fa:ec:e1:27:43:
ef:24:49:13:98:0a:4c:16:2d:1e:01:67:f4:c9:bc:
7f:d0:48:fd:a2:2e:60:64:c8:0d:78:09:25:77:2f:
88:2b:00:df:ca:1c:90:f4:9b:68:60:81:f3:03:ad:
ae:50:a4:65:af:18:b5:63:0a:31:99:2b:d3:c2:70:
4c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9C:D0:49:9C:91:98:42:92:9C:39:64:F9:24:0B:0D:30:BE:CD:72
X509v3 Authority Key Identifier:
keyid:6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/j5zQSZyRmEKSnDlk-SQLDTC-zXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.117.0/24
195.160.192.0/23
Signature Algorithm: sha256WithRSAEncryption
43:f4:80:9e:8b:29:57:7e:6a:55:a2:1e:28:79:51:b4:b7:0f:
b2:d5:d1:11:b9:91:24:5a:1e:b7:d5:b5:aa:cf:7f:a5:b8:49:
bf:22:9b:d1:62:47:bb:b6:28:3a:15:68:97:0d:0e:b9:62:0b:
72:f4:a7:6b:51:66:47:b9:28:1d:41:e0:a4:71:fc:ab:47:e7:
19:2d:82:e1:0f:6c:b7:69:ec:c9:01:d5:0a:2c:58:19:70:28:
07:40:e7:64:c3:61:53:30:27:7e:86:8c:62:f8:6b:c7:75:62:
da:26:3e:5b:19:27:f0:ee:e4:dd:aa:24:57:57:47:de:9b:95:
f6:22:55:67:d2:01:a9:5c:61:af:e0:13:b1:10:b3:3c:67:e1:
ac:0f:b5:49:6b:77:24:a5:39:ea:9e:fc:c0:da:4c:60:2c:34:
85:62:2d:ce:18:03:b8:10:88:a7:ed:10:3a:0d:06:38:4a:27:
9f:b1:a7:ce:69:95:8a:fc:23:68:c8:d0:e2:c8:80:c5:86:e8:
4b:48:56:df:e6:0e:fc:19:43:c9:e0:76:07:b6:62:72:01:08:
3a:24:c7:35:60:fa:cf:e0:25:57:50:df:32:35:37:04:94:f4:
a6:b5:a2:cd:2d:a9:1e:d0:47:84:08:12:86:1e:64:f0:ca:3b:
94:44:53:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:14 2024 by rpki-client on console-ams.rpki-client.org