Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/5kkBKkksQuPwR0DaPop2LMY3AV4.roa
File: 5kkBKkksQuPwR0DaPop2LMY3AV4.roa (raw, json)
Hash identifier: 6Dw8pRC5gf9qW0UKVwjnxUPFJ30hCPjkKDLYr2TWkcA=
Subject key identifier: E6:49:01:2A:49:2C:42:E3:F0:47:40:DA:3E:8A:76:2C:C6:37:01:5E
Certificate issuer: /CN=94846741139263388d984db1e97e031669c6486e
Certificate serial: 018C40276CF006812D2DF90E8F96CB8CFB0D
Authority key identifier: 94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/5kkBKkksQuPwR0DaPop2LMY3AV4.roa
Signing time: Wed 06 Dec 2023 17:22:54 +0000
ROA not before: Wed 06 Dec 2023 17:22:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201691
IP address blocks: 195.190.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:40:27:6c:f0:06:81:2d:2d:f9:0e:8f:96:cb:8c:fb:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94846741139263388d984db1e97e031669c6486e
Validity
Not Before: Dec 6 17:22:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e649012a492c42e3f04740da3e8a762cc637015e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3f:cf:1f:72:8e:af:22:22:d4:9a:cc:7c:9e:
9a:a2:ff:36:47:d3:12:b1:57:14:c2:c6:9a:65:72:
18:68:ea:63:b1:ce:5b:af:06:0c:c7:bd:5d:91:09:
2b:54:cf:7c:7f:99:19:b2:7b:a7:cc:0b:d1:fd:8b:
13:67:96:7e:a7:f2:5b:5c:ea:2b:98:32:d3:a5:ab:
bb:1d:08:e0:c8:d1:9f:b5:1e:eb:c9:c4:da:bd:24:
67:74:33:ca:d2:5f:e3:0d:bb:70:1e:41:5e:12:7e:
42:de:2e:a1:25:e3:30:ca:19:03:7d:d7:0b:e7:ff:
61:a7:ab:12:a7:a7:74:36:71:60:fa:3f:10:49:1b:
e9:7f:29:88:16:06:1f:b0:d9:66:2d:e3:15:26:3c:
7f:2d:34:fb:22:f3:80:31:99:2d:d5:30:08:ff:c7:
65:30:f4:9a:ff:19:5f:15:17:0b:9e:f5:7c:68:62:
08:26:71:45:df:00:b8:d9:24:86:77:73:4a:01:cc:
20:70:08:80:5c:d1:46:ed:76:7d:45:40:17:da:bc:
37:12:d6:bb:fc:83:19:b2:d2:23:13:ec:d7:3d:52:
db:3f:98:7f:61:05:6d:31:10:2f:1e:78:97:bc:24:
16:1e:4e:56:76:70:ce:36:16:91:be:da:d6:2f:f6:
c3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:49:01:2A:49:2C:42:E3:F0:47:40:DA:3E:8A:76:2C:C6:37:01:5E
X509v3 Authority Key Identifier:
keyid:94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/5kkBKkksQuPwR0DaPop2LMY3AV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.130.0/24
Signature Algorithm: sha256WithRSAEncryption
11:3a:da:91:22:06:8a:50:71:40:d9:6e:c3:31:8d:7c:f6:b1:
e0:3b:0a:0f:1b:a1:db:64:5f:37:b2:f5:9e:9b:5e:02:3a:85:
7e:64:4e:79:34:c5:24:96:62:be:17:2a:f2:5c:21:f2:0d:ac:
27:80:9e:74:7c:b9:94:b6:26:f3:95:ed:10:ae:89:99:11:86:
6a:37:11:fa:c0:55:ea:e1:e4:35:33:4d:77:39:a8:a3:3a:19:
49:0a:7c:fe:92:fb:02:96:13:c4:d8:4d:84:48:60:ea:bc:b4:
29:46:08:33:b9:7e:01:ca:4d:db:3c:89:e4:bc:67:18:38:20:
50:e3:e8:9f:b8:17:06:cd:c2:c9:d6:4a:2f:d5:bf:4e:f9:3c:
68:98:bc:00:c3:7e:01:64:92:07:20:2e:09:cb:f6:46:20:0a:
26:71:91:fa:2f:75:cb:7d:45:38:d4:5e:3b:71:a7:0a:15:8c:
6e:e6:b7:39:7a:9a:11:7a:11:07:40:61:dd:b2:17:5b:b3:b0:
24:82:85:a9:d0:70:31:13:26:1b:16:99:92:84:a4:31:70:ec:
d1:ed:00:b3:85:f4:83:2e:4e:16:13:36:0d:4b:31:fe:c7:a4:
fe:84:fa:88:4e:74:53:53:c8:ab:30:fe:48:8c:6a:dd:d5:fe:
b8:9d:cd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:05 2024 by rpki-client on console-ams.rpki-client.org