Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/bRm6Yp6LAF87ky3ujdw92SaH57E.roa
File: bRm6Yp6LAF87ky3ujdw92SaH57E.roa (raw, json)
Hash identifier: G9xZc1JtkEKrYMEujPuxiCRHCgZnnaHzUm3hxjSGZfY=
Subject key identifier: 6D:19:BA:62:9E:8B:00:5F:3B:93:2D:EE:8D:DC:3D:D9:26:87:E7:B1
Certificate issuer: /CN=94846741139263388d984db1e97e031669c6486e
Certificate serial: 018C0A5B8F011238F654B75F295CBCF1FF84
Authority key identifier: 94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/bRm6Yp6LAF87ky3ujdw92SaH57E.roa
Signing time: Sun 26 Nov 2023 06:40:21 +0000
ROA not before: Sun 26 Nov 2023 06:40:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209178
IP address blocks: 195.190.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0a:5b:8f:01:12:38:f6:54:b7:5f:29:5c:bc:f1:ff:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94846741139263388d984db1e97e031669c6486e
Validity
Not Before: Nov 26 06:40:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d19ba629e8b005f3b932dee8ddc3dd92687e7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:90:43:bb:38:11:0d:c4:f3:3d:3d:92:e7:b1:
f9:97:66:41:10:e8:42:67:04:40:0f:c3:7a:5b:07:
d4:0e:94:47:68:e4:84:24:78:56:60:b1:a1:45:da:
46:88:4e:ea:f4:1d:34:8d:16:ba:99:14:7b:1f:cd:
1e:53:2e:40:9c:58:de:d9:d7:55:fe:57:0b:89:46:
57:68:cc:2d:48:7b:59:c2:26:cd:6c:97:c4:b4:24:
9b:8f:f9:46:54:df:15:62:ed:98:7c:bc:3e:50:1b:
6f:1f:43:21:0f:f6:89:ed:e6:ec:20:3e:25:6d:30:
ef:2b:59:ec:47:ef:21:d4:cb:ce:07:08:b7:ef:59:
f7:09:68:8c:f5:a3:59:eb:97:06:d9:89:7c:80:41:
59:cd:78:d9:31:4b:93:86:4e:5f:4d:d5:36:0c:a5:
ca:16:a3:b7:ae:99:d6:c6:37:4e:d9:0d:f0:38:8f:
2e:81:16:22:03:21:44:aa:99:a3:15:39:cc:ef:91:
16:db:b3:f6:10:b1:74:0a:20:19:c0:39:ee:4f:0d:
9d:09:51:ae:dd:0d:4c:b6:a9:5f:0f:e6:e3:ea:06:
38:ae:31:f2:9f:55:eb:8f:d7:25:52:e3:fb:ec:a3:
f5:96:34:78:59:8b:9a:12:02:96:f8:10:ca:08:07:
3c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:19:BA:62:9E:8B:00:5F:3B:93:2D:EE:8D:DC:3D:D9:26:87:E7:B1
X509v3 Authority Key Identifier:
keyid:94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/bRm6Yp6LAF87ky3ujdw92SaH57E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.139.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:c6:5a:ad:94:0f:68:5e:e7:c2:07:62:6b:87:c8:69:c2:36:
82:e8:84:1b:58:15:b8:b8:62:11:e6:83:71:10:76:c6:51:af:
39:67:08:cf:80:cb:70:3c:09:5e:7e:d7:d5:77:b2:08:84:8c:
05:c0:8d:a8:26:19:33:ef:1d:b6:59:0a:44:71:9e:81:47:4d:
c4:30:a4:7e:58:64:11:ec:4d:36:c5:ce:34:54:3b:c7:94:42:
21:6d:c1:c2:fa:f8:46:6d:45:35:e8:b2:60:93:5b:a3:d4:55:
3d:55:ef:56:c4:da:4c:10:de:b8:25:89:34:96:b7:a6:21:e7:
8e:31:aa:5c:00:34:50:c9:71:51:eb:d6:6c:a1:75:89:b5:c5:
96:46:bc:e1:96:ff:bf:de:ec:c6:55:2e:fd:9e:a3:a4:a8:fe:
d3:e5:cf:01:b3:74:b0:b2:29:50:1a:6e:8c:a0:e2:d3:7d:1b:
f1:a5:64:02:77:af:a2:9f:25:d3:98:15:1b:be:88:6f:f2:72:
19:19:07:88:ff:81:ce:60:d7:f0:6d:a0:bf:47:53:94:d5:46:
02:8b:56:9c:07:26:c0:0c:1d:e8:4d:6b:2d:89:fe:cd:29:f1:
42:c9:90:0e:a3:dd:d1:e7:1a:08:86:e1:15:1f:cf:ca:09:0d:
90:4f:38:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:05 2024 by rpki-client on console-ams.rpki-client.org