Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/9IJbBWUPbc380DvLwkVlt3Fdzpg.roa
File: 9IJbBWUPbc380DvLwkVlt3Fdzpg.roa (raw, json)
Hash identifier: iFXYBa0iWueLNZzovfjmbquOHgEf9qZt72RkGw5y9as=
Subject key identifier: F4:82:5B:05:65:0F:6D:CD:FC:D0:3B:CB:C2:45:65:B7:71:5D:CE:98
Certificate issuer: /CN=97ebf14a8e54f12dd8b245353df683e182a096c5
Certificate serial: 018972BA95855BC3BA7DD4AAF86A45848A30
Authority key identifier: 97:EB:F1:4A:8E:54:F1:2D:D8:B2:45:35:3D:F6:83:E1:82:A0:96:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-vxSo5U8S3YskU1PfaD4YKglsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/9IJbBWUPbc380DvLwkVlt3Fdzpg.roa
Signing time: Thu 20 Jul 2023 09:56:17 +0000
ROA not before: Thu 20 Jul 2023 09:56:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60840
IP address blocks: 195.54.166.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:72:ba:95:85:5b:c3:ba:7d:d4:aa:f8:6a:45:84:8a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ebf14a8e54f12dd8b245353df683e182a096c5
Validity
Not Before: Jul 20 09:56:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4825b05650f6dcdfcd03bcbc24565b7715dce98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:87:cb:ce:62:d5:af:7e:7d:97:50:72:c9:10:
0b:2f:be:df:2c:c4:24:46:22:e2:0e:fe:49:04:35:
64:ba:65:8d:f0:9f:1a:3f:1c:bc:48:ac:9a:89:bb:
f9:b7:a0:b3:e4:53:b3:68:fb:f8:13:a2:c7:be:d2:
25:30:46:2c:07:02:c4:a9:25:e3:16:22:c0:62:18:
20:a6:19:7c:93:a0:a8:aa:cd:79:2d:bc:1e:4c:79:
11:21:ee:4b:51:28:5f:d5:40:de:62:d9:23:b7:bd:
d7:49:da:ba:9e:32:2f:6b:24:8f:f4:03:ed:be:16:
09:0d:e3:cb:8f:25:5d:d6:a0:a5:76:7e:fa:03:eb:
c7:8f:6d:68:1c:28:6c:29:cc:3c:bd:20:46:ef:08:
c2:88:9c:01:ce:b2:df:35:25:2d:12:85:ff:f6:d6:
ec:75:0e:15:fb:48:06:ff:e7:88:8e:71:97:ee:e1:
31:c0:37:a5:f6:9f:6f:b8:be:3d:5c:f9:85:d6:c6:
64:ff:c3:2a:3f:06:a8:5c:c5:f1:29:b4:52:9f:8e:
e4:db:9e:3e:a6:79:85:98:90:d2:2d:c8:ab:cb:79:
50:b3:82:b5:8f:6c:18:3d:a5:4b:8b:28:51:a3:11:
fd:d4:8c:4b:a2:c1:06:b7:1c:34:65:cb:09:af:dc:
00:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:82:5B:05:65:0F:6D:CD:FC:D0:3B:CB:C2:45:65:B7:71:5D:CE:98
X509v3 Authority Key Identifier:
keyid:97:EB:F1:4A:8E:54:F1:2D:D8:B2:45:35:3D:F6:83:E1:82:A0:96:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-vxSo5U8S3YskU1PfaD4YKglsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/9IJbBWUPbc380DvLwkVlt3Fdzpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.54.166.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:ed:d9:e2:31:58:f6:db:f8:12:c8:6f:d5:f2:4a:7b:72:54:
c6:99:5e:89:52:65:c5:b5:99:5a:94:ad:fb:b5:b3:5b:37:fc:
1b:18:fe:f3:61:d3:cd:ea:e4:81:a1:e3:5c:3d:20:7e:6b:1f:
14:c7:c9:ae:ad:2e:96:ac:ef:ff:ae:b4:97:a1:ba:fa:b1:28:
30:92:23:c1:dc:ed:a0:95:f3:4a:9a:8d:c3:96:32:06:2e:50:
18:5f:68:f0:4e:2d:09:56:b6:a8:8b:36:30:67:a7:c8:a2:a0:
63:80:fe:a2:75:09:b5:77:fc:f4:d8:a1:e7:35:c4:51:0f:1f:
34:3a:9a:70:c8:3d:f8:31:a4:1b:dc:5c:e4:b2:86:af:8c:65:
63:f1:3c:cc:5a:84:e3:07:f2:7f:67:71:46:f9:9c:bf:1d:f8:
f2:13:fc:68:8e:d4:8d:db:ea:d6:31:80:1d:dc:ba:d9:e7:cf:
0b:c6:80:bc:58:5f:fc:70:2b:d7:4b:5b:61:69:04:13:47:06:
c0:3b:22:be:64:a3:ef:1e:31:6b:b5:30:9e:45:b8:73:a6:3b:
87:23:a2:8e:76:a8:05:c0:45:b6:3f:d3:7c:c6:1f:91:96:e2:
36:0f:26:3a:5d:df:3a:1f:2d:3f:87:37:0e:10:c8:21:83:a4:
70:57:b0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 21 12:01:14 2023 by rpki-client on console-ams.rpki-client.org