Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/holPm3qm1WSIltvqy7FuY-G-bNQ.roa
File: holPm3qm1WSIltvqy7FuY-G-bNQ.roa (raw, json)
Hash identifier: y03S7+6CqI9Oj7W2G6Nqd0b6cMWvDXMa8WiNPzN2GNo=
Subject key identifier: 86:89:4F:9B:7A:A6:D5:64:88:96:DB:EA:CB:B1:6E:63:E1:BE:6C:D4
Certificate issuer: /CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Certificate serial: 01857315F673A8F76A15491E0D2D5DB269CE
Authority key identifier: B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/holPm3qm1WSIltvqy7FuY-G-bNQ.roa
Signing time: Mon 02 Jan 2023 15:24:57 +0000
ROA not before: Mon 02 Jan 2023 15:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198881
IP address blocks: 194.99.96.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:f6:73:a8:f7:6a:15:49:1e:0d:2d:5d:b2:69:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Validity
Not Before: Jan 2 15:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86894f9b7aa6d5648896dbeacbb16e63e1be6cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5e:61:b7:b4:fd:83:0e:ce:7e:aa:ca:b9:8f:
58:92:4b:56:bc:da:44:b0:f0:c8:64:61:6b:01:ba:
ab:ca:56:87:a0:16:0e:6e:f1:2d:a2:eb:d2:94:27:
57:28:40:dc:f7:6f:fe:d0:03:46:ac:f0:c1:f8:19:
61:6d:7f:85:fd:07:12:a6:c0:f8:b2:03:52:c6:c7:
10:11:f5:1c:06:8b:fa:bb:1a:4d:2e:49:e6:9c:f1:
64:56:a6:e8:41:c9:cd:f5:5a:d1:5a:1e:fb:64:d3:
3d:6b:4d:5d:5e:a5:8b:c2:39:23:6f:9b:3e:54:6f:
58:65:3e:79:2b:da:d2:19:57:3c:b6:04:5c:61:04:
5d:37:e8:22:e9:df:29:41:76:e0:7c:3a:b5:d1:94:
a2:7a:bb:e2:07:09:e1:57:3c:cd:37:84:c8:9b:c0:
f9:72:0f:67:34:c1:19:64:bd:91:f9:98:51:16:4f:
a6:94:72:94:eb:cf:0d:03:66:c6:67:23:dd:75:9b:
1c:b0:12:75:e2:b6:bc:8e:be:f9:a8:52:69:b6:0b:
c6:bf:b0:07:aa:fd:b4:c7:b3:cf:cc:5a:20:da:ec:
05:2b:1c:d8:f5:2a:63:d6:ac:82:9d:41:64:cf:32:
d0:3f:59:ea:d9:b4:13:86:aa:59:05:27:a2:f0:55:
55:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:89:4F:9B:7A:A6:D5:64:88:96:DB:EA:CB:B1:6E:63:E1:BE:6C:D4
X509v3 Authority Key Identifier:
keyid:B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/holPm3qm1WSIltvqy7FuY-G-bNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.99.96.0/23
Signature Algorithm: sha256WithRSAEncryption
95:c4:0d:4a:b7:9c:b8:d7:29:b8:58:c3:b5:c0:7d:0b:68:e0:
48:03:50:97:be:b2:82:6f:ef:b9:34:30:ef:c5:cb:4e:51:92:
90:51:12:56:8a:6d:85:a6:16:e0:93:93:7c:42:6d:73:97:ab:
fc:bb:6e:2b:04:66:59:3c:fc:18:68:d1:8d:46:5c:de:86:4f:
13:d1:52:27:57:5a:0a:26:dd:3c:60:4a:7a:f7:9f:ea:44:b8:
40:df:a3:78:ff:4e:33:41:c0:cc:58:0d:21:5f:0c:32:8f:ec:
e1:ba:21:60:ec:de:06:70:e8:be:a1:72:a8:e8:30:75:66:ba:
ff:f1:e9:74:4d:8d:d6:56:21:19:38:db:67:cd:94:1e:50:82:
48:ef:8d:5a:ff:f5:44:59:c0:9e:55:15:5f:2a:e5:8e:fc:70:
f9:32:36:59:3b:9c:85:97:b6:da:b0:ec:3d:ab:e1:12:90:da:
ef:34:33:fc:4c:88:5c:97:36:2e:a2:e5:51:56:b0:d9:46:85:
94:8c:79:80:ff:28:9f:8d:ee:9c:c2:d3:21:eb:79:a6:83:36:
aa:4d:92:a2:01:7b:50:4e:8b:bd:00:4e:6b:56:58:8c:aa:1d:
45:5c:fc:93:b7:cf:70:9a:43:8b:8a:db:6a:39:e2:e0:68:0f:
82:f6:77:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:16 2024 by rpki-client on console-ams.rpki-client.org