Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/1-EiOqCgJisC4tiGODs3Uk-ag7no.roa
File: 1-EiOqCgJisC4tiGODs3Uk-ag7no.roa (raw, json)
Hash identifier: Z5FG6iw5ZFPlosM60yGKjVOH7jRdiMLMJJFuMxQAr20=
Subject key identifier: F8:48:8E:A8:28:09:8A:C0:B8:B6:21:8E:0E:CD:D4:93:E6:A0:EE:7A
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01856E38D24F57B1D0FFFEBB90DEAE8DFD41
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/1-EiOqCgJisC4tiGODs3Uk-ag7no.roa
Signing time: Sun 01 Jan 2023 16:44:55 +0000
ROA not before: Sun 01 Jan 2023 16:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209845
IP address blocks: 195.178.148.0/23 maxlen: 24
195.178.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:d2:4f:57:b1:d0:ff:fe:bb:90:de:ae:8d:fd:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 1 16:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8488ea828098ac0b8b6218e0ecdd493e6a0ee7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6b:ff:b6:1e:9b:3e:0b:b3:ff:1c:30:5e:36:
f0:d6:39:54:1a:46:5d:4a:c0:ea:0b:28:ef:ad:06:
b5:31:bb:db:42:f9:ed:23:b4:da:e1:83:e2:15:56:
d2:35:0b:4c:df:3e:2b:3f:65:24:1b:4a:81:16:97:
9b:7d:f2:c3:ac:0f:31:6d:93:d5:f8:1f:dc:08:35:
18:ff:f0:6c:cc:32:9b:10:24:f0:3f:6f:fe:9d:54:
5f:d7:ce:08:65:5d:7b:63:bb:2f:54:43:e3:30:ca:
f8:46:e3:db:1b:83:3b:53:e9:37:72:05:96:36:57:
cd:83:07:9b:f4:65:c0:74:bf:d8:83:2a:4c:65:e8:
90:55:90:cb:ac:f8:92:8c:43:3b:6d:8c:a0:4e:e6:
de:78:06:62:0b:4b:fe:59:ce:b3:8d:dd:82:f7:80:
74:31:4d:ae:e1:34:51:5a:8a:ab:ed:d7:05:f5:f6:
16:25:af:09:e5:4d:e5:17:2b:28:53:1e:9a:5d:af:
98:87:ac:7d:66:4f:9b:37:9e:60:da:dd:91:80:94:
75:e1:94:75:ce:b7:cc:c2:96:c7:5f:d8:47:cb:fe:
5c:57:c2:86:38:22:cb:6e:05:f1:e6:b8:9c:62:67:
af:9d:2b:d2:80:97:14:0c:f4:95:47:a3:4b:9d:c1:
a0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:48:8E:A8:28:09:8A:C0:B8:B6:21:8E:0E:CD:D4:93:E6:A0:EE:7A
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/1-EiOqCgJisC4tiGODs3Uk-ag7no.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.148.0/23
195.178.151.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ce:74:7a:c6:af:be:27:2c:c7:25:f7:f6:1d:77:86:bb:94:
ff:a2:bb:ed:57:1d:84:ce:13:64:da:e9:7a:19:ab:5d:be:80:
c4:c4:2d:46:4c:0c:7f:28:0d:a7:7b:e5:bb:66:c7:20:b5:bd:
56:f8:49:27:eb:4b:c9:dc:12:77:d2:74:b9:ce:bb:c8:2e:1f:
8f:c8:3d:b1:41:2e:57:51:f3:78:69:9f:c5:a4:0a:26:3a:37:
b4:08:0d:dc:00:ae:2e:86:8d:5e:04:96:99:ea:db:54:e5:c8:
3b:6b:ad:15:2a:71:19:d1:74:31:f3:8e:ce:19:e0:d5:c8:ce:
52:0c:e6:e4:fa:2a:49:1d:82:db:8c:4f:37:b3:66:25:10:e0:
c8:73:93:29:8d:69:b4:d9:90:8a:ad:6d:ad:17:6b:52:b0:24:
a1:3f:37:39:c8:0d:6d:bf:46:f6:e6:1c:4d:48:b9:9b:e9:d9:
e2:9c:81:d3:12:e1:fe:06:48:00:c3:8d:40:be:e7:1c:e0:1e:
0e:de:c1:96:fa:c6:bd:80:73:23:cc:42:26:c3:55:67:eb:78:
09:8d:af:00:b1:3a:03:1f:15:b3:79:0d:4b:a1:d9:36:96:25:
eb:84:6b:37:8f:bf:81:dd:6f:d7:0e:8b:9d:ca:a3:35:12:23:
32:6a:c8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org