Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Ib0YOTS1u_7FjXi7H5V5JqbFpUw.roa
File: Ib0YOTS1u_7FjXi7H5V5JqbFpUw.roa (raw, json)
Hash identifier: Nd1ASFyZiT1M5CNxfFOcBBdofVwfytyc+teqd3MhQ6Y=
Subject key identifier: 21:BD:18:39:34:B5:BB:FE:C5:8D:78:BB:1F:95:79:26:A6:C5:A5:4C
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018687EFF4B69C40DC105033CB00EB14080B
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Ib0YOTS1u_7FjXi7H5V5JqbFpUw.roa
Signing time: Sat 25 Feb 2023 09:38:15 +0000
ROA not before: Sat 25 Feb 2023 09:38:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 195.178.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 May 2023 10:18:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:87:ef:f4:b6:9c:40:dc:10:50:33:cb:00:eb:14:08:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Feb 25 09:38:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21bd183934b5bbfec58d78bb1f957926a6c5a54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9b:c3:2e:e8:fe:4a:cc:ba:bb:a8:57:e6:3e:
c4:3b:ac:79:c2:11:7b:1b:cc:92:e5:e1:5b:3d:4f:
06:3b:d0:d1:b7:ed:3b:f1:fe:dd:98:fa:81:37:66:
99:4f:a0:d6:79:bc:25:8d:c1:3d:a8:43:43:c4:ca:
bc:0b:24:3b:d3:3b:d7:92:ea:0c:87:02:1b:9c:4a:
9e:17:7f:45:9f:3e:18:00:12:b6:1c:a0:af:67:02:
f0:73:15:a1:8a:72:22:b9:94:9f:ff:e7:0d:45:ed:
ab:a6:c1:c0:35:42:58:21:34:42:f7:6c:65:77:e9:
6d:f4:e3:d7:61:9b:ba:ff:d6:32:1b:bd:04:b6:6b:
db:a9:ac:78:37:49:31:59:2e:da:42:4e:f7:9c:db:
0b:59:5b:38:09:49:48:45:78:7a:54:d2:19:5b:53:
6e:a4:95:06:65:59:30:68:fc:b1:56:5c:1c:3e:f3:
f4:15:0c:c9:38:d1:38:ae:37:26:27:99:3a:ea:b4:
e4:74:a2:28:0d:9b:ba:3e:02:52:d3:35:e5:e6:d7:
05:26:25:7b:3d:a7:e2:e0:42:cf:24:6f:7f:67:65:
ff:0d:48:3f:de:c6:31:1f:7a:e1:44:a7:35:1a:95:
e8:0e:03:55:45:00:67:a7:c6:b4:43:fc:8a:8c:c9:
84:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BD:18:39:34:B5:BB:FE:C5:8D:78:BB:1F:95:79:26:A6:C5:A5:4C
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Ib0YOTS1u_7FjXi7H5V5JqbFpUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.147.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:9b:b2:c7:b2:64:42:36:53:49:0c:8d:b9:ca:9c:d2:19:cb:
dd:f1:65:0d:02:ef:1a:2c:ca:e7:94:a4:ac:b3:b3:e2:f1:43:
42:99:06:a3:99:6b:e4:58:4d:ca:c6:06:27:00:3e:e2:bb:8e:
21:2a:fe:c1:e8:37:6c:7d:c7:ca:34:09:15:de:23:8d:bd:39:
39:1c:dc:1a:eb:a4:16:49:cc:af:dc:d3:f3:cb:1d:0d:25:89:
89:79:56:7a:09:3c:a5:d2:6b:10:b5:ad:4d:06:ef:1d:7f:bd:
ee:c0:8d:53:76:5e:c8:df:6b:31:e4:44:b9:6a:cb:e8:9c:d0:
75:8e:d9:b0:28:39:68:f5:49:0f:5c:b6:0d:69:66:b8:c3:74:
77:49:0b:d1:b9:38:45:17:86:d0:8d:72:ab:a7:9f:99:8c:96:
41:db:f7:b4:c2:29:50:79:8e:1c:5d:05:cf:de:f5:a1:10:42:
e6:93:c2:77:a4:ac:ca:6b:1b:7e:47:a4:58:fc:ce:ff:1f:c7:
c0:7c:b6:c7:ee:02:d6:d3:f6:01:ef:16:5b:a4:40:32:a7:19:
95:7e:7d:b2:2d:a0:24:c4:06:bc:53:58:c6:25:9e:0b:28:6f:
b3:bd:ef:e8:bd:15:0f:36:09:4d:d4:ab:40:df:24:7a:a8:20:
06:d5:01:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org