Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/RxdmxZinZQcsmVg3rrm3zOL7VpU.roa
File: RxdmxZinZQcsmVg3rrm3zOL7VpU.roa (raw, json)
Hash identifier: zryIBwRbCE3XU3pMeqWKPB5ovcEaC3ErCVBYKvMRmEk=
Subject key identifier: 47:17:66:C5:98:A7:65:07:2C:99:58:37:AE:B9:B7:CC:E2:FB:56:95
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01856E38CB23D67888E3F606413D9EB9A87D
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/RxdmxZinZQcsmVg3rrm3zOL7VpU.roa
Signing time: Sun 01 Jan 2023 16:44:53 +0000
ROA not before: Sun 01 Jan 2023 16:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51561
IP address blocks: 195.178.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:cb:23:d6:78:88:e3:f6:06:41:3d:9e:b9:a8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 1 16:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=471766c598a765072c995837aeb9b7cce2fb5695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a1:4c:a0:54:33:8b:a2:3d:ea:10:3b:ad:3d:
44:c7:ee:49:ae:f2:96:8b:7f:2e:77:31:fa:56:fd:
51:f0:7a:a4:a9:aa:1f:33:8a:5b:75:b1:2e:5e:b0:
0b:d3:51:99:2b:5a:6b:de:5b:27:50:5b:26:04:c5:
06:6d:ac:bb:3c:ea:9d:cc:47:46:44:dc:cf:95:96:
44:ab:84:66:01:52:76:56:85:16:4d:7a:cf:eb:d6:
da:54:18:74:09:c7:a6:31:6b:6a:ad:dc:af:37:c4:
1b:c9:b2:ed:80:65:42:fc:61:66:86:c4:3d:f1:f2:
54:ca:01:55:2b:a6:b6:59:aa:58:14:f4:2b:b8:84:
59:22:50:4e:f3:9f:4b:5a:e3:95:fb:06:6b:2c:cf:
fd:f4:41:94:a3:c0:b0:e8:5e:fd:44:6d:ed:13:af:
6a:52:30:69:70:c9:fc:17:a0:03:c0:65:21:16:31:
e4:f9:88:f2:99:35:78:5b:04:6f:8d:aa:36:dd:da:
80:2d:b0:03:77:c8:d0:9d:6b:ed:10:8f:3e:6f:0b:
ee:7c:76:ba:f0:0e:90:7a:f1:9f:22:e7:4c:44:a4:
cc:e2:24:41:fd:f9:c1:24:82:5d:46:a8:87:f9:83:
6b:e9:69:a1:22:40:97:d0:81:77:07:e5:d5:d7:5f:
f7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:17:66:C5:98:A7:65:07:2C:99:58:37:AE:B9:B7:CC:E2:FB:56:95
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/RxdmxZinZQcsmVg3rrm3zOL7VpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.156.0/24
Signature Algorithm: sha256WithRSAEncryption
39:c7:86:99:00:26:89:81:0f:60:cb:95:d9:d8:b2:d1:7d:26:
bb:52:57:e4:99:37:f6:fe:53:c8:b3:20:19:1c:58:98:22:49:
d3:ea:b8:dc:03:25:a8:49:f9:77:8c:18:39:47:3e:ff:be:5b:
42:e3:a8:d4:b6:ac:94:0e:34:3c:8d:29:de:6e:48:05:b8:d4:
38:3b:53:18:b3:02:21:a8:54:a4:fb:6c:7c:3f:f3:48:f1:47:
d9:8f:e9:ea:b6:a7:b6:03:b6:b5:70:16:90:66:41:2d:58:55:
2f:7a:ad:8a:75:21:e0:4a:09:d0:24:2c:17:c8:76:58:79:a3:
5e:bf:0d:ac:96:9c:61:15:c2:5d:69:a3:6d:bc:00:54:cc:63:
fa:e3:6f:a1:cd:19:3e:24:8a:9f:83:7e:32:01:ea:43:8d:1c:
7b:c8:db:41:0a:8d:bc:da:e7:48:ce:ec:ba:72:a7:93:0f:7e:
47:5d:ab:10:a6:7f:84:3e:9f:c0:63:d3:b3:75:0a:5a:8c:24:
82:04:79:22:b4:90:b2:dd:b5:3e:ce:94:6d:38:c0:83:f7:96:
f3:e7:c3:96:a6:69:39:b8:54:58:4b:bb:7c:12:f4:b9:66:16:
0e:31:5d:b8:1a:ff:74:e3:04:e9:28:52:a1:3f:3c:32:95:d2:
14:92:40:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org