Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/pHdoBWN2dv14QAnUEbGmtsesduQ.roa
File: pHdoBWN2dv14QAnUEbGmtsesduQ.roa (raw, json)
Hash identifier: 5t05tfJsT7nCRfntA7QZpXWgqv5Da/qqeTjQskGo6Gg=
Subject key identifier: A4:77:68:05:63:76:76:FD:78:40:09:D4:11:B1:A6:B6:C7:AC:76:E4
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018626746D9E3F2627D838EA80FB58B2C055
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/pHdoBWN2dv14QAnUEbGmtsesduQ.roa
Signing time: Mon 06 Feb 2023 11:20:09 +0000
ROA not before: Mon 06 Feb 2023 11:20:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 195.178.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Feb 2023 16:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:26:74:6d:9e:3f:26:27:d8:38:ea:80:fb:58:b2:c0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Feb 6 11:20:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4776805637676fd784009d411b1a6b6c7ac76e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:08:54:9d:bd:36:84:2b:70:5e:04:52:b5:98:
15:af:41:a0:5c:4e:15:72:a8:00:65:ad:c2:79:7e:
fc:0f:94:71:ca:75:c0:18:7c:58:fe:a9:e6:37:21:
15:11:68:53:25:ec:5d:d8:95:c8:1f:b0:08:04:d9:
aa:5d:52:73:9d:6e:e0:99:cb:77:4f:a1:f9:20:35:
9c:8b:9e:e8:86:d4:b6:cc:a9:ab:4b:fd:46:84:8f:
29:12:37:5e:96:7e:7f:7e:09:47:db:8a:35:20:54:
63:a8:77:92:76:c3:62:7c:fe:32:84:36:57:70:da:
65:2d:76:04:d8:f8:00:8f:ca:30:f5:fb:f8:b0:36:
75:90:bb:c7:be:7d:6d:62:25:5f:5c:9a:d0:56:95:
aa:fc:39:69:90:10:6c:91:90:ec:e5:0c:87:0e:01:
ce:ea:f1:4d:e5:14:51:2a:01:5a:72:44:7e:db:b0:
55:b5:bb:92:ae:7a:ac:95:aa:21:be:56:2f:5b:ad:
57:9d:b7:0c:ac:98:04:d6:0d:b9:3b:a9:c9:f9:ea:
a0:d0:01:ec:6a:59:41:aa:c4:67:c8:d7:c7:1c:50:
18:58:04:69:fb:5c:a9:49:e7:d9:f6:f6:14:be:ef:
0a:65:df:f8:83:87:08:a5:b9:11:01:e5:b7:6a:a9:
3e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:77:68:05:63:76:76:FD:78:40:09:D4:11:B1:A6:B6:C7:AC:76:E4
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/pHdoBWN2dv14QAnUEbGmtsesduQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.147.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:08:a1:9d:80:31:5f:c6:5b:b2:63:0d:19:be:9d:30:8a:3d:
84:25:06:54:fe:fd:b6:81:4d:fe:f8:8f:58:d1:1e:c9:8d:3c:
9b:ec:71:a5:92:81:7c:45:e7:3a:0c:95:3f:85:02:ab:59:e7:
28:4c:da:fe:b9:10:79:79:e6:7f:98:c7:0e:7b:0b:68:96:b9:
3a:b4:31:22:b6:b7:79:c6:87:0e:96:28:89:2a:46:5b:2e:37:
d3:90:86:df:bb:e8:0a:af:f0:b5:4a:6c:c1:e0:3d:f2:bc:c5:
e2:c2:0f:d6:f2:48:5f:e8:94:12:57:2b:92:65:08:a0:ab:4c:
5b:86:c9:43:10:a2:85:7a:f8:64:8d:3e:f9:d1:ce:0c:31:c9:
40:eb:d9:cf:8f:df:2e:a0:11:cf:a1:5d:33:85:62:1d:a2:c9:
2c:68:60:4d:a7:1a:a3:42:b1:98:6a:45:78:ec:ae:32:6b:f6:
80:3b:86:4d:cb:b3:f0:bc:fd:c7:41:7b:a1:3c:14:78:6c:db:
e6:03:72:8b:01:2f:31:ba:75:55:33:3e:6b:9e:21:df:08:52:
d9:30:b7:00:c2:c5:07:a9:e4:0a:66:3c:22:8d:5f:61:5a:b8:
b5:f0:92:fb:52:85:e2:5a:02:95:8d:50:40:e7:50:4b:61:4f:
ff:82:12:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:43 2024 by rpki-client on console-fra.rpki-client.org