Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/m2C-SBw5mqn5CFf_rnhisWswoMM.roa
File: m2C-SBw5mqn5CFf_rnhisWswoMM.roa (raw, json)
Hash identifier: n/m1EBR//2902OMFb4MHyHdPrs9tW2cEN1G/n46XllI=
Subject key identifier: 9B:60:BE:48:1C:39:9A:A9:F9:08:57:FF:AE:78:62:B1:6B:30:A0:C3
Certificate issuer: /CN=807709e7b0efba127025c83e5d3194c71ba428c3
Certificate serial: 018CC492974B5138751CFA7369A0307DF199
Authority key identifier: 80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/m2C-SBw5mqn5CFf_rnhisWswoMM.roa
Signing time: Mon 01 Jan 2024 10:29:50 +0000
ROA not before: Mon 01 Jan 2024 10:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48806
IP address blocks: 195.238.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 May 2024 14:35:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:97:4b:51:38:75:1c:fa:73:69:a0:30:7d:f1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=807709e7b0efba127025c83e5d3194c71ba428c3
Validity
Not Before: Jan 1 10:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b60be481c399aa9f90857ffae7862b16b30a0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:df:ef:d3:ea:3c:de:df:40:de:48:da:87:6f:
9d:29:c3:07:17:e3:95:ab:d9:85:8b:74:2a:84:7c:
35:69:52:de:c9:fb:f6:90:2d:09:ca:c8:e9:d6:5d:
e4:6d:d8:91:b1:df:c3:1d:85:88:d8:55:6a:c5:76:
76:63:64:08:ae:de:15:31:e3:ab:31:8b:2b:31:8a:
f9:09:ec:0e:78:4c:e6:c7:f2:e4:de:15:5a:43:6e:
25:66:31:83:fa:9b:ba:60:d6:8f:dc:4e:fd:34:9d:
83:25:b5:82:e6:39:d6:c8:5d:10:44:fd:ff:25:ad:
4e:a0:f3:8f:7d:be:d2:b9:dd:e5:42:83:46:4d:73:
4e:88:c7:ec:67:bd:8e:be:a4:be:c8:2e:45:1d:8b:
25:8a:82:30:4c:fd:8f:24:6f:3c:1b:11:07:9e:72:
66:35:63:2e:7f:fe:6c:c0:7c:50:6e:bb:ed:42:48:
5a:a6:66:92:9e:d6:49:50:73:13:49:49:ab:7b:b8:
d3:07:38:62:24:55:39:c6:0c:e4:40:ee:61:7a:9a:
df:b6:73:23:a3:bb:63:75:d4:5d:eb:b7:b7:aa:a5:
d1:db:00:5b:86:7f:dd:f4:a9:09:b1:f1:b8:b7:a0:
07:d7:6d:40:5f:c2:95:ff:35:0e:b0:e6:1c:94:7e:
e7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:60:BE:48:1C:39:9A:A9:F9:08:57:FF:AE:78:62:B1:6B:30:A0:C3
X509v3 Authority Key Identifier:
keyid:80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/m2C-SBw5mqn5CFf_rnhisWswoMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.94.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:a3:50:59:80:23:e7:3e:ae:cc:88:ad:b9:7a:fc:9e:68:53:
88:68:1c:ef:34:22:42:d8:66:25:bf:fa:85:89:91:5a:b4:d7:
43:16:bc:1d:3f:d2:d2:49:6e:c0:52:17:1f:a0:fa:88:81:80:
a5:2a:92:cd:ad:f0:83:07:50:87:d7:f1:91:22:86:b9:06:2b:
7f:19:9f:9d:73:27:b0:ad:47:8d:e5:5e:f3:01:f7:79:1a:3d:
fd:2a:91:de:7a:a4:90:52:15:bc:c6:ef:fc:61:1e:31:73:f2:
ef:51:84:bf:fd:aa:36:ba:a4:02:44:3c:4f:4d:39:92:a2:2b:
45:d7:d9:e1:d1:ea:54:32:e2:24:1e:40:cd:b5:7f:b2:bc:2b:
62:5c:91:2e:70:35:16:26:27:5f:31:e0:39:ec:45:a5:d5:96:
49:c9:e6:40:9e:d8:66:9b:81:d4:2e:e5:f0:69:2a:92:14:4a:
d8:6a:5a:02:8e:2a:21:1d:d3:31:9d:af:a5:1d:55:23:32:a0:
7c:88:dc:c8:d8:ae:d2:a2:d5:6e:42:34:57:1a:6f:a6:5c:d7:
f4:72:28:35:a1:b3:97:6b:23:30:10:8a:09:64:34:c3:aa:cc:
47:e8:7e:77:0e:4e:20:19:38:48:63:16:f2:c2:b4:42:d1:ac:
24:e2:03:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 18:20:41 2024 by rpki-client on console-ams.rpki-client.org