Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/m1-z13AlfXkXkjefgo93yWPVcUQ.roa
File: m1-z13AlfXkXkjefgo93yWPVcUQ.roa (raw, json)
Hash identifier: QHTEpmxHQ+M6KWHTgX9oUHeTo+qsge/nJDgQHOWYQNw=
Subject key identifier: 9B:5F:B3:D7:70:25:7D:79:17:92:37:9F:82:8F:77:C9:63:D5:71:44
Certificate issuer: /CN=826eb7d74fa1071597fa3339fbf8831c2e95b2c7
Certificate serial: 01856E78D3C166067D720E65EEB0377E8C4A
Authority key identifier: 82:6E:B7:D7:4F:A1:07:15:97:FA:33:39:FB:F8:83:1C:2E:95:B2:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gm6310-hBxWX-jM5-_iDHC6Vssc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/m1-z13AlfXkXkjefgo93yWPVcUQ.roa
Signing time: Sun 01 Jan 2023 17:54:50 +0000
ROA not before: Sun 01 Jan 2023 17:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39022
IP address blocks: 195.66.134.0/23 maxlen: 23
2001:67c:2464::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:78:d3:c1:66:06:7d:72:0e:65:ee:b0:37:7e:8c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826eb7d74fa1071597fa3339fbf8831c2e95b2c7
Validity
Not Before: Jan 1 17:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b5fb3d770257d791792379f828f77c963d57144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:93:5c:5d:2c:ac:b0:ae:04:57:3e:b4:99:
32:6f:2f:6d:cd:21:59:98:87:0c:20:b0:1e:56:29:
5d:0f:5a:b8:f9:91:b3:a7:1c:2b:a2:ba:73:91:24:
f3:e8:bc:a1:79:b5:35:b8:39:c8:22:cc:ec:0e:db:
31:f2:32:f9:3e:88:77:b4:c7:04:7e:16:f4:18:65:
6f:7a:52:59:26:78:d3:f3:5f:c8:d7:fd:c0:b6:2d:
ab:2b:7b:40:b3:27:ab:a3:1d:01:f0:ea:2d:c0:8f:
e7:ca:a9:1f:50:04:76:fc:e4:bd:be:08:2c:54:bd:
93:be:e6:56:5b:51:d5:a1:5d:9a:65:33:ee:b9:ad:
3d:b0:b0:45:c1:a7:c3:78:7d:c1:6a:3c:ad:5d:53:
91:b8:c1:41:fc:c7:e2:33:c7:6c:0c:ff:57:7d:e9:
e7:a9:4c:d2:e6:af:36:3b:59:d4:1d:59:d1:44:5d:
d5:ba:09:b7:f7:6e:95:72:18:64:6a:b2:be:08:e7:
a8:96:c4:77:d3:f8:9e:fc:d5:9b:95:e8:89:58:65:
b5:b6:68:3b:64:20:7b:27:af:4d:e5:94:de:12:8e:
72:46:c6:9b:d8:a0:fb:66:fe:92:4b:ad:8b:14:3d:
f8:a8:33:0e:41:a5:f7:17:0b:e2:88:f3:4d:b0:79:
7b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5F:B3:D7:70:25:7D:79:17:92:37:9F:82:8F:77:C9:63:D5:71:44
X509v3 Authority Key Identifier:
keyid:82:6E:B7:D7:4F:A1:07:15:97:FA:33:39:FB:F8:83:1C:2E:95:B2:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gm6310-hBxWX-jM5-_iDHC6Vssc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/m1-z13AlfXkXkjefgo93yWPVcUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/gm6310-hBxWX-jM5-_iDHC6Vssc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.134.0/23
IPv6:
2001:67c:2464::/48
Signature Algorithm: sha256WithRSAEncryption
29:64:90:ae:d6:21:fd:7a:4d:75:77:17:49:66:41:58:47:92:
d0:9a:89:13:af:33:1e:71:ce:e5:d4:d4:59:0e:aa:63:8a:a9:
ab:de:7b:b0:c1:e0:29:5c:58:94:d5:79:7f:ce:7a:2c:16:79:
e7:52:92:b4:c0:92:6d:a5:58:53:1a:16:ef:94:ae:5c:51:74:
b5:9b:e2:5c:e1:34:d3:bc:6a:26:8a:85:74:6e:75:38:b0:28:
0f:f1:61:95:84:a4:31:89:02:02:91:4b:d5:f1:22:86:19:49:
4e:59:48:e1:d4:ef:6b:41:9c:e8:be:78:9c:40:76:c6:bb:8d:
8a:cf:c3:f0:7f:01:07:9c:b6:af:63:28:5b:b6:31:ed:3b:d4:
a9:d2:66:39:d3:53:1a:4e:f7:04:7f:42:fd:fe:a2:60:2b:4a:
42:98:96:4a:fc:7a:4f:52:d5:07:ad:1a:6f:7a:f2:50:ad:ce:
19:2f:c6:4c:67:3a:ea:f2:5a:37:32:8f:aa:cf:5e:67:d6:7a:
16:71:78:c8:c7:2d:54:f4:58:10:24:6d:a4:bd:a9:1f:9f:26:
d5:19:77:e2:4e:29:06:e4:12:d6:c3:6e:88:92:44:05:d0:04:
64:ea:ef:94:ed:1c:d4:72:12:8c:78:d4:4a:2b:d4:b1:3f:d5:
bd:19:d5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:34 2024 by rpki-client on console-ams.rpki-client.org