Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/_BQgGg19aMWs8GH4r5MoAlRzLdc.roa
File: _BQgGg19aMWs8GH4r5MoAlRzLdc.roa (raw, json)
Hash identifier: BVnPvXcI5NEioehF47GcPaUB7NMig5I4jgJkKYL+pF0=
Subject key identifier: FC:14:20:1A:0D:7D:68:C5:AC:F0:61:F8:AF:93:28:02:54:73:2D:D7
Certificate issuer: /CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e
Certificate serial: 01856B40DD588225D833C749C2EB83A085D1
Authority key identifier: 4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/_BQgGg19aMWs8GH4r5MoAlRzLdc.roa
Signing time: Sun 01 Jan 2023 02:54:51 +0000
ROA not before: Sun 01 Jan 2023 02:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29453
IP address blocks: 195.140.164.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:40:dd:58:82:25:d8:33:c7:49:c2:eb:83:a0:85:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e
Validity
Not Before: Jan 1 02:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc14201a0d7d68c5acf061f8af93280254732dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cb:98:4c:fa:e0:24:ec:1e:20:a7:57:16:a7:
d6:51:14:c8:64:52:e9:53:1e:a3:99:4b:9c:de:87:
34:13:2d:9d:a9:79:a8:67:77:64:55:77:61:65:06:
02:38:e4:53:ff:fa:47:88:6b:64:21:73:ac:f8:6e:
59:95:e3:7e:e4:c0:df:78:51:1d:a2:d5:5a:24:1c:
10:32:30:7e:cf:8e:26:2e:6b:c4:bd:b6:cf:e1:c1:
79:e2:d0:51:aa:a6:48:96:7a:e0:76:fd:98:b0:d6:
a0:2b:d8:a3:ba:f1:02:c7:fe:96:02:74:af:7b:39:
4d:e8:50:23:14:79:a6:7b:ce:92:e3:15:b9:32:b5:
b1:7e:e7:4c:19:9f:55:4e:57:33:05:93:dc:6f:4f:
26:ff:c9:57:59:eb:e4:df:c7:2c:cf:a2:93:a2:4d:
b7:db:aa:ad:9f:65:dd:e9:d7:f8:04:cf:a1:31:c4:
9d:02:eb:c8:91:c4:c7:d5:5b:bf:6a:cb:dd:5a:19:
80:51:41:23:19:c9:37:38:b3:d8:fb:97:73:21:c2:
25:20:85:ee:97:69:d3:98:12:fc:ef:ab:4e:0b:1d:
05:0b:82:39:5d:c5:ca:c5:d7:8c:a8:14:7f:e3:73:
d5:00:22:7b:ef:b2:ee:11:28:72:3c:15:17:e5:73:
e0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:14:20:1A:0D:7D:68:C5:AC:F0:61:F8:AF:93:28:02:54:73:2D:D7
X509v3 Authority Key Identifier:
keyid:4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/_BQgGg19aMWs8GH4r5MoAlRzLdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.140.164.0/22
Signature Algorithm: sha256WithRSAEncryption
13:de:7a:4d:39:72:20:22:67:89:a5:6b:39:a2:ef:6e:2a:5d:
f7:39:69:19:f4:b4:19:1d:ca:07:26:0f:40:2c:c8:fa:f7:06:
be:7b:13:61:90:87:8a:75:fa:81:51:b1:e0:7b:8e:27:79:f9:
df:39:67:77:b9:50:86:45:6d:b7:d8:56:b5:3a:03:80:d4:9e:
b5:48:d9:39:55:69:25:62:a4:02:28:15:7e:4d:77:d3:65:c8:
da:e7:c2:b2:d4:73:b5:18:90:df:b8:2b:19:da:ae:bf:7b:7f:
30:06:8e:98:8f:66:ce:86:e6:99:41:1a:0a:5b:9d:79:58:1b:
6d:d2:39:7f:10:2c:ca:b7:40:14:31:f7:7d:57:9e:b9:9a:d4:
75:94:65:b5:aa:06:41:1b:fc:10:96:f1:79:ab:b2:a4:83:ff:
4b:63:e6:9d:ed:c6:71:da:90:45:6e:1c:ea:84:90:cb:98:7b:
98:26:5c:a7:44:c8:0a:0e:c6:ca:79:b5:73:ca:8f:70:84:c5:
b6:c4:9f:dc:52:91:6c:d5:bb:77:23:e0:10:1f:d4:28:c5:92:
3b:4e:0c:08:a8:20:de:6a:eb:21:c5:ea:be:7e:1d:02:37:f7:
7c:d5:1a:f4:41:fc:55:af:f6:9c:cf:90:64:16:8c:27:26:53:
9c:0d:1c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:14 2024 by rpki-client on console-fra.rpki-client.org