Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/azOu8QzFf23kOmjw8KBF5tIk21U.roa
File: azOu8QzFf23kOmjw8KBF5tIk21U.roa (raw, json)
Hash identifier: He21VhtyVU+QiiUMFeoV3Y0w+r5KTohYDc49zwIpGBk=
Subject key identifier: 6B:33:AE:F1:0C:C5:7F:6D:E4:3A:68:F0:F0:A0:45:E6:D2:24:DB:55
Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial: 0188E79A6D6D1C38E28904BCA1C4C9EF6196
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/azOu8QzFf23kOmjw8KBF5tIk21U.roa
Signing time: Fri 23 Jun 2023 09:33:57 +0000
ROA not before: Fri 23 Jun 2023 09:33:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 251
IP address blocks: 195.13.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e7:9a:6d:6d:1c:38:e2:89:04:bc:a1:c4:c9:ef:61:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Validity
Not Before: Jun 23 09:33:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b33aef10cc57f6de43a68f0f0a045e6d224db55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3b:94:77:7b:3e:76:51:c2:49:b8:03:03:f4:
10:68:ea:a7:aa:ed:5a:62:67:bf:f0:03:02:8f:d2:
2e:f2:55:c7:a1:3b:68:49:00:83:3a:f1:c1:23:8f:
3d:20:07:21:62:ee:c0:4e:88:54:61:c4:4a:ef:0c:
9a:79:97:88:95:74:7b:b3:fe:27:5c:80:e3:73:4e:
69:fd:7a:89:0f:62:90:ba:63:06:22:a9:11:3a:08:
0b:8f:99:7c:63:6b:da:4d:e2:10:9f:7b:8c:25:f3:
b2:78:b7:20:da:1c:38:cb:c0:65:01:f2:35:2c:a1:
d6:5b:15:d0:1a:d5:62:9f:b8:8f:01:66:77:d9:11:
a1:97:c3:6f:3b:31:de:48:3d:f8:9a:23:88:fe:ee:
45:c9:fb:47:66:21:10:38:01:d9:e0:78:32:6b:7a:
94:76:fa:32:ad:a0:1a:d7:52:f4:32:4e:c1:4b:b3:
82:dd:c2:69:4f:3f:df:1e:c5:d6:03:8b:f3:09:0b:
16:32:cd:82:fc:b1:3d:4b:0b:0f:ec:0b:42:50:f0:
94:d9:47:15:39:2d:d6:d2:7f:42:33:6e:7d:5d:60:
73:9e:84:33:5b:b5:15:b6:c1:93:e7:43:fe:a0:44:
70:b5:da:0c:5a:90:13:10:84:db:d5:78:db:e4:aa:
9a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:33:AE:F1:0C:C5:7F:6D:E4:3A:68:F0:F0:A0:45:E6:D2:24:DB:55
X509v3 Authority Key Identifier:
keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/azOu8QzFf23kOmjw8KBF5tIk21U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.13.62.0/24
Signature Algorithm: sha256WithRSAEncryption
06:b5:ac:31:0e:51:01:47:6b:57:f9:4b:66:50:d1:25:31:e3:
6d:d1:d1:b8:35:8d:29:c6:91:53:2f:a7:20:47:d9:f3:fe:89:
5b:88:da:14:1e:5d:fc:b4:ee:0d:46:42:4e:89:65:9e:54:4f:
38:47:47:da:19:76:66:2f:de:9c:f7:39:57:ce:0d:19:99:c7:
c9:25:bd:df:c3:d2:24:f7:5b:d4:d5:3c:ce:ae:81:55:c5:37:
b8:83:7c:5b:16:79:94:61:73:bf:e8:2c:8d:38:7b:31:99:1e:
40:3a:1e:06:9f:95:11:9e:11:c2:12:4a:1c:fc:64:01:19:7f:
74:e4:e0:11:c4:b6:7a:5e:95:e5:98:4a:a9:be:e8:9b:bb:62:
8e:a4:70:66:6b:7c:07:ea:db:6b:65:2f:e4:c4:ae:73:2a:ab:
79:aa:0f:24:6f:80:2c:c0:c4:03:a3:32:9a:28:d6:26:88:f7:
dd:ae:be:6d:fd:b3:78:3d:21:c3:09:13:5b:c2:2b:41:27:d5:
d7:bc:ee:b9:f2:bd:dc:9f:33:0b:f4:2f:1d:ff:15:05:90:ab:
43:c5:c7:51:db:f1:44:6b:5a:42:03:5a:4c:b3:20:1c:8a:71:
53:e2:e9:10:30:81:1b:b2:f8:8e:c1:1a:7b:84:df:24:46:fd:
95:1b:8f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 28 13:05:36 2023 by rpki-client on console-ams.rpki-client.org