Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/tiiAFEDPrl8ABss_WSEfg4LsfMQ.roa
File: tiiAFEDPrl8ABss_WSEfg4LsfMQ.roa (raw, json)
Hash identifier: 79ZvYXFs5D4CuOeWcNy6IyVUyPfIfPzDkXeuFSLEDfI=
Subject key identifier: B6:28:80:14:40:CF:AE:5F:00:06:CB:3F:59:21:1F:83:82:EC:7C:C4
Certificate issuer: /CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Certificate serial: 01856ED4D822475B06FF6B68EF31EFAC8BB3
Authority key identifier: 84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/tiiAFEDPrl8ABss_WSEfg4LsfMQ.roa
Signing time: Sun 01 Jan 2023 19:35:20 +0000
ROA not before: Sun 01 Jan 2023 19:35:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206191
IP address blocks: 195.110.116.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:d8:22:47:5b:06:ff:6b:68:ef:31:ef:ac:8b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Validity
Not Before: Jan 1 19:35:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b628801440cfae5f0006cb3f59211f8382ec7cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8f:1d:3a:70:79:4c:a2:af:a3:9f:72:8b:d7:
0f:dc:b2:f6:3d:64:d8:bb:a1:7d:c4:ae:a2:f2:ec:
76:60:05:36:74:ab:a3:45:40:2a:d3:be:15:84:cb:
48:2f:fd:09:e6:f5:8c:40:ff:c6:ac:b7:b3:ac:b3:
27:ae:8a:a7:6c:c3:be:73:c6:a7:97:0e:92:fc:91:
50:2f:c4:71:85:20:e1:d2:cd:f2:75:5d:2b:23:98:
e7:da:f3:09:29:67:4b:e3:7d:3c:61:cd:98:a2:8f:
df:62:22:5b:b5:d2:16:3e:d4:86:f4:16:73:52:c6:
7f:2d:2b:44:9a:2f:9e:5b:70:45:b0:97:18:c8:dc:
24:10:3e:a9:eb:50:d5:6f:d5:17:48:f1:e4:60:22:
f2:32:9f:cf:98:59:ef:ef:08:eb:19:f6:2c:77:cb:
6d:b2:4b:f1:e3:6c:4d:ee:a4:38:6e:3f:07:3a:6f:
54:e3:aa:ae:72:e9:5a:f0:75:13:41:c4:84:1e:34:
c2:cd:84:13:e9:67:d2:06:58:88:ee:05:35:cc:13:
15:2d:6a:5e:ab:79:99:7c:b2:7e:f7:df:e4:8b:84:
93:08:8d:a1:3b:aa:8b:a8:e8:19:e0:c2:fe:bb:12:
79:bd:a8:44:f4:1c:aa:f4:26:1b:78:1a:52:df:9c:
f6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:28:80:14:40:CF:AE:5F:00:06:CB:3F:59:21:1F:83:82:EC:7C:C4
X509v3 Authority Key Identifier:
keyid:84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/tiiAFEDPrl8ABss_WSEfg4LsfMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.110.116.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:d2:3c:63:bf:14:5a:8e:1d:81:28:a7:22:f4:41:75:2c:63:
e5:1e:e5:b5:d1:7e:80:b8:20:08:75:60:36:0b:3f:1f:2e:66:
a6:b3:48:d0:27:a8:7d:de:4c:62:97:1b:4c:be:c9:a1:d3:04:
4d:40:c6:8e:a4:be:99:82:8a:3a:6c:d9:7d:10:5e:a3:be:c3:
9f:ff:54:9c:d9:92:49:c3:96:43:11:b0:4a:30:00:0b:4f:6a:
97:17:3c:21:01:e0:ae:8a:83:a9:30:ea:ec:3a:81:f2:77:d4:
e3:61:1f:0a:94:41:34:83:fb:c5:97:c4:a9:64:37:a7:47:b3:
6a:98:72:29:29:36:66:95:f4:d5:2d:58:f8:18:69:88:19:1e:
ed:0b:02:d0:2a:9a:cc:8b:9b:1b:97:61:41:38:5e:59:5f:5c:
79:75:2d:7d:51:b9:0e:aa:5f:e2:a6:96:5a:d9:bf:ff:2e:23:
e5:96:56:3e:df:bb:da:c5:41:69:b0:db:e3:5c:36:3e:07:78:
16:ad:d9:cc:29:51:d7:91:7d:64:a1:5b:67:76:04:40:aa:40:
6a:22:ba:4d:9f:c8:1a:3b:6b:ff:b3:76:62:0b:b2:18:05:0e:
46:3b:94:9a:63:54:8c:e3:eb:d9:d7:bc:04:02:34:e5:d4:8f:
85:28:f2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:10 2024 by rpki-client on console-ams.rpki-client.org