Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/v-TTAWDthhWejvVtWlhPVnTMxmQ.roa
File: v-TTAWDthhWejvVtWlhPVnTMxmQ.roa (raw, json)
Hash identifier: Le3Rff8sqUPiK3u+BTaIlXX8Xr87jBb3sqF2/762SjY=
Subject key identifier: BF:E4:D3:01:60:ED:86:15:9E:8E:F5:6D:5A:58:4F:56:74:CC:C6:64
Certificate issuer: /CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Certificate serial: 01856ED4D5F953F8F448EAE8AE9D316E2F34
Authority key identifier: 84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/v-TTAWDthhWejvVtWlhPVnTMxmQ.roa
Signing time: Sun 01 Jan 2023 19:35:20 +0000
ROA not before: Sun 01 Jan 2023 19:35:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12363
IP address blocks: 195.110.96.0/19 maxlen: 24
195.110.97.0/24 maxlen: 24
195.110.96.0/24 maxlen: 24
195.110.99.0/24 maxlen: 24
2a0e:f080:1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:d5:f9:53:f8:f4:48:ea:e8:ae:9d:31:6e:2f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Validity
Not Before: Jan 1 19:35:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bfe4d30160ed86159e8ef56d5a584f5674ccc664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ae:f0:a6:10:a5:33:4b:c5:22:7d:7a:f6:38:
be:82:27:b4:2d:c0:b8:84:79:ee:8b:b0:04:90:4b:
f7:bd:be:a3:c5:b9:b4:d1:6e:bc:71:8a:56:0b:9a:
54:52:c8:70:27:df:67:64:d0:b9:04:c5:ea:ec:6c:
0f:bf:49:62:13:56:c8:3f:a6:ae:b7:3e:05:b1:e4:
74:8a:6c:4d:03:bb:26:d0:f3:4f:be:4c:2b:b3:0e:
aa:ce:59:cc:d7:eb:b2:d7:7e:eb:db:b9:e4:5c:26:
f8:cf:4c:b5:02:b0:20:d2:2e:f7:62:bc:af:03:48:
01:94:3b:02:d3:e1:17:02:7c:31:ca:26:0f:c7:3e:
a8:37:44:9a:89:0d:07:dd:98:8d:37:7c:65:87:d6:
9e:13:34:16:55:51:c4:cd:f5:e3:f7:a8:c5:c6:34:
f9:5a:b8:1f:ce:d9:80:23:1c:af:cb:74:2b:c4:7a:
b9:03:ea:dd:94:75:0b:44:c7:da:fe:03:26:88:f5:
fe:17:05:7e:26:09:7c:0a:5c:f4:98:18:af:ba:37:
9e:b6:44:76:5f:da:91:cc:d3:04:4f:f7:10:7d:0c:
7c:d9:7e:20:bb:5f:5f:7c:8a:83:e0:d5:7e:d1:69:
84:93:e1:6e:70:78:bd:47:d5:8c:28:64:f2:f2:20:
66:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E4:D3:01:60:ED:86:15:9E:8E:F5:6D:5A:58:4F:56:74:CC:C6:64
X509v3 Authority Key Identifier:
keyid:84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/v-TTAWDthhWejvVtWlhPVnTMxmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.110.96.0/19
IPv6:
2a0e:f080:1::/48
Signature Algorithm: sha256WithRSAEncryption
75:5a:cb:66:84:ca:3e:c2:73:d1:77:e9:15:46:15:d3:e8:0a:
0a:60:d1:6c:bf:56:f6:23:c2:1d:86:d6:1b:23:03:8c:b5:ca:
d5:74:4e:ea:3a:a0:17:39:ad:77:66:af:bf:e1:8d:f2:4f:d6:
8a:96:c1:c9:46:e7:e9:32:16:d1:78:c6:c4:17:83:4e:ec:ed:
dd:f9:1c:b1:7e:28:8c:c1:ee:8a:4d:4c:4c:15:73:d0:a6:97:
a5:12:b2:b4:ec:ce:38:77:f2:94:6f:58:70:9a:d9:d8:1f:43:
ce:da:54:d4:41:f3:1c:aa:41:15:8d:2f:78:9b:ce:de:4c:97:
60:06:48:14:40:bf:72:72:b7:23:e9:da:5d:41:68:8e:f1:46:
1b:86:af:1b:88:f8:74:0f:9c:29:47:ce:70:35:93:b0:ed:15:
59:7d:fa:37:20:cf:65:db:c7:d8:bf:23:85:47:07:cf:a1:95:
84:f2:2a:c5:4b:fc:d9:e5:bc:c5:29:83:db:d0:37:06:49:04:
a2:af:8b:1e:34:ce:21:64:5a:0b:ea:3e:6b:21:24:8e:ee:9d:
53:00:e9:6d:a1:be:bb:5c:07:ee:5b:1b:0d:25:09:87:b5:6c:
1c:88:86:ea:c7:46:ba:f9:e0:e1:1b:26:7b:7b:6c:8d:fb:1f:
9c:5b:fd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:49 2024 by rpki-client on console-fra.rpki-client.org