Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/NDRhHCHd-H4Wbwp8DGRN-9p0swc.roa
File: NDRhHCHd-H4Wbwp8DGRN-9p0swc.roa (raw, json)
Hash identifier: zVww5YNoiFGPlFcnnqRRmxNtky1wcugHxaV0UuZasDY=
Subject key identifier: 34:34:61:1C:21:DD:F8:7E:16:6F:0A:7C:0C:64:4D:FB:DA:74:B3:07
Certificate issuer: /CN=61e6ea83926bc478c785471d805a5c1210a8c993
Certificate serial: 0192D2FFA6AF56FC32AF4DB59193E0837817
Authority key identifier: 61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/NDRhHCHd-H4Wbwp8DGRN-9p0swc.roa
Signing time: Mon 28 Oct 2024 12:00:22 +0000
ROA not before: Mon 28 Oct 2024 12:00:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57460
IP address blocks: 195.238.112.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 29 Oct 2024 06:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d2:ff:a6:af:56:fc:32:af:4d:b5:91:93:e0:83:78:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e6ea83926bc478c785471d805a5c1210a8c993
Validity
Not Before: Oct 28 12:00:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3434611c21ddf87e166f0a7c0c644dfbda74b307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:42:93:7d:ee:39:c7:e2:aa:32:a7:8f:1a:45:
5d:6d:88:01:20:f5:46:5d:11:c6:5e:fc:8b:0c:76:
89:8f:df:6c:e7:d3:ec:09:e0:e4:2b:c2:21:c6:3e:
de:c4:43:51:a6:ac:be:54:46:5c:e4:24:83:78:cd:
31:ec:86:11:58:68:65:9c:54:23:cb:a0:85:c5:72:
56:4f:fa:76:f5:64:44:8a:e3:62:a7:20:48:cf:9c:
75:6d:8a:da:91:53:41:30:f3:c4:b5:2e:5b:8b:a3:
45:3e:b5:1d:fd:0f:8b:40:ce:f2:54:62:76:61:85:
13:7b:cc:df:af:ee:b1:cf:d5:ba:1f:fc:ee:30:e9:
88:1d:2b:dd:1a:98:ce:9e:51:94:8e:34:d3:55:09:
f3:46:65:02:28:ff:9c:cd:21:c9:6d:13:a8:78:ff:
f3:27:da:a1:76:01:a7:b4:ed:eb:cf:75:e7:79:54:
e6:6d:0f:4c:39:e0:e7:9b:6e:fa:ab:80:cb:04:2f:
90:8e:d7:36:78:5a:c4:ae:b5:64:10:80:64:b1:7a:
96:c9:c4:c7:29:29:6f:b3:b2:ea:c5:0f:1f:1b:40:
09:54:25:52:99:3f:b6:e4:11:47:8d:5a:14:03:ec:
ec:2b:ca:36:99:3d:fe:3d:4f:7a:77:2c:ca:c3:99:
02:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:34:61:1C:21:DD:F8:7E:16:6F:0A:7C:0C:64:4D:FB:DA:74:B3:07
X509v3 Authority Key Identifier:
keyid:61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/NDRhHCHd-H4Wbwp8DGRN-9p0swc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.112.0/22
Signature Algorithm: sha256WithRSAEncryption
39:93:7e:64:c5:b6:0b:f4:01:10:13:46:42:87:97:ae:47:29:
e0:82:1f:60:db:dc:5a:5c:8f:e0:af:f9:24:07:4a:68:f6:d3:
1e:2e:95:6a:94:f7:6a:ce:55:8e:c2:8b:30:cf:7b:2b:ef:53:
17:4a:dd:2f:5a:5c:0c:79:2c:7e:15:f2:d9:5f:08:92:9c:ab:
05:a3:3a:24:e8:17:c2:2e:17:83:ac:66:c7:dd:14:eb:59:e6:
34:55:97:a2:88:bf:1d:fa:df:0c:85:cf:8a:73:59:c3:e5:90:
11:eb:14:b3:c7:6b:16:76:1f:0e:6d:02:98:5f:0a:8b:40:b1:
1e:fd:47:4e:78:a4:a9:3c:4f:f0:26:c7:82:56:db:24:27:86:
07:d5:2b:26:de:98:0d:06:56:c5:5f:20:ea:fe:55:1e:7f:54:
ae:69:96:7d:b4:7a:3d:5d:4b:c1:31:b6:16:94:f7:79:6d:46:
85:6f:0c:2c:03:8b:cc:f3:01:0c:46:c6:64:0e:13:5d:d3:78:
8b:5a:9a:b0:5b:37:5f:68:e0:73:88:78:c3:1f:f3:3a:75:9d:
07:c8:2b:e7:13:ee:f1:69:83:a3:f0:f9:2c:da:a9:89:b1:4b:
b3:1a:27:12:7e:cb:67:62:11:24:f8:1b:f6:16:f3:5d:bc:f9:
2e:ed:76:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 09:20:38 2024 by rpki-client on console-fra.rpki-client.org