Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8f0e23-6994-4595-8b1c-7e0a4b3299be/1/vNzPGI_78sL5_HUhcgtN0Pic_cc.roa
File: vNzPGI_78sL5_HUhcgtN0Pic_cc.roa (raw, json)
Hash identifier: 2vQJ5soChQTdty39dFjJtFIPDOdMUePhiUdh1d8t10I=
Subject key identifier: BC:DC:CF:18:8F:FB:F2:C2:F9:FC:75:21:72:0B:4D:D0:F8:9C:FD:C7
Certificate issuer: /CN=08f1f2131f05a3c7186970d301723aaa00932096
Certificate serial: 018964C0539C0517358CD421CDDCA2D32684
Authority key identifier: 08:F1:F2:13:1F:05:A3:C7:18:69:70:D3:01:72:3A:AA:00:93:20:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPHyEx8Fo8cYaXDTAXI6qgCTIJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8f0e23-6994-4595-8b1c-7e0a4b3299be/1/vNzPGI_78sL5_HUhcgtN0Pic_cc.roa
Signing time: Mon 17 Jul 2023 16:47:53 +0000
ROA not before: Mon 17 Jul 2023 16:47:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 195.35.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:53:9c:05:17:35:8c:d4:21:cd:dc:a2:d3:26:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08f1f2131f05a3c7186970d301723aaa00932096
Validity
Not Before: Jul 17 16:47:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcdccf188ffbf2c2f9fc7521720b4dd0f89cfdc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b2:42:1a:3f:c9:7a:dc:19:cd:0f:fa:c3:55:
8e:87:c7:a7:6f:16:24:0e:fc:c8:92:76:b4:27:17:
47:44:6f:2f:6b:19:54:ab:a4:51:4c:aa:4f:e0:70:
fe:0d:70:ad:5e:03:fc:f7:32:ca:0e:91:71:d9:df:
e0:41:dc:a1:65:7b:10:60:4e:62:a9:38:cd:ad:7e:
79:d8:17:db:99:47:35:f4:2e:65:f3:80:df:22:d5:
d8:29:d5:97:3a:03:86:33:f8:0e:48:6f:87:74:fe:
a8:3b:37:92:2b:91:40:b6:7d:9d:63:9f:dc:e5:7f:
aa:a4:b7:d3:8a:6f:2d:9c:d7:b6:1d:c9:0a:ee:93:
c1:bb:f8:05:35:d7:eb:53:59:e3:9d:02:e4:d1:a8:
01:89:4b:77:38:2d:b0:5f:ea:cf:b8:38:eb:16:c2:
6a:4f:f1:87:ca:90:12:13:e8:52:0f:51:53:2d:fa:
6b:2e:a9:34:bd:75:ad:46:0e:2b:41:1a:ad:6f:e9:
97:fc:4e:10:54:fc:8a:cd:bb:ec:84:84:08:a1:d6:
51:92:68:7b:f5:b7:7e:33:2d:b4:8b:0e:14:d1:6f:
4a:a4:f4:f8:20:e9:d8:4c:f3:e5:de:4a:69:52:7d:
7d:32:97:41:c9:93:a4:19:c5:2e:cb:d3:28:ee:08:
bf:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DC:CF:18:8F:FB:F2:C2:F9:FC:75:21:72:0B:4D:D0:F8:9C:FD:C7
X509v3 Authority Key Identifier:
keyid:08:F1:F2:13:1F:05:A3:C7:18:69:70:D3:01:72:3A:AA:00:93:20:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPHyEx8Fo8cYaXDTAXI6qgCTIJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8f0e23-6994-4595-8b1c-7e0a4b3299be/1/vNzPGI_78sL5_HUhcgtN0Pic_cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8f0e23-6994-4595-8b1c-7e0a4b3299be/1/CPHyEx8Fo8cYaXDTAXI6qgCTIJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.105.0/24
Signature Algorithm: sha256WithRSAEncryption
78:bf:05:1c:7f:9a:7d:f7:df:5b:02:8a:f6:dd:0f:67:fa:4c:
4c:b7:6f:6b:19:d7:0b:79:c2:e2:d1:cc:23:e1:bd:f4:68:ae:
11:3d:b5:68:b9:cd:46:d5:e5:82:62:0c:af:a4:2a:9d:7b:2e:
f3:f0:0e:62:79:33:99:99:44:7b:c0:57:3f:96:c5:35:e3:32:
97:0e:1f:f6:91:26:ef:ca:ac:d4:da:61:9d:d0:00:bb:11:e6:
a1:b0:02:36:d8:59:27:62:39:28:eb:9b:38:13:e5:9e:29:48:
a9:98:ce:8f:db:71:e2:bc:61:50:90:7f:d0:a7:19:fe:68:e5:
14:58:80:ca:95:b7:67:d8:d5:4e:c5:44:de:fc:06:5d:bc:e5:
3f:c3:e6:3a:f6:14:be:d8:9f:04:52:a8:78:86:6a:53:fa:5c:
1b:75:d0:fb:26:f7:74:b9:82:5f:17:9d:37:02:3d:41:86:11:
10:f0:83:62:f1:e7:18:7d:6a:d2:c7:36:c8:57:e6:37:08:a6:
07:5f:1a:ad:ed:7c:b5:41:ed:b2:02:49:40:8d:a6:62:b0:28:
a1:9b:71:79:55:fa:86:28:46:12:7c:9c:38:2b:a0:c4:bd:8c:
43:53:95:ca:50:7e:d6:58:45:8e:84:d7:70:11:fc:9a:a1:92:
70:d0:49:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:14 2024 by rpki-client on console-fra.rpki-client.org