Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/m7Prq6HKxD5h11x3vBXY-UZxSt8.roa
File: m7Prq6HKxD5h11x3vBXY-UZxSt8.roa (raw, json)
Hash identifier: ZbbSFzwdZ76QFQgR+FyEXRY2aLCCc6ZXqABiai4UV0M=
Subject key identifier: 9B:B3:EB:AB:A1:CA:C4:3E:61:D7:5C:77:BC:15:D8:F9:46:71:4A:DF
Certificate issuer: /CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Certificate serial: 018A648A6C3D4C25044743FCF9743941A964
Authority key identifier: 64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/m7Prq6HKxD5h11x3vBXY-UZxSt8.roa
Signing time: Tue 05 Sep 2023 08:51:47 +0000
ROA not before: Tue 05 Sep 2023 08:51:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14907
IP address blocks: 195.200.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:64:8a:6c:3d:4c:25:04:47:43:fc:f9:74:39:41:a9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Validity
Not Before: Sep 5 08:51:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9bb3ebaba1cac43e61d75c77bc15d8f946714adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b5:10:56:bb:fd:a2:a8:fd:52:61:0b:31:6d:
3c:7a:ef:90:6c:36:9e:fa:ba:f3:de:80:04:f8:f5:
49:da:ab:0c:31:f0:bc:56:1e:26:90:df:9a:c9:b4:
c4:df:01:32:e9:46:63:f3:ed:47:98:c4:cf:b4:6e:
c3:81:16:ea:d3:e2:00:d9:bb:00:92:6f:b1:85:2e:
12:da:2c:a5:33:64:4a:50:4b:a1:fb:88:e0:d9:e3:
df:75:5e:4e:05:c6:e4:58:ec:35:de:ec:8a:65:e3:
da:f2:88:f5:fc:5d:4b:b9:1d:cb:ab:33:f4:76:76:
da:5b:8f:65:a0:77:f7:28:d2:b8:96:b4:1d:c8:c5:
8a:08:00:81:1c:03:66:80:03:a5:8d:8d:a7:9e:5d:
90:f6:c3:48:7f:5b:e7:ba:06:b1:0b:85:65:23:37:
95:2f:9f:1d:fb:f4:d5:a2:f9:6c:6d:b2:90:fd:cf:
7f:8e:07:ec:08:aa:8a:58:7a:16:2f:71:bd:74:1d:
06:7a:88:7b:0b:1a:b4:63:8b:8a:62:ae:84:1f:2e:
6a:92:8d:9f:28:96:73:d8:eb:f2:58:c6:f8:63:5b:
21:91:7e:5f:a4:f9:ca:0c:11:99:a3:c5:de:c3:52:
31:e3:a8:be:1e:54:0f:4b:7a:a9:81:5f:13:05:2f:
bb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B3:EB:AB:A1:CA:C4:3E:61:D7:5C:77:BC:15:D8:F9:46:71:4A:DF
X509v3 Authority Key Identifier:
keyid:64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/m7Prq6HKxD5h11x3vBXY-UZxSt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.68.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:39:71:be:71:9c:0f:b0:29:e9:d3:f3:3c:8c:b8:f0:7d:ea:
63:cf:a3:b9:f6:24:aa:b3:1d:24:9b:67:26:60:10:14:d0:10:
38:28:78:8c:85:5b:d2:6a:e5:ff:ea:27:82:8f:3c:86:31:7a:
67:f5:f6:56:5e:fe:6b:6e:af:97:cf:d0:87:a2:ac:79:87:94:
5e:92:44:e8:00:f1:8e:0b:ff:21:42:38:25:5e:23:09:b3:d0:
58:98:ad:00:27:67:b2:d0:e1:29:8c:4b:1d:03:de:4a:96:58:
63:b2:0e:81:f5:05:ea:cb:87:c1:98:fd:92:03:f6:c7:98:d3:
0f:c9:49:50:c2:7c:26:89:ad:fb:78:37:87:7c:82:69:27:88:
2a:79:29:47:49:e2:8a:61:d7:25:4c:bf:35:1a:53:33:f5:53:
9f:e7:99:66:a3:88:23:e7:1d:ea:8a:d5:c9:bc:c2:9b:23:4e:
57:5c:74:3f:f2:94:95:aa:4a:5b:2b:73:49:37:ea:f7:ce:f3:
93:70:d7:dc:8b:8c:56:28:f3:04:0c:a4:2e:20:aa:d6:87:62:
2a:d6:2e:9c:fc:9c:6f:8d:72:9e:fb:e1:fc:bc:aa:c5:45:6a:
e7:27:f5:cf:98:cf:0f:fd:09:89:ed:8f:f7:c2:54:c6:65:26:
81:3c:ea:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:10 2024 by rpki-client on console-ams.rpki-client.org