Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/ddCiLleB2bOYv78J0HJDq-wSwWo.roa
File: ddCiLleB2bOYv78J0HJDq-wSwWo.roa (raw, json)
Hash identifier: FzdoOVAomJ2my3TmYvow/2pqWsDFHarIwIUJd6keAkU=
Subject key identifier: 75:D0:A2:2E:57:81:D9:B3:98:BF:BF:09:D0:72:43:AB:EC:12:C1:6A
Certificate issuer: /CN=d4c7c4eab5c07948cbf44a8a01c6a827fdae9341
Certificate serial: 018570799991674629D746E3B444BD5E86CF
Authority key identifier: D4:C7:C4:EA:B5:C0:79:48:CB:F4:4A:8A:01:C6:A8:27:FD:AE:93:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/ddCiLleB2bOYv78J0HJDq-wSwWo.roa
Signing time: Mon 02 Jan 2023 03:14:55 +0000
ROA not before: Mon 02 Jan 2023 03:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41346
IP address blocks: 195.114.28.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:99:91:67:46:29:d7:46:e3:b4:44:bd:5e:86:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c7c4eab5c07948cbf44a8a01c6a827fdae9341
Validity
Not Before: Jan 2 03:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75d0a22e5781d9b398bfbf09d07243abec12c16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5e:9d:a5:a6:58:e1:30:a0:2c:10:2f:b6:cc:
1e:42:aa:5d:5b:55:bd:c0:e8:cb:f6:97:00:a9:f3:
fd:e1:2c:9e:25:c1:42:ec:70:b0:9f:71:87:02:0e:
00:eb:7f:65:bb:a8:28:92:bd:86:b2:09:8f:8b:7c:
4a:9c:59:a9:65:6b:e6:16:43:e9:c7:51:b8:f3:fd:
1a:16:9e:77:75:95:c9:c0:04:dd:cc:ed:b5:66:45:
4e:a6:7d:26:17:8b:1c:28:b3:44:e0:ae:8d:f3:5b:
e3:94:4b:8d:a7:88:0e:7e:42:ff:48:ab:26:20:41:
2b:b1:da:38:b4:ad:91:f6:9b:d2:c8:0d:5c:66:aa:
17:33:04:33:ad:5d:d1:89:d8:6b:56:c4:d8:34:2a:
90:91:c9:55:48:35:8f:3e:3c:03:7a:20:48:4b:68:
78:af:27:ad:8f:f0:6c:8c:c7:35:a7:e5:89:31:55:
0d:40:a6:09:87:e7:cd:6d:11:01:da:55:6b:22:38:
50:52:2d:ee:54:09:71:f8:f2:35:b7:48:b8:0b:1c:
f8:d3:87:86:92:34:4e:0e:e5:1d:86:f5:53:dd:88:
52:41:92:b8:c1:b6:41:56:12:88:e4:3e:e0:88:6a:
61:cc:92:9d:66:bf:32:02:25:58:37:3c:89:11:58:
60:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D0:A2:2E:57:81:D9:B3:98:BF:BF:09:D0:72:43:AB:EC:12:C1:6A
X509v3 Authority Key Identifier:
keyid:D4:C7:C4:EA:B5:C0:79:48:CB:F4:4A:8A:01:C6:A8:27:FD:AE:93:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/ddCiLleB2bOYv78J0HJDq-wSwWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.28.0/23
Signature Algorithm: sha256WithRSAEncryption
95:21:b6:1e:b8:b8:d6:08:80:a7:90:3d:9f:71:54:4d:38:01:
a5:e3:5e:dc:19:2f:a2:13:f0:9d:10:77:53:20:87:d2:7e:89:
17:f7:4c:58:29:70:6e:f2:26:b7:87:52:fb:ac:c9:c7:b8:ad:
7a:90:19:ed:3c:46:b5:1b:49:b3:03:56:07:15:85:1d:0f:97:
75:18:ff:45:75:1e:8f:5f:7c:5b:87:34:54:d4:b8:15:b0:23:
62:ea:79:19:5e:ec:0e:c7:92:64:9e:a9:15:25:0e:7f:f8:bd:
ab:09:78:e1:7c:34:8f:d4:ee:ac:13:44:5c:05:d2:72:20:5a:
8f:04:c7:4f:13:55:8c:47:d0:5e:8f:4a:91:c1:24:a6:07:88:
8b:f0:ab:a6:ee:46:26:7e:de:ca:bb:95:67:7e:bf:fc:a3:49:
b6:c7:ea:0d:15:1f:eb:7f:3d:39:7b:b7:76:c3:f0:1f:0e:cc:
dd:83:13:ae:f4:bf:9b:10:d3:f6:83:04:92:54:ce:48:70:4d:
f2:2c:1b:35:b8:ca:dc:29:f0:31:9d:38:dc:92:b9:95:75:48:
35:a6:3b:71:c0:69:54:66:44:09:1d:ee:0e:32:33:27:37:5a:
78:78:63:e0:37:0e:a3:f9:75:a2:0c:53:0e:48:5e:2f:d3:61:
6a:62:da:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:47 2024 by rpki-client on console-ams.rpki-client.org