Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/kS9Lz5CsQDwnDDcBWgTnYhEHS5s.roa
File: kS9Lz5CsQDwnDDcBWgTnYhEHS5s.roa (raw, json)
Hash identifier: YFTNnhpb3lSjLYrjPBBvIrOJz7vm5gs0JqZX47OeNqM=
Subject key identifier: 91:2F:4B:CF:90:AC:40:3C:27:0C:37:01:5A:04:E7:62:11:07:4B:9B
Certificate issuer: /CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca
Certificate serial: 01856EB918E23C34150CDA59D0AA2FFF5185
Authority key identifier: 45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/kS9Lz5CsQDwnDDcBWgTnYhEHS5s.roa
Signing time: Sun 01 Jan 2023 19:05:02 +0000
ROA not before: Sun 01 Jan 2023 19:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47692
IP address blocks: 195.2.220.0/24 maxlen: 24
195.2.220.0/23 maxlen: 23
195.2.221.0/24 maxlen: 24
2001:67c:1508::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:18:e2:3c:34:15:0c:da:59:d0:aa:2f:ff:51:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca
Validity
Not Before: Jan 1 19:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=912f4bcf90ac403c270c37015a04e76211074b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:74:98:f3:98:f8:85:bc:1a:ce:65:88:0d:bc:
27:92:9a:0e:7d:98:42:08:a5:e8:ac:a5:02:db:44:
f6:e7:a6:84:58:91:6d:db:2c:4d:b4:e9:2c:ef:77:
05:21:bb:f2:d7:10:d0:7f:f5:90:8b:5f:64:1b:42:
ec:aa:5f:7c:88:47:00:35:de:32:7c:60:4d:39:ab:
79:11:29:37:f4:7b:84:cf:a6:3a:e9:e3:4c:7f:a4:
45:4e:23:da:ea:26:5d:26:e9:57:27:8f:ee:a7:b2:
f8:1c:63:06:c9:02:0e:ed:91:44:0d:fa:c9:b5:21:
c0:b5:bc:23:17:d9:e2:8a:2d:c6:ec:bd:82:09:ab:
de:89:93:c6:28:88:75:5e:7b:5c:06:96:96:68:1b:
38:b5:d0:39:65:b2:38:c6:76:6d:b2:81:fb:35:69:
7f:68:c8:04:a9:90:9c:75:05:b6:52:74:ff:2c:02:
80:9c:65:de:af:d6:85:81:81:2e:17:df:17:be:e8:
01:bd:7a:4d:60:e1:13:6c:d3:4b:41:31:a2:ac:fe:
77:41:e4:3e:35:c9:88:33:f1:a7:5a:35:a0:14:2f:
62:36:c8:90:78:25:b7:df:cc:04:0c:cc:8c:47:02:
2c:7e:ea:58:e9:2d:2f:fd:b9:10:77:a7:15:61:f9:
a6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2F:4B:CF:90:AC:40:3C:27:0C:37:01:5A:04:E7:62:11:07:4B:9B
X509v3 Authority Key Identifier:
keyid:45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/kS9Lz5CsQDwnDDcBWgTnYhEHS5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.2.220.0/23
IPv6:
2001:67c:1508::/48
Signature Algorithm: sha256WithRSAEncryption
3d:20:1f:87:31:6a:1b:be:6e:1b:dc:d3:4a:9f:a1:17:cb:ff:
a8:5f:fa:71:0d:51:81:27:2c:b9:e5:5d:4c:71:97:7a:32:d0:
90:d6:0c:2e:13:65:2d:e3:96:11:e4:5a:18:f7:db:7b:10:b4:
ad:6e:69:5c:1e:1a:d9:0c:b0:53:23:4c:07:af:38:3b:84:a1:
c5:08:6e:84:21:cf:2f:68:08:68:fb:e6:b7:51:8d:6d:02:d0:
ce:87:a7:f9:30:4a:45:c4:16:85:e4:34:93:f0:59:a9:5a:9d:
b2:1d:e7:cb:8a:8c:de:22:36:fa:95:af:34:37:b2:e6:aa:30:
e0:c6:b3:43:c3:43:1e:d3:f6:b4:4f:48:d8:4a:41:5d:b6:7d:
a5:eb:f4:c3:7c:cf:ca:c1:79:12:58:83:dc:c6:ce:e9:d0:98:
5d:f2:39:71:fa:c5:56:ac:26:f1:33:d0:1c:36:b9:f4:d6:3c:
fc:df:f3:b7:35:e6:e1:09:9d:18:38:7c:5c:7e:19:5b:9f:85:
39:24:1c:65:e0:b0:55:6b:d6:67:a0:59:4b:6b:1b:e5:ea:f3:
33:75:a4:15:08:54:d8:d4:79:2b:00:e7:85:6f:ab:85:ce:8b:
34:b7:09:42:29:0c:c6:7e:c6:e7:31:c0:e2:b7:39:2d:fd:90:
11:c1:19:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:48 2024 by rpki-client on console-ams.rpki-client.org