Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/I7PyocGAxSJ62mHjvzx53AC3D4I.roa
File: I7PyocGAxSJ62mHjvzx53AC3D4I.roa (raw, json)
Hash identifier: tNApJ3am8jHjVv47mvXXYHKkNVwINblo899iptEf9Ag=
Subject key identifier: 23:B3:F2:A1:C1:80:C5:22:7A:DA:61:E3:BF:3C:79:DC:00:B7:0F:82
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0A2133FFA6B1F035D183D95C82A1C
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/I7PyocGAxSJ62mHjvzx53AC3D4I.roa
Signing time: Mon 02 Jan 2023 05:24:56 +0000
ROA not before: Mon 02 Jan 2023 05:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39039
IP address blocks: 195.136.190.0/23 maxlen: 23
195.136.110.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:a2:13:3f:fa:6b:1f:03:5d:18:3d:95:c8:2a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23b3f2a1c180c5227ada61e3bf3c79dc00b70f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:13:96:c9:83:82:e4:a1:0b:71:37:a5:8c:de:
ac:79:01:08:b8:51:c5:59:84:78:38:76:1a:59:2d:
df:72:3e:0f:91:7a:5e:08:87:b0:21:6a:93:b3:fc:
aa:25:85:f9:d2:ce:55:1b:71:5e:62:ac:6b:80:9a:
da:0f:5b:bf:9a:37:ef:54:22:8e:ee:a2:60:ec:30:
66:46:0d:79:33:95:1b:97:9d:dd:96:d8:17:30:54:
30:70:f5:04:81:29:48:f1:50:35:50:bb:bd:00:78:
3b:e0:10:cc:4d:a7:09:b9:d7:c6:a7:9a:60:a5:71:
89:2c:83:8f:42:cc:65:c7:eb:d9:f0:0b:df:f7:fe:
24:67:84:0c:2c:21:cb:72:40:b9:3a:ba:39:d2:0b:
c9:59:39:22:33:7c:d7:ad:c2:44:bf:04:68:92:28:
58:24:7c:c0:fe:65:1d:2b:93:6f:b8:f8:94:b4:c5:
7b:29:2f:dd:3f:50:de:78:53:71:f7:7a:29:cd:95:
29:8f:e3:a1:a0:fe:59:1c:b1:8c:9f:ac:e1:52:99:
a4:ee:2e:bf:f8:d4:80:29:b3:51:5d:46:ae:32:8b:
11:2d:c2:8e:0e:5d:a8:07:15:8f:48:26:c3:6e:8f:
12:25:54:3b:e4:4a:1c:02:6b:91:a5:82:a0:e8:97:
4f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B3:F2:A1:C1:80:C5:22:7A:DA:61:E3:BF:3C:79:DC:00:B7:0F:82
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/I7PyocGAxSJ62mHjvzx53AC3D4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.110.0/23
195.136.190.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:7e:f9:a3:94:20:9f:c5:c4:96:3a:7e:5c:24:73:99:bf:69:
6a:5c:e1:8b:34:21:d7:ea:5f:74:99:24:d5:d9:a8:4f:09:3e:
59:6d:52:5a:29:92:69:1b:21:b7:14:b9:c1:45:34:eb:f6:5f:
b3:2e:4a:69:f1:92:5d:a4:fb:24:f6:04:28:78:f2:d2:5f:66:
5b:23:4f:d8:92:92:ce:e9:95:bb:0e:98:db:bd:c4:48:8d:7a:
3c:96:18:17:04:f3:16:59:b9:30:97:53:b8:cd:a0:c8:7e:d5:
dd:2b:ca:40:23:72:d7:c0:51:a2:36:89:91:09:bf:4b:fd:f2:
0c:4b:e2:7f:33:52:22:0e:e0:e4:53:4c:12:99:94:22:a0:7e:
83:2f:7f:91:4e:ea:03:0c:53:cb:15:99:b2:5e:47:20:0e:1a:
94:c3:48:36:92:7d:1d:e4:e1:53:36:4e:65:49:b8:3f:f9:0a:
07:29:47:27:10:0f:99:99:37:95:e7:29:c4:52:ea:2a:cb:37:
03:8a:82:68:ed:c2:c6:d4:07:50:85:da:53:44:39:7a:3a:bc:
78:ef:59:5c:a2:d8:ce:b5:07:c0:14:4f:46:c7:57:e9:9f:78:
ff:7d:87:cc:cd:28:07:77:b1:76:28:6b:7f:fc:f5:0e:a4:49:
61:05:bf:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:36 2024 by rpki-client on console-fra.rpki-client.org