Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/dRW-JmyUqZon7M0bO8dhPZZp01o.roa
File: dRW-JmyUqZon7M0bO8dhPZZp01o.roa (raw, json)
Hash identifier: yQ9cyBAjSjKGX73T9Wzz7spMZH2lcsxoViQi3i2QR+U=
Subject key identifier: 75:15:BE:26:6C:94:A9:9A:27:EC:CD:1B:3B:C7:61:3D:96:69:D3:5A
Certificate issuer: /CN=686596b33b48c2935dd129fac6e61dbc008193ff
Certificate serial: 01856F2FF8D6A9EEDF46701D1A84A0E99E5D
Authority key identifier: 68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/dRW-JmyUqZon7M0bO8dhPZZp01o.roa
Signing time: Sun 01 Jan 2023 21:14:52 +0000
ROA not before: Sun 01 Jan 2023 21:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47174
IP address blocks: 195.216.228.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:f8:d6:a9:ee:df:46:70:1d:1a:84:a0:e9:9e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686596b33b48c2935dd129fac6e61dbc008193ff
Validity
Not Before: Jan 1 21:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7515be266c94a99a27eccd1b3bc7613d9669d35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:17:e9:df:06:24:62:ce:9a:cc:bb:cc:76:20:
fe:ed:4c:bd:dd:c7:ef:dd:7b:e3:d5:87:20:1d:9a:
3e:c6:bc:36:01:d7:02:84:ab:06:85:5a:a1:c2:fc:
50:87:ed:88:01:aa:10:10:7c:56:69:1a:59:30:08:
28:08:23:20:1c:84:7e:d4:3d:a3:3b:33:41:4f:28:
72:3e:ad:6c:03:04:a2:a4:7f:18:4f:65:d7:bc:84:
e6:6e:cd:3c:4d:c9:18:c0:25:21:1c:d3:d7:0e:0c:
df:52:07:18:05:c7:a0:33:98:a3:26:5b:47:75:96:
00:d6:da:44:a8:53:c1:3f:74:ec:32:88:d1:bd:ba:
1e:c8:c9:80:d9:94:c8:17:cd:5c:2b:38:7a:21:db:
83:53:e2:83:57:86:99:1e:94:a4:4c:9e:4c:77:83:
25:79:01:e3:63:d9:fe:3d:0e:dd:33:51:4e:ea:23:
71:35:a6:b4:dd:57:7f:a3:49:9f:32:47:ac:1f:e7:
21:c9:2f:89:ee:81:e2:03:79:12:02:03:2b:56:2e:
a7:36:a0:85:84:72:59:bd:86:60:53:8a:24:f7:87:
5b:d7:c1:49:23:cc:46:79:88:97:d5:14:37:c6:39:
d8:4d:35:61:4d:81:8c:bd:5c:50:cf:0e:b5:2b:d5:
d2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:15:BE:26:6C:94:A9:9A:27:EC:CD:1B:3B:C7:61:3D:96:69:D3:5A
X509v3 Authority Key Identifier:
keyid:68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/dRW-JmyUqZon7M0bO8dhPZZp01o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.228.0/24
Signature Algorithm: sha256WithRSAEncryption
50:04:a9:43:fa:30:08:82:59:21:c8:03:64:dd:0b:4f:c7:63:
5b:13:33:90:d2:89:1b:e3:bb:0d:f3:7b:5c:ea:ba:9d:b8:fa:
e6:e2:f4:d7:8d:74:2b:2f:72:1c:11:3e:a2:6e:7d:c5:7a:e6:
09:68:3e:1a:31:cf:73:b0:b2:c5:26:72:8a:7e:15:5d:9b:a0:
fc:f0:53:25:15:42:2b:7f:55:33:f0:7e:d2:a4:a1:09:46:f6:
be:b6:7a:6e:16:d4:72:a8:3c:24:81:a0:3b:92:6a:c3:c9:5a:
0f:d2:ae:ce:a1:82:2b:1c:ef:f4:a4:11:b8:77:40:f8:2e:fb:
26:85:1d:7e:dc:87:d2:bd:35:72:23:3c:11:a9:6b:7c:e2:a3:
a7:e2:18:d3:62:da:09:f5:9c:22:5c:9d:b6:61:91:e8:db:76:
7b:7d:ce:fd:c9:a7:b2:97:5e:95:19:98:51:b6:71:41:93:73:
3a:b6:97:41:43:78:ff:00:2e:88:52:29:0e:69:96:19:1f:2e:
47:df:7c:67:08:ea:d2:ea:0b:d1:dc:99:ac:0d:1d:51:a9:5b:
c4:4a:df:7b:36:46:e1:f6:6a:c0:67:6a:18:f1:73:94:39:53:
a5:de:e6:60:46:bb:e4:1c:b2:6e:c3:dc:79:74:3a:8c:ba:40:
72:e7:9f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:31 2024 by rpki-client on console-ams.rpki-client.org