Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/93bkeYanORJVH-dkFH_pHy6dTIs.roa
File: 93bkeYanORJVH-dkFH_pHy6dTIs.roa (raw, json)
Hash identifier: b9pGzKkVEkN8ZhnZvY8KDja3GUNQlMmYbS9Hd1ATKKQ=
Subject key identifier: F7:76:E4:79:86:A7:39:12:55:1F:E7:64:14:7F:E9:1F:2E:9D:4C:8B
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 01856F5DD83795ABD85ECF11A684AC3378C1
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/93bkeYanORJVH-dkFH_pHy6dTIs.roa
Signing time: Sun 01 Jan 2023 22:04:59 +0000
ROA not before: Sun 01 Jan 2023 22:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31117
IP address blocks: 195.168.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:d8:37:95:ab:d8:5e:cf:11:a6:84:ac:33:78:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 22:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f776e47986a73912551fe764147fe91f2e9d4c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e7:94:ff:69:95:85:58:cc:66:ac:1b:39:36:
db:99:52:1f:a2:94:ac:ae:b1:47:f5:df:af:ce:26:
02:c4:92:17:11:ab:19:14:31:f1:1a:6f:1d:16:e2:
5b:70:29:2e:bf:af:64:80:e5:b3:69:ad:4c:73:30:
48:a6:a2:50:22:09:90:ba:90:06:32:5c:57:3e:95:
80:7d:41:ba:76:d9:d6:3b:ad:a8:cd:bb:e7:9b:0f:
95:09:5f:fd:44:75:77:a2:23:d3:06:22:7f:9a:b6:
9f:10:6b:17:27:86:ea:6c:28:6e:15:eb:7b:27:1e:
36:4d:f9:32:29:90:f5:31:e0:66:00:58:fd:5e:c9:
f3:ce:64:49:b5:e6:1e:6e:6e:0e:a6:55:40:30:e2:
0b:09:bf:c2:65:de:68:90:00:12:5f:05:96:02:59:
4a:3f:7f:28:7a:b5:28:29:b5:e9:c3:31:85:db:35:
93:6a:d0:81:f1:15:71:cf:da:11:ae:10:50:f9:85:
60:ef:b6:53:56:0e:4f:c1:c1:bc:bc:71:8f:2a:11:
99:1b:de:18:12:3e:28:6f:52:7b:e6:33:0e:17:ab:
c1:8e:7e:0b:18:ee:2f:6c:30:3f:5d:f3:a9:e6:47:
f1:6c:f2:10:95:98:57:01:78:ed:e3:57:06:3c:e0:
51:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:76:E4:79:86:A7:39:12:55:1F:E7:64:14:7F:E9:1F:2E:9D:4C:8B
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/93bkeYanORJVH-dkFH_pHy6dTIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.168.216.0/24
Signature Algorithm: sha256WithRSAEncryption
56:d7:be:73:32:bd:79:68:a5:81:22:45:2d:18:fd:59:75:38:
6e:62:f3:88:3e:11:30:6c:09:5d:5d:6e:8b:82:70:c8:03:01:
2f:d5:60:b2:14:0e:ac:71:f9:91:ee:da:b3:de:97:1b:ba:c9:
ad:89:a2:e0:0c:5b:59:9e:03:6c:87:37:f6:76:65:06:96:cc:
39:9c:e4:8e:6e:2a:74:f1:95:e7:0c:5d:64:00:f2:3a:b4:9d:
2d:8b:17:e6:58:71:a9:98:9d:f7:a8:51:16:4c:13:8e:e3:1e:
1a:7c:a1:ef:14:59:ea:df:b1:e3:e4:45:3c:1f:12:be:df:b7:
bc:88:2b:18:40:9f:13:ed:28:7f:6a:11:e5:d4:ad:7c:fd:46:
43:fb:70:83:7a:03:85:43:e9:fe:5a:55:30:e6:c6:53:af:11:
8f:ed:e7:11:9a:3b:3e:1a:2c:5f:0d:e0:22:c1:2d:fb:75:ab:
c5:3a:12:2e:e1:40:a1:db:a7:fb:89:7f:7e:9e:47:72:1d:07:
95:00:11:cf:5e:d4:68:b2:9d:42:dc:c3:60:a9:91:1b:f7:b2:
c8:19:60:ec:71:78:94:ae:4a:c2:82:b0:54:83:a4:43:20:46:
f8:7e:9d:08:3a:8d:d9:8e:eb:e2:58:28:d6:d9:70:ed:8b:59:
ed:40:d9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:57 2024 by rpki-client on console-ams.rpki-client.org