Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/awMwn_R_u7oj7JMB8wMpKQctV7M.roa
File: awMwn_R_u7oj7JMB8wMpKQctV7M.roa (raw, json)
Hash identifier: mriSUVGFewV9MB2M/3QTDo4RuSvfvQyRrfGbCavpYvk=
Subject key identifier: 6B:03:30:9F:F4:7F:BB:BA:23:EC:93:01:F3:03:29:29:07:2D:57:B3
Certificate issuer: /CN=a1c130072d2ce9cf562b83198edaadafa48f6db4
Certificate serial: 018CC7954631E2FE40666AC77708E3CB25CC
Authority key identifier: A1:C1:30:07:2D:2C:E9:CF:56:2B:83:19:8E:DA:AD:AF:A4:8F:6D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/awMwn_R_u7oj7JMB8wMpKQctV7M.roa
Signing time: Tue 02 Jan 2024 00:31:37 +0000
ROA not before: Tue 02 Jan 2024 00:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210169
IP address blocks: 195.95.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:46:31:e2:fe:40:66:6a:c7:77:08:e3:cb:25:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1c130072d2ce9cf562b83198edaadafa48f6db4
Validity
Not Before: Jan 2 00:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b03309ff47fbbba23ec9301f3032929072d57b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1c:83:ee:13:74:45:b2:07:cd:dc:6e:9a:a3:
96:d9:9b:34:cb:17:43:1f:24:b5:e5:33:0b:f4:22:
0c:c5:b4:e0:9a:0f:c9:8c:83:92:2b:df:9b:cf:67:
45:e9:f1:a0:9e:71:e5:16:c3:5c:c8:57:d9:06:73:
3d:79:ab:03:64:96:4a:9e:4e:58:a0:f7:1e:73:bc:
06:1b:66:e8:e8:0f:d8:11:34:41:1e:38:cb:04:1d:
6b:30:fe:34:70:ba:c1:fc:8d:a7:9a:6b:2f:85:82:
62:a2:87:42:ca:38:19:bf:5e:23:00:52:e5:3d:8d:
b9:ef:5c:7e:77:ee:77:78:33:8d:37:a7:70:97:7e:
84:14:c3:03:34:7d:a0:78:67:76:f0:b6:51:f7:c0:
31:0a:0c:f7:b4:9d:50:73:60:c7:90:86:ae:48:ce:
09:bd:c8:bc:bc:92:0e:5b:bf:b6:f4:fa:75:74:07:
11:f5:30:99:ae:4d:6c:e8:70:b5:1c:c1:9e:16:8a:
b6:53:83:7f:71:7c:ac:2e:ba:07:07:36:c2:fb:05:
67:c7:13:6d:d2:be:8b:1f:fc:a4:5d:4f:70:3d:c1:
63:42:80:b3:12:8b:1e:87:5a:14:dc:17:10:ea:ae:
00:79:89:8e:c4:82:90:13:6d:a6:f9:f9:9b:65:75:
da:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:03:30:9F:F4:7F:BB:BA:23:EC:93:01:F3:03:29:29:07:2D:57:B3
X509v3 Authority Key Identifier:
keyid:A1:C1:30:07:2D:2C:E9:CF:56:2B:83:19:8E:DA:AD:AF:A4:8F:6D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/awMwn_R_u7oj7JMB8wMpKQctV7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.151.0/24
Signature Algorithm: sha256WithRSAEncryption
10:e7:dd:d8:f0:4d:a0:4b:0a:a5:62:61:7e:3b:f2:66:e0:72:
34:85:c4:a4:bf:f1:06:8d:2d:c6:76:19:c2:7e:ba:c1:ed:fc:
8e:f8:2e:29:2d:35:5a:10:35:2d:1d:23:cf:46:24:94:ad:04:
e1:03:16:03:f4:1e:23:c9:e4:a6:46:e2:56:4c:13:a6:39:5c:
a6:86:5e:7d:5c:2d:ee:fe:29:f3:2d:1c:b5:8a:ce:72:de:ea:
72:b9:0e:6c:78:af:73:8d:51:d8:f5:e0:41:af:52:67:40:bc:
20:59:10:7f:aa:8d:c6:cb:b6:9f:ca:04:19:2e:e9:f0:94:a4:
5b:a9:40:f4:de:74:49:6c:eb:6a:d7:45:be:c0:86:b2:0f:97:
a1:78:98:b0:31:20:ee:f3:4d:a5:d7:82:f2:d0:ac:ef:04:3d:
e8:ce:fc:24:9b:61:f9:30:91:42:26:3f:c6:d7:96:da:29:bb:
c8:bd:f8:de:d2:04:3e:73:f3:b4:d6:ce:9f:80:3e:bd:d3:ee:
ac:c3:00:fd:a9:54:be:0a:63:6f:fc:4d:dc:b7:c9:8d:18:2f:
f7:e2:93:38:7b:54:53:85:bf:6d:2c:80:03:bd:f2:b0:4d:03:
0a:91:d6:08:c2:fa:e2:eb:ae:bd:fa:ce:2c:76:33:df:a6:1d:
d3:e7:ad:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:08 2025 by rpki-client