Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b6002c-ef1f-48bb-8f50-5f10b42ec8cb/1/grqdXSSrPvnWU6wJiD2iD31vSa8.roa
File: grqdXSSrPvnWU6wJiD2iD31vSa8.roa (raw, json)
Hash identifier: dsuKgR7X/lkLh6OpuCHG6xlC17b/nhXnKoD48Kb6mQ0=
Subject key identifier: 82:BA:9D:5D:24:AB:3E:F9:D6:53:AC:09:88:3D:A2:0F:7D:6F:49:AF
Certificate issuer: /CN=e9938a1e9011f2269e67a63da380019d296d9983
Certificate serial: 0185728C7FA301E59100EEB8D74D51FE616F
Authority key identifier: E9:93:8A:1E:90:11:F2:26:9E:67:A6:3D:A3:80:01:9D:29:6D:99:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b6002c-ef1f-48bb-8f50-5f10b42ec8cb/1/grqdXSSrPvnWU6wJiD2iD31vSa8.roa
Signing time: Mon 02 Jan 2023 12:54:48 +0000
ROA not before: Mon 02 Jan 2023 12:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29051
IP address blocks: 195.47.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:7f:a3:01:e5:91:00:ee:b8:d7:4d:51:fe:61:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9938a1e9011f2269e67a63da380019d296d9983
Validity
Not Before: Jan 2 12:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82ba9d5d24ab3ef9d653ac09883da20f7d6f49af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d1:0d:fc:44:99:63:44:45:bd:aa:13:41:c5:
08:e5:5c:49:ef:47:34:cb:fa:b3:de:8c:59:f6:c0:
4f:4e:34:9d:85:80:ce:b5:9f:c7:19:13:80:c1:42:
f0:0d:65:04:15:75:bf:b5:2b:c5:7a:e0:9e:2c:e3:
82:a2:65:f9:cf:5d:13:12:2a:76:ef:08:88:11:44:
16:73:d4:6d:d6:4f:11:f7:88:2c:0c:67:29:d0:26:
da:ce:e4:9b:d2:ef:bd:05:16:05:24:e8:97:15:1e:
f0:0d:9a:37:3f:0b:22:31:c8:74:6a:51:b0:de:ad:
16:57:3a:d1:ba:87:b3:df:cf:dc:78:b5:4f:26:cd:
ae:8a:ad:32:a0:42:56:80:2f:cf:ba:7e:77:2b:6d:
50:4c:c9:20:a9:3d:f6:1b:aa:d8:17:97:a1:cb:0f:
55:43:f9:e0:97:4b:9d:77:c4:b8:2a:eb:f1:6a:e9:
91:50:95:e2:62:3b:f2:dc:f1:a2:64:a2:9b:04:71:
9c:73:ae:aa:61:15:3a:f4:ea:d2:1a:ce:63:cf:35:
1c:94:ba:6d:3f:76:49:d1:07:f3:5e:0a:dd:3f:1d:
6c:93:06:29:be:16:21:d3:4c:a1:99:00:bc:01:24:
7e:6e:22:46:87:da:2e:f3:cd:46:97:b2:7d:83:e5:
a0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BA:9D:5D:24:AB:3E:F9:D6:53:AC:09:88:3D:A2:0F:7D:6F:49:AF
X509v3 Authority Key Identifier:
keyid:E9:93:8A:1E:90:11:F2:26:9E:67:A6:3D:A3:80:01:9D:29:6D:99:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b6002c-ef1f-48bb-8f50-5f10b42ec8cb/1/grqdXSSrPvnWU6wJiD2iD31vSa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b6002c-ef1f-48bb-8f50-5f10b42ec8cb/1/6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.226.0/24
Signature Algorithm: sha256WithRSAEncryption
67:36:e7:62:b4:0d:49:9e:69:15:a9:bd:ad:b8:21:91:1e:bb:
d4:a3:eb:b8:f6:09:e9:26:43:41:40:f3:de:a1:da:4f:75:46:
b1:39:8a:79:19:32:6e:1d:53:b5:bb:00:dc:0c:46:9c:39:27:
50:eb:43:ea:3a:c6:7b:c2:2a:06:3c:21:73:63:ed:95:15:37:
de:9a:11:61:e7:66:93:b8:71:25:14:b2:49:66:11:5f:65:ba:
f4:df:aa:85:dc:84:1f:e3:fa:17:37:83:8b:a3:f7:6b:6e:3c:
fb:7d:bb:8d:de:38:ac:1c:3f:19:8e:0b:2d:5d:76:29:e8:66:
ca:30:81:48:6a:22:d8:a5:c2:9e:98:92:00:19:aa:55:17:30:
78:b6:27:42:2b:82:a1:d0:3b:78:59:72:f7:67:b1:00:44:38:
1f:b2:a1:1e:66:ea:3f:9c:e2:75:01:f1:9e:a7:44:27:53:47:
b0:c1:a9:02:47:d3:c7:8d:c1:04:58:09:de:8a:b1:c6:88:75:
9e:e4:af:5f:cd:07:46:e7:12:00:c2:fd:a9:e8:2f:d6:28:1c:
2c:90:f0:69:de:f0:82:4f:4e:7b:02:52:2f:d6:ec:a9:7f:11:
6d:e8:c1:9c:b8:be:0b:c0:e8:5c:8f:1e:24:6b:39:29:2d:fa:
0e:3f:69:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:48 2024 by rpki-client on console-fra.rpki-client.org