Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/1pWb9u84AEeWHAmWdwkbbYbscVM.roa
File: 1pWb9u84AEeWHAmWdwkbbYbscVM.roa (raw, json)
Hash identifier: WI1qZuf0bUCuIhu3qoZVc1t2rEBbIVeXjABlaYJN4fQ=
Subject key identifier: D6:95:9B:F6:EF:38:00:47:96:1C:09:96:77:09:1B:6D:86:EC:71:53
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 01857195566A1E045EFA0D49AE14D7141D34
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/1pWb9u84AEeWHAmWdwkbbYbscVM.roa
Signing time: Mon 02 Jan 2023 08:24:50 +0000
ROA not before: Mon 02 Jan 2023 08:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 288
IP address blocks: 195.169.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:56:6a:1e:04:5e:fa:0d:49:ae:14:d7:14:1d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 2 08:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6959bf6ef380047961c099677091b6d86ec7153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1f:e1:a2:42:4e:9d:6d:88:88:e9:2b:28:33:
1a:38:c3:26:e0:64:df:c1:96:ef:1b:72:22:8c:4b:
2b:51:3d:19:34:ed:08:7b:4b:60:08:d3:13:22:f4:
71:4b:5b:e0:b6:97:4d:40:50:0e:8f:cb:e0:92:b8:
aa:54:6a:fc:57:3e:62:33:4d:ae:1e:28:56:12:9f:
25:c2:9b:3c:a0:cf:34:aa:6e:4f:5f:2f:45:55:81:
db:f1:0f:c3:30:24:30:d9:42:5a:12:84:a0:f8:33:
d9:23:ca:23:25:b0:4d:a4:05:b1:70:08:37:75:fe:
1c:46:e7:f1:d6:1e:86:11:0e:6f:45:5c:dc:aa:d7:
0d:a8:c5:b4:fe:99:84:e9:2d:6e:15:d9:d0:c4:37:
b3:e3:3f:82:8d:fe:52:53:16:1d:03:fd:ae:a4:4f:
04:0d:4e:68:ab:81:6a:24:58:a4:de:7d:6a:d3:a7:
a1:5b:e4:e7:96:a6:2c:b9:ad:bb:d0:53:7d:03:83:
77:ff:d2:a2:7e:e3:9a:a6:aa:02:4d:43:0c:67:83:
d3:2e:eb:5b:69:61:c1:3e:6c:ff:5a:a9:44:b0:f3:
64:08:c6:d8:0f:c6:a7:45:a2:e1:15:7a:5e:e2:ce:
3a:58:c8:bd:69:10:06:a0:9d:9d:b3:58:8f:e6:71:
2f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:95:9B:F6:EF:38:00:47:96:1C:09:96:77:09:1B:6D:86:EC:71:53
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/1pWb9u84AEeWHAmWdwkbbYbscVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.169.140.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:16:95:70:b2:e3:2a:d7:14:f0:bd:0b:a9:d2:02:cc:ab:64:
c2:cb:c1:60:7e:4e:ca:7c:2e:b7:26:5c:b6:dd:e4:20:89:bc:
81:10:4d:60:b6:96:cc:f4:53:0f:80:25:19:a7:41:c6:bd:2c:
31:6f:0b:21:f2:e3:ae:59:5f:8f:0d:dc:1f:ff:89:f9:ad:51:
ae:92:2a:48:f9:9e:d8:3b:fb:8f:5a:70:16:65:8a:c3:15:b6:
b4:ae:73:70:1f:fb:52:45:9c:d8:0c:c5:b9:9b:f4:0e:fe:85:
94:f4:4e:1f:4b:41:70:84:b0:3a:38:b4:d4:f6:b7:6a:7e:cb:
b2:10:84:ca:66:2c:bc:22:e1:43:a1:e4:3f:19:ce:8a:ee:1e:
94:eb:a2:32:08:bb:f9:eb:7e:c5:dd:7d:8e:b4:af:9c:52:6c:
8a:fa:e6:0a:18:46:19:fc:31:25:e8:6c:cd:f4:5f:44:d8:be:
2b:82:ab:ae:62:b1:a6:d2:fb:9d:3f:23:3f:d1:ae:e7:bb:a5:
ad:3d:da:c5:c2:80:43:3d:b8:18:f4:90:0c:8a:41:0d:b5:bf:
9e:da:0a:5e:2c:46:b9:03:67:b3:30:df:b5:1a:06:6c:22:85:
81:04:50:b2:71:a2:aa:47:b6:6f:2b:81:48:91:2c:2a:ce:01:
8b:d1:1d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:44 2024 by rpki-client on console-ams.rpki-client.org