Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a05e77-f301-4125-9118-e4d1f0a27b21/1/lZ4wG2lk53t-UmvbgYIjykllsIo.roa
File: lZ4wG2lk53t-UmvbgYIjykllsIo.roa (raw, json)
Hash identifier: IEmYyfWyc2unl442QsZjRXBgxrrp09oa0DXREYrGqfk=
Subject key identifier: 95:9E:30:1B:69:64:E7:7B:7E:52:6B:DB:81:82:23:CA:49:65:B0:8A
Certificate issuer: /CN=cced992030531e7e8b518aefd9e267cc528eda9a
Certificate serial: 018A515476F9920787140C48BBC4C1C90FD2
Authority key identifier: CC:ED:99:20:30:53:1E:7E:8B:51:8A:EF:D9:E2:67:CC:52:8E:DA:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zO2ZIDBTHn6LUYrv2eJnzFKO2po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a05e77-f301-4125-9118-e4d1f0a27b21/1/lZ4wG2lk53t-UmvbgYIjykllsIo.roa
Signing time: Fri 01 Sep 2023 15:20:04 +0000
ROA not before: Fri 01 Sep 2023 15:20:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6939
IP address blocks: 195.170.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Oct 2023 17:40:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:51:54:76:f9:92:07:87:14:0c:48:bb:c4:c1:c9:0f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cced992030531e7e8b518aefd9e267cc528eda9a
Validity
Not Before: Sep 1 15:20:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=959e301b6964e77b7e526bdb818223ca4965b08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d4:d6:7b:1c:30:35:d3:c9:f6:de:79:0e:35:
ab:c1:6a:b9:83:69:ae:a6:61:5d:fd:89:f3:e4:42:
9d:81:ad:1c:e0:76:97:97:e4:0d:ea:f7:b0:24:6e:
2a:93:cf:a4:bd:57:4a:27:10:ce:53:98:23:98:41:
fe:8e:4b:a0:ad:70:32:5a:aa:62:6e:d4:cc:e5:f6:
1d:c8:8e:ee:bd:1b:82:9d:ed:dc:bf:b4:15:3b:c5:
e5:3c:0d:b3:3d:27:c5:1b:5c:a1:8a:9c:b2:41:a4:
37:df:81:1f:f2:52:ed:c3:fd:df:8b:fa:ee:39:49:
a0:34:01:a1:f5:bc:7b:45:43:eb:79:d3:c6:99:ad:
14:8c:bf:86:88:38:3c:1c:db:1a:40:41:e6:10:05:
13:f2:1d:80:3c:15:66:6f:48:ab:de:34:78:90:f2:
85:c7:d1:6c:cc:c7:37:ad:4b:de:e0:dd:82:f4:92:
60:22:9c:16:2c:c8:d5:78:59:59:dd:9d:a1:c2:5e:
ca:b1:e2:1a:1c:22:55:b4:ff:36:aa:3c:d8:fe:a9:
8e:90:b9:28:86:b4:c3:40:d6:75:42:86:d3:fc:6f:
f2:4b:55:86:b5:cb:8b:a6:7d:a8:d5:9e:59:f6:f9:
b8:28:8d:c7:97:f6:6a:2b:8e:0a:76:8e:1a:68:0c:
cb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9E:30:1B:69:64:E7:7B:7E:52:6B:DB:81:82:23:CA:49:65:B0:8A
X509v3 Authority Key Identifier:
keyid:CC:ED:99:20:30:53:1E:7E:8B:51:8A:EF:D9:E2:67:CC:52:8E:DA:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zO2ZIDBTHn6LUYrv2eJnzFKO2po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a05e77-f301-4125-9118-e4d1f0a27b21/1/lZ4wG2lk53t-UmvbgYIjykllsIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a05e77-f301-4125-9118-e4d1f0a27b21/1/zO2ZIDBTHn6LUYrv2eJnzFKO2po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.170.163.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:9a:ff:7d:d5:0e:0e:e1:82:32:40:c8:74:2d:d7:84:ec:f6:
ee:2a:70:f4:42:ec:76:21:b3:b6:41:cc:79:76:df:53:8e:10:
94:10:31:00:e3:d6:9c:f5:f1:38:37:1b:12:28:41:f4:f5:ed:
34:75:7a:60:5a:c8:35:67:8f:fc:34:92:5e:c7:d7:26:72:c4:
98:99:1f:27:c1:9c:eb:3d:6d:fb:c5:29:6a:bb:6c:dc:fb:df:
f9:6f:60:cc:26:87:d1:2c:19:c4:b9:03:8a:1a:f4:e6:7c:13:
58:8e:c8:df:1f:8a:d2:54:51:da:c5:47:dc:58:a3:3b:ef:54:
09:7f:8f:a0:16:6f:7b:21:31:c1:ec:a7:c5:bd:c1:f2:a9:4c:
40:0d:ca:78:45:0c:c8:50:20:9c:11:48:8b:73:19:88:e2:67:
ea:fe:00:3b:53:88:bb:ff:3b:8c:4f:2c:16:1a:73:4c:75:01:
dc:f2:04:e5:72:4f:cf:80:fc:a0:49:99:ca:74:23:ad:06:64:
8a:90:7d:bb:9d:b2:22:39:6c:43:d5:30:b4:59:ee:44:a2:23:
67:fa:95:6c:b9:05:33:1d:2d:9b:4f:9c:37:6c:db:07:36:31:
fb:d3:b8:bc:bf:10:f0:55:fa:54:dd:90:cc:54:fb:09:0d:e6:
2e:b9:6c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:47 2024 by rpki-client on console-ams.rpki-client.org