Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/_1mtiEw-jM2jugF43iu6IJec_Ms.roa
File: _1mtiEw-jM2jugF43iu6IJec_Ms.roa (raw, json)
Hash identifier: xsAJcRfzCSfVMRe+ODDauzxo5Yf/FVKeKeFabCi/bFM=
Subject key identifier: FF:59:AD:88:4C:3E:8C:CD:A3:BA:01:78:DE:2B:BA:20:97:9C:FC:CB
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 018993B3E0AB848EE54A5D7E10D2F444A9D4
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/_1mtiEw-jM2jugF43iu6IJec_Ms.roa
Signing time: Wed 26 Jul 2023 19:36:26 +0000
ROA not before: Wed 26 Jul 2023 19:36:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41718
IP address blocks: 195.216.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:93:b3:e0:ab:84:8e:e5:4a:5d:7e:10:d2:f4:44:a9:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Jul 26 19:36:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff59ad884c3e8ccda3ba0178de2bba20979cfccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:99:33:40:67:de:d2:b9:07:c7:2f:ab:1e:6d:
fb:6e:7c:ae:0c:47:f0:44:41:38:f3:93:10:09:d1:
f1:79:ad:04:35:89:22:92:23:c3:3f:ed:fe:37:8b:
44:2c:3d:29:3b:58:31:2e:77:8c:53:f0:d1:fa:be:
7d:40:c0:d5:2d:10:e9:25:eb:dc:e9:a8:6b:91:61:
e6:1c:07:07:ed:ba:7b:9f:84:d8:39:ec:bc:de:11:
e3:8d:a6:0c:09:85:f7:fb:46:67:3f:ca:65:39:2b:
c7:59:30:59:05:08:c9:c5:f2:0d:be:e0:bc:14:c7:
3e:d9:3d:cb:b0:2d:c1:c3:f0:4e:f9:b9:31:50:12:
97:e2:3c:47:1d:62:1a:57:75:73:be:08:f2:29:28:
27:03:73:26:54:ef:84:d2:8c:58:61:3d:0d:c0:bb:
05:24:9a:9a:71:1e:0c:96:23:5b:f7:8d:83:b6:a0:
ea:3b:db:35:fd:f6:bf:ff:d5:0f:6c:d7:8d:69:91:
7e:bd:47:1d:08:78:71:7a:5d:38:55:8d:75:e7:79:
eb:4f:a7:a0:59:77:3f:66:59:5b:17:be:33:51:69:
15:5e:bd:34:6f:ce:5f:9d:42:42:69:d3:96:c0:64:
e9:e2:4f:3a:44:89:1b:a9:60:84:8d:0d:58:e7:4b:
f0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:59:AD:88:4C:3E:8C:CD:A3:BA:01:78:DE:2B:BA:20:97:9C:FC:CB
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/_1mtiEw-jM2jugF43iu6IJec_Ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.153.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:86:69:cc:83:5c:39:bb:6a:c7:2e:74:37:f0:11:27:60:95:
37:1e:0d:b8:59:a4:13:e9:e2:b5:ff:36:38:fe:cd:39:8d:1c:
1a:9e:c4:ee:48:19:7f:b6:a2:ad:f1:f4:91:3e:5e:60:59:91:
91:49:38:5d:06:29:73:fd:e9:a7:b6:ad:6f:e8:ed:af:fa:8a:
f0:5b:07:b6:dc:d4:11:e7:f7:c6:bc:94:29:48:03:df:8e:75:
0a:1f:3e:95:be:7e:f4:0d:d8:3c:4d:fa:52:2e:01:66:d9:c4:
c6:29:da:1f:15:6a:17:02:cb:38:c0:de:42:a0:49:f2:25:2b:
f5:ca:0f:4e:8f:7d:32:97:68:5c:b1:0f:2b:68:68:0d:c3:4f:
38:7d:ec:ce:f8:ab:84:ec:8c:0c:86:87:00:51:d0:b4:c6:9c:
1e:5c:32:13:1c:d8:3f:8b:f2:9c:c6:a2:07:33:77:46:6f:76:
a0:18:d1:1d:b4:2e:49:f0:f3:85:c9:73:05:62:8f:3d:2b:81:
90:3c:94:2d:ad:2f:d6:2c:19:81:91:1b:0f:4a:33:c0:e7:23:
99:7b:c6:63:c8:ea:df:a3:53:6a:a9:ee:c6:42:24:a0:f4:8c:
c3:07:22:af:eb:cc:69:c9:f8:ef:5c:54:25:dd:56:77:f3:78:
fd:66:ba:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:26 2024 by rpki-client on console-ams.rpki-client.org