Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/3klWlv5nbN3jwpZ9lJoOiQ9SKXs.roa
File: 3klWlv5nbN3jwpZ9lJoOiQ9SKXs.roa (raw, json)
Hash identifier: 7cQ3Rvz/pWy4lhBA3jLh3IgyEquaeD+6JOL0rT8Kzow=
Subject key identifier: DE:49:56:96:FE:67:6C:DD:E3:C2:96:7D:94:9A:0E:89:0F:52:29:7B
Certificate issuer: /CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68
Certificate serial: 0185737A72A47B09AB358CE61BDAE3D03BD0
Authority key identifier: 6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/3klWlv5nbN3jwpZ9lJoOiQ9SKXs.roa
Signing time: Mon 02 Jan 2023 17:14:42 +0000
ROA not before: Mon 02 Jan 2023 17:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199132
IP address blocks: 195.234.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:72:a4:7b:09:ab:35:8c:e6:1b:da:e3:d0:3b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68
Validity
Not Before: Jan 2 17:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de495696fe676cdde3c2967d949a0e890f52297b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4b:7a:70:33:6d:08:73:f2:c3:09:00:1c:e2:
bf:45:5d:d3:3b:67:dd:0f:31:ec:82:ba:e9:58:f2:
cb:8d:09:5b:30:46:1f:c6:d0:89:01:95:49:34:23:
c8:67:af:dc:06:fb:3a:b3:6f:f9:a5:b1:65:6e:62:
e6:57:0c:77:24:8a:84:fb:a0:f4:ac:38:c5:d0:29:
70:ed:4a:af:3c:f6:99:c2:21:e2:0e:65:fb:7d:ff:
6d:f8:c1:a7:6f:2d:46:76:db:e7:ca:24:ba:24:af:
6f:43:13:11:3a:f6:32:93:6b:30:1f:ef:cc:be:10:
4a:06:a7:e4:ca:22:78:51:0e:d3:e3:78:ec:39:b2:
ea:ca:5c:95:83:88:5c:03:73:40:ef:8d:1b:6b:9e:
29:7d:8d:f9:b5:64:89:4e:9b:39:d6:8e:6d:e5:d3:
75:82:2b:96:14:30:32:45:40:b8:c8:61:6f:fb:1d:
e9:70:c0:bc:a2:f5:d0:66:78:04:23:6b:83:eb:51:
6b:9d:d6:b1:37:83:80:29:dd:7c:71:9e:ca:82:37:
26:ef:b0:63:3a:f7:92:b6:57:81:5d:8e:da:4d:84:
61:b3:43:0b:b3:b4:f0:73:e0:6d:f4:e8:07:e7:4b:
e8:1b:4d:9e:b4:04:7a:d2:2a:5c:90:09:e2:43:df:
5f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:49:56:96:FE:67:6C:DD:E3:C2:96:7D:94:9A:0E:89:0F:52:29:7B
X509v3 Authority Key Identifier:
keyid:6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/3klWlv5nbN3jwpZ9lJoOiQ9SKXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.138.0/24
Signature Algorithm: sha256WithRSAEncryption
06:d9:03:34:f0:2f:ae:e2:45:fe:d0:3c:c6:43:e0:5a:2b:d0:
e9:9a:ee:7c:c1:14:37:f2:51:e2:38:f4:df:29:de:31:57:1b:
41:0a:b5:86:47:f6:2d:86:b7:a9:7e:b6:ff:be:2a:cf:6a:e2:
1d:51:f6:94:20:95:2d:d3:63:c0:ff:ed:5d:2e:f0:5c:e6:fd:
f1:74:76:d7:4a:60:98:55:45:3f:28:38:f1:62:cd:db:d1:12:
20:45:b5:0b:b8:0c:93:3b:ea:ad:93:8d:80:be:26:c6:20:31:
43:8a:c5:f0:f9:b6:5c:ff:68:ca:eb:20:1c:35:35:74:39:ad:
a6:54:13:22:03:7f:e4:e5:2a:82:db:24:ff:7c:eb:8d:55:cd:
5e:6c:81:15:9d:50:3b:84:40:2b:aa:2a:a9:ca:f8:d6:1d:43:
e4:10:8d:d1:5e:71:97:1a:48:89:0b:47:08:b5:2b:68:86:5c:
fd:68:cc:25:13:61:c6:da:9e:89:90:44:8d:eb:87:52:2c:18:
4e:26:85:88:b5:6e:6e:14:20:36:07:ab:ec:6b:78:7c:44:6f:
02:6a:c4:75:ba:eb:bb:34:c4:15:e6:18:25:2c:a6:44:ef:16:
a3:b0:e8:b9:7a:cd:6b:31:4c:fa:71:97:37:ab:2b:b6:55:a9:
10:a9:dc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:06 2024 by rpki-client on console-ams.rpki-client.org