Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/EroN2Lki44eYDbx4AYa6XpqbVH0.roa
File: EroN2Lki44eYDbx4AYa6XpqbVH0.roa (raw, json)
Hash identifier: XykJCzgXN+To1MhyVifx8WCtOnnIqpTE1/NoZ9zmsP8=
Subject key identifier: 12:BA:0D:D8:B9:22:E3:87:98:0D:BC:78:01:86:BA:5E:9A:9B:54:7D
Certificate issuer: /CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Certificate serial: 01856F1DC01C2166C534B69C8938A018A8F6
Authority key identifier: F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/EroN2Lki44eYDbx4AYa6XpqbVH0.roa
Signing time: Sun 01 Jan 2023 20:54:58 +0000
ROA not before: Sun 01 Jan 2023 20:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49225
IP address blocks: 195.160.172.0/24 maxlen: 24
195.160.172.0/23 maxlen: 24
2001:678:560::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 09 Jul 2023 11:37:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:c0:1c:21:66:c5:34:b6:9c:89:38:a0:18:a8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Validity
Not Before: Jan 1 20:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12ba0dd8b922e387980dbc780186ba5e9a9b547d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f9:22:58:f2:8d:a7:0e:ce:c3:bc:03:81:09:
6a:3e:5c:78:55:f6:08:e8:be:eb:40:c0:b9:49:1c:
0c:46:ab:90:60:16:a9:66:9c:08:fc:28:61:36:1a:
92:43:c7:68:5c:9d:c9:5d:14:51:1a:26:30:ea:d7:
d7:38:67:ce:6e:4c:d5:1c:6b:e4:28:95:65:e4:1a:
eb:1a:bd:8e:84:52:12:74:a7:ee:92:e2:40:10:7a:
62:59:b2:50:e7:56:16:76:19:5c:f4:55:d0:9c:cc:
95:9b:3b:d3:c7:61:c5:52:8a:e6:7a:91:da:71:20:
54:8b:c0:af:83:82:90:ca:9a:52:b9:59:19:da:c0:
83:2a:2c:ac:6f:27:46:c0:e0:d2:bd:43:b7:b4:c9:
7c:59:6e:a7:ce:ed:9d:d8:8d:c4:a8:cc:77:ed:32:
9f:56:53:28:e3:bc:4b:62:f1:b7:d1:47:87:6d:72:
c3:7e:08:54:34:95:de:42:48:d4:24:be:90:fc:ce:
83:92:cc:25:4d:c2:40:80:4b:10:f0:61:40:d9:f8:
76:b9:71:a0:34:28:f7:c2:1b:a7:ca:70:d8:a6:ea:
6e:cd:81:1a:06:91:10:ba:47:4e:15:3a:19:d8:32:
a7:b2:91:27:04:23:d5:de:ae:87:bf:40:59:7d:f8:
4b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BA:0D:D8:B9:22:E3:87:98:0D:BC:78:01:86:BA:5E:9A:9B:54:7D
X509v3 Authority Key Identifier:
keyid:F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/EroN2Lki44eYDbx4AYa6XpqbVH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.160.172.0/23
IPv6:
2001:678:560::/48
Signature Algorithm: sha256WithRSAEncryption
4e:67:3e:6c:bc:4b:c7:1d:07:61:88:24:36:60:0d:82:cd:80:
4a:9c:41:a9:d4:4e:eb:d0:ef:f3:4f:a3:00:e8:19:6e:16:7b:
d4:2e:b5:7a:94:f7:48:8e:d4:b5:a6:90:80:51:86:e3:81:00:
16:bb:6d:78:f8:d7:85:37:7f:97:04:f0:44:38:df:b0:59:32:
a6:b1:77:40:d1:37:0c:74:59:72:82:23:81:fa:14:8f:61:74:
3e:e6:a7:84:92:9f:b2:15:b9:9d:20:65:ad:f7:08:5c:fe:3c:
9b:07:af:dd:80:4d:6d:79:99:2a:b8:a6:5f:ba:6d:04:27:7e:
d7:e2:6f:ba:26:6e:bc:11:15:f0:01:cc:d1:03:93:44:86:10:
17:79:3a:68:d8:76:c0:22:d0:99:ad:27:fd:04:c1:25:91:0d:
4e:dc:48:17:3a:0d:5f:ea:03:d0:12:86:f4:7d:5c:9b:72:8c:
92:19:db:d5:f8:a7:1c:bc:85:aa:5a:41:b0:1f:e6:7e:81:9f:
1b:2c:38:19:fa:35:de:80:70:5f:3f:5f:11:db:8d:cb:66:5d:
02:5f:9d:18:dc:79:d0:86:58:f5:22:85:0b:42:1f:a3:28:ab:
ca:b5:db:ab:9f:bb:b3:a1:82:1b:cb:88:36:73:b4:0f:3a:2a:
a1:37:ca:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:20 2024 by rpki-client on console-fra.rpki-client.org