Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/_I4xLKaYBPwpyWouM6RqLIjwb3A.roa
File: _I4xLKaYBPwpyWouM6RqLIjwb3A.roa (raw, json)
Hash identifier: i2muqnSXe/GGTayUkqDVVKudrGxlM6rRxCS6AKdF7Ck=
Subject key identifier: FC:8E:31:2C:A6:98:04:FC:29:C9:6A:2E:33:A4:6A:2C:88:F0:6F:70
Certificate issuer: /CN=61b95518ed4f5582a2f6c11955740284bc088134
Certificate serial: 018BD73724970AC6275EE6D15A645E6E780E
Authority key identifier: 61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/_I4xLKaYBPwpyWouM6RqLIjwb3A.roa
Signing time: Thu 16 Nov 2023 08:19:57 +0000
ROA not before: Thu 16 Nov 2023 08:19:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206433
IP address blocks: 195.122.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d7:37:24:97:0a:c6:27:5e:e6:d1:5a:64:5e:6e:78:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b95518ed4f5582a2f6c11955740284bc088134
Validity
Not Before: Nov 16 08:19:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc8e312ca69804fc29c96a2e33a46a2c88f06f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7f:19:f3:7b:85:18:8a:2e:76:52:29:1d:30:
95:ca:3f:35:6e:64:22:ab:d5:b5:c9:23:c3:9b:8c:
fb:0f:0e:da:b0:d5:0a:87:46:db:13:8c:6a:7a:72:
f5:bb:6d:0d:b0:db:f0:d3:e2:b1:ec:2e:ff:f6:a7:
27:ca:a9:73:fb:ca:ed:0f:99:f7:84:03:ee:a3:d5:
94:47:03:da:4c:d5:67:c8:e1:3c:90:6a:25:28:70:
4e:25:6d:39:54:28:55:2c:9d:8c:35:ff:3d:46:85:
ed:0d:04:37:2d:fb:d2:81:f5:c7:75:5c:2f:62:76:
98:aa:f1:58:63:19:06:5d:d4:24:56:3a:3c:8d:d5:
8f:0e:b8:64:b1:ce:88:73:82:13:2e:5d:bb:c1:3b:
fb:b9:2d:80:12:d8:27:22:36:b0:23:9b:a8:15:7d:
21:15:21:f4:a3:76:68:24:4c:6e:60:02:0a:b5:1d:
38:84:f7:39:2d:5e:95:07:76:81:c1:a7:75:f0:3a:
d6:02:8e:11:bb:c1:4c:22:e4:b1:19:ce:cf:51:3b:
52:41:69:f8:b9:c6:62:81:51:03:32:d3:c4:de:2d:
03:ca:48:1b:38:bb:4a:dd:1a:8c:a0:7e:eb:6c:f1:
3f:9c:e8:ef:8d:91:37:19:5a:b9:ca:cd:87:e5:9f:
e4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8E:31:2C:A6:98:04:FC:29:C9:6A:2E:33:A4:6A:2C:88:F0:6F:70
X509v3 Authority Key Identifier:
keyid:61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/_I4xLKaYBPwpyWouM6RqLIjwb3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.122.92.0/24
Signature Algorithm: sha256WithRSAEncryption
76:d5:f0:e7:01:6d:cb:dc:fe:33:52:66:ba:02:20:7b:c9:83:
43:eb:2c:ab:30:32:d9:63:45:2b:21:2f:3d:9e:f3:bc:1e:a7:
78:a3:ab:41:d1:3a:33:fd:a2:22:c1:3f:d2:05:ac:e6:4f:cf:
e3:03:43:b7:4f:d4:e5:26:46:55:56:be:d1:c8:66:18:d0:8d:
7b:13:78:7d:47:c8:2f:be:e0:c4:24:ca:bb:0d:6d:a0:b4:a2:
5a:9b:2c:f7:d9:06:7e:04:40:2e:e0:1e:f2:49:2b:fd:66:44:
24:d7:40:1e:aa:20:8d:61:86:07:a1:d6:63:e6:4e:52:d9:97:
bd:8e:f9:ae:b4:c8:be:15:ea:7a:46:2c:63:40:f9:09:4a:0d:
1e:29:f7:47:70:2e:23:61:78:b0:d7:fa:0d:a1:08:99:23:db:
52:f2:27:95:ab:10:95:45:a4:0a:48:af:8d:7a:20:e0:d9:9a:
52:38:c1:b4:57:bb:cc:9e:43:a2:0e:8d:14:ad:af:65:08:17:
03:90:9a:04:01:f0:a2:9d:24:7e:69:9d:9d:81:7c:41:0a:1c:
8a:7c:33:3c:54:04:f5:ab:f9:f9:64:3d:3c:06:a4:03:16:44:
61:72:f2:47:c5:c3:a1:cc:1b:8a:d2:4b:2a:7b:00:13:95:a8:
4d:f7:56:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:26 2024 by rpki-client on console-fra.rpki-client.org