Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/SnxOJ--O1nUZauTTm9V3PjZ_zrs.roa
File: SnxOJ--O1nUZauTTm9V3PjZ_zrs.roa (raw, json)
Hash identifier: 1hmqsUm1GZzbZfepQq79cefQMJ0fC2YBMJos2hFxgkE=
Subject key identifier: 4A:7C:4E:27:EF:8E:D6:75:19:6A:E4:D3:9B:D5:77:3E:36:7F:CE:BB
Certificate issuer: /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Certificate serial: 018D689B7A9768B6001C7E5D63391854F6B7
Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/SnxOJ--O1nUZauTTm9V3PjZ_zrs.roa
Signing time: Fri 02 Feb 2024 06:57:16 +0000
ROA not before: Fri 02 Feb 2024 06:57:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58350
IP address blocks: 195.150.48.0/20 maxlen: 20
195.150.76.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 05 Feb 2024 09:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:68:9b:7a:97:68:b6:00:1c:7e:5d:63:39:18:54:f6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Validity
Not Before: Feb 2 06:57:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a7c4e27ef8ed675196ae4d39bd5773e367fcebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:79:e9:df:7b:60:8b:67:28:44:6b:03:df:6f:
56:23:cb:6b:01:d8:da:7f:56:d2:7f:84:2d:4b:e0:
09:bd:6a:51:77:44:41:4c:26:0a:e9:32:dc:c2:85:
34:b4:f8:a7:39:a1:9d:03:bb:79:7f:e4:02:3b:6b:
7c:4e:fa:73:13:e7:bc:95:3d:cf:f9:3a:b3:21:4f:
63:69:25:a2:e2:b6:dd:f2:b1:9e:43:29:01:69:53:
11:97:b5:a0:d1:98:93:83:63:14:42:7e:81:9a:e3:
e9:d2:f3:e7:6e:70:23:0f:48:df:2f:bf:fd:ff:a2:
37:2f:94:6d:66:5b:b2:2d:76:52:28:40:16:6e:57:
f6:04:19:48:6d:c7:2b:4c:ff:33:bd:95:8e:16:b7:
ff:60:21:4c:d0:e0:cb:7e:3a:c6:4f:5f:5b:d8:c6:
6e:c0:7a:a3:32:c0:08:06:fd:19:80:e8:08:2c:c8:
fa:af:5c:2b:06:d7:94:fc:c5:41:3f:b5:66:3d:ba:
ca:67:25:9b:d6:ee:02:a1:68:18:df:99:15:64:ca:
66:bf:21:d4:e3:72:ac:ed:95:ef:2b:0c:ad:48:e6:
86:28:b4:8d:40:b1:e2:a5:40:09:be:38:80:22:9d:
ae:6c:0f:b6:9a:68:8f:d8:b8:e8:1f:72:5a:02:6d:
0a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7C:4E:27:EF:8E:D6:75:19:6A:E4:D3:9B:D5:77:3E:36:7F:CE:BB
X509v3 Authority Key Identifier:
keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/SnxOJ--O1nUZauTTm9V3PjZ_zrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.150.48.0/20
195.150.76.0/23
Signature Algorithm: sha256WithRSAEncryption
06:af:11:16:6e:6a:3e:b0:3e:1a:f6:ac:13:c9:0e:41:42:00:
8b:12:56:ea:96:f5:25:6a:d1:1f:51:c7:e1:e3:43:c0:28:3a:
a5:ff:04:5e:82:9d:c8:dd:69:b6:7c:c3:01:61:c4:e9:26:8b:
e0:57:e7:80:d7:ea:58:e0:82:84:f3:6f:d2:1f:4b:cb:c7:e4:
31:24:1c:63:df:f7:c2:ea:20:93:11:29:6f:b1:a1:f0:21:02:
05:c0:a7:4e:7d:ce:7f:3e:e9:76:bf:ee:31:18:82:d5:a8:86:
b7:51:f6:ee:91:c3:54:60:1d:ee:dd:4e:af:85:71:ad:17:be:
eb:c3:74:3f:fb:7c:bc:35:74:a6:5e:74:f6:05:79:75:2f:8d:
40:4f:8c:95:3a:d7:36:b1:fc:a7:b8:1d:4f:98:97:18:ca:a6:
04:d5:34:7e:e9:d9:56:54:7e:e4:2d:34:64:ec:9a:44:2a:fa:
c5:2e:b8:8a:2a:22:e8:b2:da:f9:cb:a9:d3:70:a1:5a:08:cb:
a5:d4:aa:54:96:25:7a:2a:60:9b:ea:d9:52:2c:1c:65:a5:fa:
d1:7e:2c:1a:0a:4c:9b:ce:fb:51:6f:4c:85:85:f6:c1:8b:8e:
70:5d:81:7a:f9:34:e5:7e:c8:cf:76:d7:29:7d:e3:73:cb:95:
21:48:de:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 5 11:49:36 2024 by rpki-client on console-fra.rpki-client.org