Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0683c3-61f9-4db8-94a8-5bdf61551a06/1/aBWeaKcaSwHEPzwGtp3Z1aIO5LA.roa
File: aBWeaKcaSwHEPzwGtp3Z1aIO5LA.roa (raw, json)
Hash identifier: sV2rvKYVyjY4toqbxhfQ6GfENVurZB9AFM3UvESPIeM=
Subject key identifier: 68:15:9E:68:A7:1A:4B:01:C4:3F:3C:06:B6:9D:D9:D5:A2:0E:E4:B0
Certificate issuer: /CN=ccf292d82c0a2252dd3285a287331f4450ed359a
Certificate serial: 0185BDD92075525B1665998EDBEAC3AC1279
Authority key identifier: CC:F2:92:D8:2C:0A:22:52:DD:32:85:A2:87:33:1F:44:50:ED:35:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPKS2CwKIlLdMoWihzMfRFDtNZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/0683c3-61f9-4db8-94a8-5bdf61551a06/1/aBWeaKcaSwHEPzwGtp3Z1aIO5LA.roa
Signing time: Tue 17 Jan 2023 03:50:01 +0000
ROA not before: Tue 17 Jan 2023 03:50:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2027
IP address blocks: 195.20.209.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bd:d9:20:75:52:5b:16:65:99:8e:db:ea:c3:ac:12:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf292d82c0a2252dd3285a287331f4450ed359a
Validity
Not Before: Jan 17 03:50:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68159e68a71a4b01c43f3c06b69dd9d5a20ee4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3a:11:3c:83:82:ec:bf:51:1a:f2:72:42:22:
fa:40:33:02:39:2c:24:38:dc:4d:86:58:78:3c:6b:
b7:24:54:01:26:e2:ef:89:ac:52:6a:98:e9:bc:48:
06:7b:ce:1e:3f:e0:46:ce:18:25:eb:b7:11:b7:49:
a4:2b:d1:b7:83:b3:64:63:79:60:2c:60:a8:a2:2c:
bf:5b:d9:ce:bd:09:40:f1:1f:aa:3f:5e:72:1e:25:
2b:85:ef:91:91:81:68:19:35:44:c5:14:30:9c:94:
0b:ac:cd:bc:e5:73:41:8a:a1:33:bc:d7:6e:3c:b9:
4f:f6:b0:db:be:58:0b:b0:ee:b7:15:97:fa:32:b8:
60:9a:d8:0a:d2:57:11:ec:5c:7c:9a:6f:18:d2:a2:
6b:cb:d1:bc:d9:04:a0:02:c3:ac:04:09:cf:53:78:
4a:41:42:c8:19:35:d8:1d:eb:30:45:ff:c1:57:93:
9c:9a:d8:8b:4b:d0:b7:d8:07:04:a8:1c:f9:0d:4f:
e6:82:48:06:0b:95:d8:f7:12:e3:27:09:2a:0d:9d:
61:30:98:90:e6:1f:d7:dc:45:71:89:e9:89:87:35:
33:80:c2:7e:29:f4:f1:47:5b:96:47:5e:05:ec:27:
1e:bc:47:6c:30:1d:be:b9:80:0c:6f:e3:1c:e7:69:
8f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:15:9E:68:A7:1A:4B:01:C4:3F:3C:06:B6:9D:D9:D5:A2:0E:E4:B0
X509v3 Authority Key Identifier:
keyid:CC:F2:92:D8:2C:0A:22:52:DD:32:85:A2:87:33:1F:44:50:ED:35:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPKS2CwKIlLdMoWihzMfRFDtNZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0683c3-61f9-4db8-94a8-5bdf61551a06/1/aBWeaKcaSwHEPzwGtp3Z1aIO5LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0683c3-61f9-4db8-94a8-5bdf61551a06/1/zPKS2CwKIlLdMoWihzMfRFDtNZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.209.0/24
Signature Algorithm: sha256WithRSAEncryption
46:65:48:e8:36:00:0c:5c:30:75:c5:b6:90:5b:c5:2a:fc:b1:
88:24:e7:93:57:b0:b0:2e:c8:0d:a2:ad:0d:6a:4e:40:b9:a4:
fb:1d:b9:c0:56:4e:6b:5c:4f:29:43:cf:0e:14:1b:58:06:ca:
dd:96:52:89:cb:cd:0c:06:16:58:f6:ca:24:92:06:7f:c2:42:
3b:5f:b0:ac:f4:ad:fe:bd:3c:74:dd:3a:cb:0a:a1:f0:21:45:
14:64:b1:5f:9c:06:42:f8:db:87:be:0e:3c:72:8c:b9:59:5a:
63:ce:40:c2:df:e5:9d:91:d8:a3:99:ef:04:5a:56:c3:de:c4:
27:69:6f:25:43:b5:8b:92:3d:7f:72:80:36:cf:9e:9c:56:59:
b4:2b:01:26:e4:e6:f9:c3:83:2b:d6:7e:f0:14:e5:30:5b:fa:
a7:74:66:18:72:8d:79:8f:a1:61:47:4c:32:29:0e:e7:b7:c5:
39:f4:e4:a0:8a:80:7c:b3:0a:62:7e:5b:9e:ce:55:1a:4c:29:
c7:f8:fa:94:23:d3:53:61:49:0e:bc:a3:6e:23:e7:97:1f:43:
84:92:8d:f4:a4:cc:0c:5d:24:e0:00:84:45:b2:70:90:2b:05:
d2:9f:6d:66:bf:64:8d:97:11:62:d9:50:69:a8:bf:c4:9b:68:
a4:71:01:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:52 2024 by rpki-client on console-fra.rpki-client.org