Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/L_jFxAKmxp9X0BbxRgkMr3dXOKY.roa
File: L_jFxAKmxp9X0BbxRgkMr3dXOKY.roa (raw, json)
Hash identifier: zf8W3d0/CzsLZEjUXj5puyfu3qZDTcZJtSa5mbWVzUI=
Subject key identifier: 2F:F8:C5:C4:02:A6:C6:9F:57:D0:16:F1:46:09:0C:AF:77:57:38:A6
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 018779BCF1D4F0580809E9B50E7A8E47E0BF
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/L_jFxAKmxp9X0BbxRgkMr3dXOKY.roa
Signing time: Thu 13 Apr 2023 08:30:38 +0000
ROA not before: Thu 13 Apr 2023 08:30:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41957
IP address blocks: 195.245.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:bc:f1:d4:f0:58:08:09:e9:b5:0e:7a:8e:47:e0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Apr 13 08:30:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ff8c5c402a6c69f57d016f146090caf775738a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:6c:01:73:21:98:87:a8:e2:b0:d6:0f:c2:
0e:2e:82:7a:05:2f:4c:b6:59:51:8e:84:e3:a8:fc:
96:3a:3a:2e:bc:b6:0d:84:e0:a5:eb:ba:a5:f7:a3:
e9:72:f2:da:72:a3:6d:96:d7:11:28:b2:7e:64:a1:
7f:a3:44:73:05:ae:1a:2c:fe:4b:dc:41:ed:1f:05:
95:1a:1e:76:6f:c2:eb:39:40:b5:0b:bd:7c:49:d2:
40:fe:8f:cc:8e:66:83:69:ab:0f:af:7f:dc:ce:13:
b6:62:e0:cf:2d:8c:f2:1d:2b:18:6b:51:67:22:5e:
46:7d:92:b2:9e:f6:9b:5a:ff:46:0f:48:39:cc:b7:
c2:57:7a:de:4e:bf:ae:b3:a6:dd:a5:b2:dd:69:21:
9b:fc:be:82:c7:15:d0:ca:5e:b3:c1:3f:c7:b9:42:
3b:9b:9e:b6:0b:2a:0c:31:b8:26:96:9d:66:d4:37:
35:e5:e6:be:8d:98:82:84:96:93:7b:98:43:24:bb:
54:9c:70:d8:15:b2:33:69:55:e1:bd:9b:da:0e:2a:
a6:ca:a9:82:ab:39:a1:13:60:91:cf:bc:7d:6e:4f:
76:9c:32:3d:cd:16:1d:b3:04:3a:5f:b7:30:5d:23:
18:f6:d0:e2:ac:2d:bb:b7:22:45:9c:d1:1d:95:4a:
bc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F8:C5:C4:02:A6:C6:9F:57:D0:16:F1:46:09:0C:AF:77:57:38:A6
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/L_jFxAKmxp9X0BbxRgkMr3dXOKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.245.238.0/24
Signature Algorithm: sha256WithRSAEncryption
42:7e:eb:8a:1e:6f:b5:1d:b3:4c:fe:a5:35:91:1d:7c:e1:e5:
20:10:62:d5:b7:2f:be:af:5a:09:23:58:41:b8:e0:76:cd:68:
65:af:09:22:cf:bb:40:fa:23:53:b7:6e:ed:18:32:1f:28:33:
83:15:36:54:b5:93:c6:91:25:c4:1a:3b:07:3e:29:ee:96:25:
8a:e0:97:b4:7e:ef:c8:be:9a:bf:59:66:9f:a2:f6:c9:00:72:
d9:f4:48:e2:11:db:02:81:3a:70:16:b5:34:0e:a3:bc:a4:79:
17:1d:e8:8e:b2:eb:e0:af:2f:1a:4e:5a:0f:64:a9:1d:ce:c8:
9c:70:63:22:22:ef:94:37:ad:b4:ed:19:8b:1e:50:4e:91:56:
58:54:66:b6:00:89:49:b6:10:e9:e6:5b:eb:dd:40:cc:80:81:
a4:73:a4:3e:85:74:38:0b:ba:24:a6:26:22:73:28:da:b0:66:
70:93:cb:ec:67:6e:df:2a:1a:35:aa:c2:06:df:e2:79:8f:86:
9c:35:6d:cc:e0:a5:09:17:cd:20:60:e2:63:e7:5c:41:09:15:
09:08:af:88:83:fc:e5:9f:2f:07:8a:01:ff:b2:4f:e7:90:54:
e6:71:55:a0:a8:52:d5:6d:a5:16:90:4b:50:c8:c8:76:fe:7f:
ac:3b:f6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:25 2024 by rpki-client on console-ams.rpki-client.org