Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/aZLgmC3DE6QUHMcRwOiKElQZQ0s.roa
File: aZLgmC3DE6QUHMcRwOiKElQZQ0s.roa (raw, json)
Hash identifier: PwonSbwowbbSQs2GSUEnY2TUPmkRll8uYK6YfvWqtKM=
Subject key identifier: 69:92:E0:98:2D:C3:13:A4:14:1C:C7:11:C0:E8:8A:12:54:19:43:4B
Certificate issuer: /CN=e81e325cd2126625c66d469db64e4ef9aab0dc63
Certificate serial: 01857094F3E26016670F02DB4BD7FF8B21D6
Authority key identifier: E8:1E:32:5C:D2:12:66:25:C6:6D:46:9D:B6:4E:4E:F9:AA:B0:DC:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6B4yXNISZiXGbUadtk5O-aqw3GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/aZLgmC3DE6QUHMcRwOiKElQZQ0s.roa
Signing time: Mon 02 Jan 2023 03:44:47 +0000
ROA not before: Mon 02 Jan 2023 03:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47284
IP address blocks: 195.182.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:f3:e2:60:16:67:0f:02:db:4b:d7:ff:8b:21:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81e325cd2126625c66d469db64e4ef9aab0dc63
Validity
Not Before: Jan 2 03:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6992e0982dc313a4141cc711c0e88a125419434b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cb:70:8d:b7:98:88:81:24:f8:6b:d7:19:d1:
b9:0b:25:b0:a7:33:09:10:ba:71:03:ee:8d:8b:3e:
f7:7a:e2:37:fe:b6:0e:0e:fb:59:41:da:1e:18:41:
48:0f:17:59:9a:34:73:ae:00:f0:06:62:8c:c4:b9:
aa:55:2d:98:59:5c:7f:46:dc:80:78:08:e9:22:ac:
ae:3b:3f:c4:96:ca:d2:71:ff:11:1d:1e:33:c6:53:
ed:d6:4d:9a:7a:dd:c9:c3:da:19:5a:15:67:ad:56:
ea:dc:c4:c6:19:54:1b:e1:6d:68:fa:e3:e2:08:64:
58:f9:7a:a1:ed:32:8a:2d:25:5a:94:ec:2d:c7:56:
18:57:4c:33:1a:e8:5d:e1:10:f2:bc:6b:5c:f0:8a:
03:07:27:35:85:c0:03:cc:71:cc:b0:05:95:ef:31:
d1:ea:2d:d2:63:fd:57:96:f5:61:58:c2:96:a6:a9:
16:bf:e3:56:37:52:71:b5:f2:b4:c9:b9:3d:2e:ef:
51:64:66:fc:e7:45:28:36:5f:f1:4e:73:fc:fa:e0:
d6:d4:10:ac:13:41:09:3c:23:bf:ca:31:0b:b7:28:
5f:a6:3e:b0:28:5d:d7:4c:e7:24:70:49:00:83:bf:
4d:9d:77:41:b6:7d:af:fc:5b:53:71:2c:4d:ad:5d:
38:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:92:E0:98:2D:C3:13:A4:14:1C:C7:11:C0:E8:8A:12:54:19:43:4B
X509v3 Authority Key Identifier:
keyid:E8:1E:32:5C:D2:12:66:25:C6:6D:46:9D:B6:4E:4E:F9:AA:B0:DC:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B4yXNISZiXGbUadtk5O-aqw3GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/aZLgmC3DE6QUHMcRwOiKElQZQ0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.47.0/24
Signature Algorithm: sha256WithRSAEncryption
00:21:41:7e:31:b3:e3:ff:bc:e5:83:92:f8:6b:1e:82:b2:cc:
3c:0e:b2:68:f6:30:cf:66:a4:ee:6f:e5:d0:3c:fa:79:28:de:
4c:cb:32:68:2d:6f:6a:ba:4f:22:97:a2:89:a6:ad:7a:a3:cb:
41:c8:4d:ab:17:34:8a:30:8a:3e:9a:d6:d5:c4:61:18:b4:4d:
25:01:c5:be:4a:4c:7c:8c:1e:18:58:de:4e:a3:99:03:d9:fd:
d1:3f:e5:84:9e:ef:58:89:3b:37:30:7e:69:f9:4f:6b:fe:e9:
94:f2:ad:fd:c4:ac:ec:3a:15:8b:fa:c7:f9:70:f4:ef:be:ab:
01:f4:4c:9f:1e:4d:56:84:5f:42:69:bf:e7:7f:9c:7f:26:ec:
97:a0:1d:0a:f7:e9:1c:49:86:00:a7:f1:69:61:ca:2a:4e:19:
48:d2:60:65:2a:2c:73:04:f3:56:b5:04:f9:ee:f7:f1:ab:66:
96:21:c5:e5:41:3c:61:98:83:ab:9b:f4:83:9a:3e:aa:84:49:
da:49:ee:30:e4:18:09:98:f8:c7:1b:f1:3e:5b:47:96:5e:54:
fa:cd:4b:98:a2:f8:0f:45:76:37:d7:06:fe:2f:30:89:c4:37:
d0:86:0b:7c:b6:80:7d:22:d8:cf:86:05:fc:51:46:b8:55:93:
70:a9:c7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:17 2024 by rpki-client on console-ams.rpki-client.org