Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/dX4fFqQdaL2S8vTqD328LFHHAQE.roa
File: dX4fFqQdaL2S8vTqD328LFHHAQE.roa (raw, json)
Hash identifier: t6mHsaEd7hqFmS8qMa8eW/r9kujRGVyKs+6gAqAA+uk=
Subject key identifier: 75:7E:1F:16:A4:1D:68:BD:92:F2:F4:EA:0F:7D:BC:2C:51:C7:01:01
Certificate issuer: /CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Certificate serial: 018B8A4A7076BC6CCB69FA688CFD28E68D23
Authority key identifier: E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/dX4fFqQdaL2S8vTqD328LFHHAQE.roa
Signing time: Wed 01 Nov 2023 09:50:16 +0000
ROA not before: Wed 01 Nov 2023 09:50:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5384
IP address blocks: 195.90.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Nov 2023 14:17:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8a:4a:70:76:bc:6c:cb:69:fa:68:8c:fd:28:e6:8d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Validity
Not Before: Nov 1 09:50:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=757e1f16a41d68bd92f2f4ea0f7dbc2c51c70101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:89:30:ac:c1:b4:7b:7d:70:ad:09:94:60:5a:
81:6c:5e:13:96:0b:a5:76:33:43:93:94:6b:c4:c7:
4d:d3:bb:a3:72:39:8c:9f:dd:4f:e6:e6:4e:d8:19:
63:4b:99:c0:1d:f9:45:df:bc:58:c7:e2:82:04:4d:
ec:30:8e:80:61:63:cb:72:96:8c:30:0b:04:e5:e5:
b1:b9:ae:79:a0:d2:ff:e6:66:fd:c1:0a:7f:96:6a:
ca:bf:a3:e4:72:44:97:03:6f:47:fe:9a:36:1b:fe:
bb:6c:f9:7b:8b:96:e3:38:46:32:56:93:f0:63:85:
46:df:39:fa:02:c1:8e:44:e7:cd:d7:02:b0:6f:e6:
87:97:e6:06:9a:f7:aa:68:94:c5:3c:24:2e:bb:9d:
94:c9:7e:d3:62:12:d1:5a:77:f5:29:c5:bf:2d:5f:
15:44:45:df:df:53:5a:75:6d:5a:5d:38:4a:55:10:
3a:4e:31:04:55:ac:1c:43:a7:1c:94:e3:80:78:2b:
82:28:b5:c0:d9:c7:dd:52:19:18:c8:8e:6e:0f:98:
97:db:3e:ef:7a:a4:1d:6d:0b:35:f3:8a:02:e9:73:
30:94:a7:1a:88:2d:85:e1:cc:00:e8:c7:05:ca:3c:
6e:a6:ff:df:08:9d:72:e7:26:6a:81:28:5e:d8:c5:
51:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7E:1F:16:A4:1D:68:BD:92:F2:F4:EA:0F:7D:BC:2C:51:C7:01:01
X509v3 Authority Key Identifier:
keyid:E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/dX4fFqQdaL2S8vTqD328LFHHAQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.90.98.0/24
Signature Algorithm: sha256WithRSAEncryption
95:87:5b:86:fe:05:53:fc:60:57:85:0d:c7:82:6c:09:75:d6:
3a:0d:0a:ab:00:17:67:91:a2:af:bd:8e:4a:68:4e:b0:b6:9e:
0f:ad:f3:3b:91:73:77:9b:91:d5:ad:10:5a:a2:aa:15:b0:04:
27:b6:8c:f9:cd:e1:7c:17:ba:52:e1:04:08:5c:e5:c9:e3:80:
eb:60:45:49:10:a5:8f:ed:bb:b1:1b:3f:30:40:a1:da:74:53:
e3:65:e1:94:75:c9:67:9c:9c:10:61:7a:97:e7:4d:b3:63:40:
ac:6d:16:70:22:2e:c5:55:bb:92:82:0c:52:76:dc:b0:2d:81:
28:e5:c0:22:b2:2a:fc:53:f2:2c:58:ea:17:d4:75:f5:d2:69:
ad:dc:d3:ee:f3:74:97:9c:5d:40:54:7a:9c:f5:72:ed:f4:0e:
23:22:5e:89:20:a4:79:10:ee:b0:d1:b2:6b:1c:5b:d0:7c:c4:
5d:0b:c2:2f:85:68:90:e5:dd:c7:dd:75:fd:c6:52:1d:f2:9f:
30:47:8a:8d:19:c4:64:0a:8d:8c:bb:b7:6d:09:2a:4c:52:08:
09:6b:1b:4a:7b:f2:f2:2f:cc:4a:36:ca:ab:78:94:2f:d0:59:
4d:75:d4:d2:5d:16:45:47:b6:f1:19:34:7c:a3:c8:42:46:66:
75:ca:c0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:03 2024 by rpki-client on console-fra.rpki-client.org