Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/I26Z79Zpz-MIrJh84h5xB83h8tw.roa
File: I26Z79Zpz-MIrJh84h5xB83h8tw.roa (raw, json)
Hash identifier: P87ynibpV3qpIIraTi+L9U2nFM+riYWP7GVzw4Nrrj4=
Subject key identifier: 23:6E:99:EF:D6:69:CF:E3:08:AC:98:7C:E2:1E:71:07:CD:E1:F2:DC
Certificate issuer: /CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Certificate serial: 0188A9C09A65DA84126D2C04A3A2A0061E5B
Authority key identifier: 90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/I26Z79Zpz-MIrJh84h5xB83h8tw.roa
Signing time: Sun 11 Jun 2023 09:19:11 +0000
ROA not before: Sun 11 Jun 2023 09:19:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49558
IP address blocks: 195.178.16.0/24 maxlen: 24
194.242.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a9:c0:9a:65:da:84:12:6d:2c:04:a3:a2:a0:06:1e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Validity
Not Before: Jun 11 09:19:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=236e99efd669cfe308ac987ce21e7107cde1f2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:16:c0:c7:b5:c8:0c:d7:ac:e0:10:20:14:
02:ce:9c:be:68:45:14:be:f6:51:28:6c:30:23:7e:
9a:33:9d:3b:d0:c2:2f:41:50:45:39:17:5f:0f:b2:
68:99:1d:a8:6e:83:b9:f9:8b:ca:20:e1:b9:aa:ac:
0e:95:a4:46:d9:07:f1:51:c3:36:c2:e6:9e:04:cd:
bd:64:07:2a:54:17:58:e0:8e:66:e2:55:e9:61:40:
80:37:c3:1e:6b:f4:d5:9e:90:4b:2e:42:c7:66:cf:
1c:38:9f:b6:36:2e:85:36:5c:6d:71:9a:1e:5b:bc:
2a:99:48:b5:58:ee:27:73:f6:92:f4:8f:c1:76:a1:
4a:85:73:1c:df:d9:90:e5:50:8a:89:a1:68:3b:0e:
a8:35:cb:a5:e2:27:05:11:a4:ec:c1:0b:4d:3a:a1:
e2:d3:19:99:91:43:f7:d2:44:cf:95:29:9f:b2:28:
cf:3c:b3:a7:11:29:3a:d1:29:03:18:69:1c:60:b1:
aa:62:98:dd:e8:8b:ec:91:02:4f:36:8d:cc:0c:f6:
6c:e0:eb:ff:94:43:c4:49:17:a1:87:ae:a1:56:32:
35:97:02:af:e4:c2:0f:f6:9b:d5:0e:45:17:a6:25:
82:5e:5a:4e:26:db:75:0b:30:4c:ab:62:49:71:8d:
98:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6E:99:EF:D6:69:CF:E3:08:AC:98:7C:E2:1E:71:07:CD:E1:F2:DC
X509v3 Authority Key Identifier:
keyid:90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/I26Z79Zpz-MIrJh84h5xB83h8tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.127.0/24
195.178.16.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:c4:16:be:7e:bc:15:30:fc:da:82:a7:d1:74:de:a1:34:fd:
fd:47:d6:7c:9b:29:6b:d7:33:b5:85:47:48:fc:47:b6:47:20:
52:13:78:21:70:fd:ab:80:6f:4f:3f:f1:82:4b:80:65:b6:a1:
44:2f:d6:bf:60:4a:b8:ef:2a:f7:07:a6:dd:ce:57:b7:02:6a:
c9:bc:f7:0a:a8:ef:6c:0d:e5:c0:6e:eb:88:6f:08:ef:2a:1e:
96:88:8e:3e:13:32:3b:c4:80:33:26:44:ab:18:b9:1f:31:e1:
b3:99:e0:46:bb:17:19:84:c2:6b:18:db:84:22:21:fb:59:23:
af:82:57:0d:c4:27:ce:f5:a5:2c:c7:3d:f8:a1:b6:50:0b:bb:
82:f9:c9:0a:74:67:31:2c:8c:26:8b:15:21:b6:25:1e:70:46:
49:2a:d4:8c:f1:3b:54:39:a5:70:75:c4:fb:d4:3b:42:82:9b:
4d:93:86:52:61:c6:38:ea:a1:47:64:a0:bf:a8:f0:69:95:90:
b8:c4:0d:10:56:c5:01:a5:8e:c5:be:1e:75:f9:07:ff:b1:af:
bf:53:03:51:81:3a:c0:8d:99:87:ba:b6:02:30:cf:6f:f8:37:
1d:d1:fa:3d:6c:8e:3b:2c:74:b8:75:f7:e9:7a:7a:c3:36:b6:
2e:85:2d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:49 2024 by rpki-client on console-ams.rpki-client.org