Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/gReSQ6emIqqPNgsMIT8zTIaN9As.roa
File: gReSQ6emIqqPNgsMIT8zTIaN9As.roa (raw, json)
Hash identifier: OFYewt8Hj8XseFanNDk04ZJFZcmK4oI985a9oUU03cw=
Subject key identifier: 81:17:92:43:A7:A6:22:AA:8F:36:0B:0C:21:3F:33:4C:86:8D:F4:0B
Certificate issuer: /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Certificate serial: 018572B43D2B9B19BED1949CD112FC57F220
Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/gReSQ6emIqqPNgsMIT8zTIaN9As.roa
Signing time: Mon 02 Jan 2023 13:38:12 +0000
ROA not before: Mon 02 Jan 2023 13:38:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34820
IP address blocks: 195.146.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:3d:2b:9b:19:be:d1:94:9c:d1:12:fc:57:f2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Validity
Not Before: Jan 2 13:38:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81179243a7a622aa8f360b0c213f334c868df40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:08:0a:e3:5a:8e:f3:c6:c6:da:e6:a3:4f:4f:
66:a1:4f:f3:4a:75:af:c6:12:0a:b2:03:69:9d:0c:
2e:14:6f:0d:9b:b3:68:24:10:4e:bf:41:76:65:df:
7c:df:a8:04:ef:8d:6b:f4:3e:ed:a9:a7:36:0a:cf:
83:ab:1e:2b:08:e4:84:c9:a2:7a:78:b0:cf:d9:91:
21:06:8e:76:09:83:30:16:4e:e1:a6:fa:85:94:86:
d2:c6:b5:81:d0:a7:79:45:df:a7:ac:d1:90:df:ef:
f3:6b:b2:9a:58:f9:ae:cb:ca:a0:60:ab:12:61:31:
7b:a1:f2:e7:13:e1:5a:d3:a0:6d:ba:0d:15:cf:eb:
e7:a0:2e:5a:b2:94:d2:1c:2e:d1:c3:b1:09:fb:b3:
e9:dd:c4:fe:b8:a9:11:88:71:e5:5f:2c:5b:fe:37:
f1:3e:91:c9:fd:9c:d3:5d:e9:61:a7:5b:e6:16:43:
c0:25:c8:36:10:0b:fb:38:6d:f2:3a:35:b1:4b:2a:
d6:21:d1:23:f4:0d:87:2e:ae:0a:04:a7:c3:a4:87:
c6:93:9e:90:74:c3:32:0b:dd:35:d3:a3:e5:1e:34:
bb:2c:64:de:40:b9:d8:00:78:58:3f:83:80:f2:ca:
42:e1:13:3a:6a:c6:96:d6:97:b6:a2:08:48:8d:1b:
ae:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:17:92:43:A7:A6:22:AA:8F:36:0B:0C:21:3F:33:4C:86:8D:F4:0B
X509v3 Authority Key Identifier:
keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/gReSQ6emIqqPNgsMIT8zTIaN9As.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.146.10.0/24
Signature Algorithm: sha256WithRSAEncryption
01:13:70:ee:46:5a:c0:43:a9:d0:fc:51:43:de:01:73:d0:1f:
2e:df:d6:07:c8:e9:05:14:7a:57:6e:21:d9:66:ce:7e:24:22:
4e:2c:56:40:cb:46:6a:c2:4a:d2:7b:23:e0:8e:59:c2:01:37:
0f:a1:df:a0:0f:ab:6b:e7:58:5f:c4:b2:e1:f9:53:eb:7c:7c:
18:e9:a6:de:95:20:1c:b1:52:6f:6a:20:91:e1:95:8d:13:38:
9a:6b:c0:6d:45:77:ec:f2:0e:cc:f3:1b:23:fc:ff:8b:f1:dd:
1d:a4:83:f5:5b:e4:bb:61:8a:3e:37:40:53:9a:13:e3:b4:35:
9c:48:24:6e:62:5f:b2:8c:70:db:5b:47:20:23:75:5a:1f:5d:
c5:05:40:4c:3f:fa:f7:92:92:98:45:b3:69:b1:36:a1:76:7b:
4b:3e:7f:37:a7:f2:b2:54:cb:df:46:d8:f9:94:da:4a:2a:03:
fe:1d:cd:97:d5:95:99:41:0e:8e:8c:3f:3b:30:56:1d:69:ec:
36:16:83:c8:4e:66:ac:39:be:31:01:d8:4f:f7:bc:fc:7b:65:
c7:2c:71:8b:d7:17:d8:47:7f:34:e9:b9:75:90:31:11:65:5e:
80:1c:47:5c:56:84:57:c6:55:f7:14:07:43:ac:e7:7a:55:0b:
84:13:18:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:54 2024 by rpki-client on console-ams.rpki-client.org