Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/gSwWJv7zbCXFDMMTxYaRaKk2giA.roa
File: gSwWJv7zbCXFDMMTxYaRaKk2giA.roa (raw, json)
Hash identifier: o2qXhkzkCAe1T66oj/ahxitoYltExQVlfo0oPf5jMrc=
Subject key identifier: 81:2C:16:26:FE:F3:6C:25:C5:0C:C3:13:C5:86:91:68:A9:36:82:20
Certificate issuer: /CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Certificate serial: 018A61F77FA2CDB1F386C891AC7E0404BA69
Authority key identifier: 27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/gSwWJv7zbCXFDMMTxYaRaKk2giA.roa
Signing time: Mon 04 Sep 2023 20:52:04 +0000
ROA not before: Mon 04 Sep 2023 20:52:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12679
IP address blocks: 195.34.94.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:61:f7:7f:a2:cd:b1:f3:86:c8:91:ac:7e:04:04:ba:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Validity
Not Before: Sep 4 20:52:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=812c1626fef36c25c50cc313c5869168a9368220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:96:f6:6c:f6:98:f6:7a:b6:b2:e2:08:51:2e:
e6:8c:52:e1:38:9d:c7:f2:98:91:51:0c:e8:a6:4b:
e3:3c:59:a2:ff:7d:b6:3f:91:85:8e:cc:3c:e3:6c:
70:c8:f2:c4:c4:9c:e7:44:0b:a3:3b:53:6f:d2:a7:
ac:20:6a:52:40:72:da:34:82:d3:e1:5b:6c:21:c3:
01:a1:74:c1:b6:2d:48:d9:4e:ed:63:af:f7:1d:58:
67:23:07:61:d2:8b:4f:3d:e9:dc:f5:be:dc:c8:31:
76:f6:bb:5a:4c:49:1d:84:fd:59:07:77:6c:d3:3e:
dd:7a:57:45:b7:81:86:4e:53:e1:73:48:61:0d:5c:
c5:f2:02:a5:07:91:ae:ef:e5:4e:ff:20:11:57:61:
21:91:07:f4:bf:df:8f:bc:24:92:2e:6f:77:a3:50:
4d:56:9f:d4:e8:1e:cc:5d:12:6b:6f:ca:64:ad:88:
53:67:93:ab:87:3e:ab:a4:e7:f0:97:d9:4d:04:6c:
1c:ed:e2:13:16:a3:71:6e:bf:b8:0a:c1:7e:d7:20:
71:82:fa:7b:c9:8a:50:a3:e1:b1:02:3a:a5:e3:07:
6e:01:69:2b:b9:82:a1:55:c3:9a:e9:6f:2a:ad:6a:
7c:cc:7e:99:cb:6a:51:5f:84:64:9f:4b:05:72:da:
7a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2C:16:26:FE:F3:6C:25:C5:0C:C3:13:C5:86:91:68:A9:36:82:20
X509v3 Authority Key Identifier:
keyid:27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/gSwWJv7zbCXFDMMTxYaRaKk2giA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.34.94.0/23
Signature Algorithm: sha256WithRSAEncryption
52:e4:44:f7:16:fa:31:89:53:8b:5f:92:17:7a:87:6e:99:a8:
f5:2d:bc:a0:ce:40:db:36:3f:07:db:3e:a1:0a:db:3d:71:e1:
fb:8e:5b:0d:fc:78:d7:d4:61:69:21:8b:ef:84:c5:66:14:5c:
dd:71:22:90:09:ef:45:00:78:d4:64:6e:47:f4:24:d9:b4:83:
ae:5c:82:01:57:ea:30:e8:89:f8:5b:98:0d:c3:d6:0c:47:70:
6b:ce:84:91:5d:6f:5b:2b:ec:a3:9b:b0:6d:ae:d1:a3:0f:0f:
a2:12:98:17:11:03:e1:cf:77:a6:66:3a:9c:36:9d:26:95:69:
3d:58:18:5c:05:70:0e:f2:0e:00:8a:eb:e8:c7:e5:3a:ae:24:
8f:fa:fb:83:9b:6c:7b:de:59:40:64:10:19:bd:e5:d9:c0:e1:
40:6e:f5:25:66:f8:01:c2:3a:77:2b:db:18:25:91:29:41:82:
25:e4:24:0b:d9:28:6b:ed:30:72:a6:97:4e:c7:bd:44:e9:05:
77:ea:31:a8:f6:04:60:c2:98:b5:29:e6:de:d5:71:0c:df:a0:
8a:de:43:1e:e4:a1:bd:cc:3d:b3:6c:ee:51:59:1a:bc:dd:e5:
8c:d2:fe:d1:31:b5:6f:7c:b6:75:60:c5:8e:95:89:ee:72:48:
bc:c6:d7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:22 2024 by rpki-client on console-fra.rpki-client.org