Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/s58IznBXku8Poar8X3LmHqXrCj0.roa
File: s58IznBXku8Poar8X3LmHqXrCj0.roa (raw, json)
Hash identifier: GjtZ2nFXQsRiE7imoiVrPU/LHcqwSEYAIHPdrCL+X3w=
Subject key identifier: B3:9F:08:CE:70:57:92:EF:0F:A1:AA:FC:5F:72:E6:1E:A5:EB:0A:3D
Certificate issuer: /CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
Certificate serial: 018571DE9389BCFA14ECAE135C0A3BBE33EB
Authority key identifier: 0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/s58IznBXku8Poar8X3LmHqXrCj0.roa
Signing time: Mon 02 Jan 2023 09:44:50 +0000
ROA not before: Mon 02 Jan 2023 09:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9161
IP address blocks: 195.110.160.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:93:89:bc:fa:14:ec:ae:13:5c:0a:3b:be:33:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
Validity
Not Before: Jan 2 09:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b39f08ce705792ef0fa1aafc5f72e61ea5eb0a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e3:cf:b0:c2:d5:17:32:0d:45:3d:2a:5f:dc:
d6:e4:28:77:1a:01:c6:ce:f6:11:0b:76:21:52:62:
68:f4:59:ec:6a:ee:47:42:8a:cf:f1:95:13:cc:cd:
9f:82:1d:6d:af:2d:1b:55:cf:fc:f2:e4:8e:2b:20:
e1:ad:c1:8b:20:14:99:2b:7f:35:f4:2c:d5:45:d6:
71:f9:60:ec:e6:31:3b:37:e2:c8:28:a9:e3:83:f5:
a4:f3:09:17:6c:b3:d3:69:94:64:ef:79:24:0d:98:
c3:c2:f1:e5:04:26:f6:5b:72:a8:e0:f0:0a:2a:77:
8f:b9:1e:57:41:c5:f1:02:8d:fa:89:8f:46:38:dc:
a1:32:f8:88:c5:5c:44:d4:56:71:22:0a:ec:ed:13:
96:47:5d:3e:28:e2:21:c4:e9:2b:a8:68:c6:4f:52:
b3:b0:03:91:ea:35:85:58:25:9b:b4:75:ee:b1:7e:
55:2b:18:30:c6:38:0f:de:77:a7:69:cc:8f:72:76:
3f:98:fe:6a:5c:8a:07:29:f7:05:3e:79:61:18:15:
aa:ad:08:40:db:1b:d9:ce:a1:b5:38:33:b1:48:09:
8c:d9:31:d1:0d:5e:24:9e:77:45:93:c8:52:ef:09:
03:d3:99:df:c2:a4:f8:ba:51:63:d7:39:0e:37:5c:
76:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9F:08:CE:70:57:92:EF:0F:A1:AA:FC:5F:72:E6:1E:A5:EB:0A:3D
X509v3 Authority Key Identifier:
keyid:0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/s58IznBXku8Poar8X3LmHqXrCj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.110.160.0/19
Signature Algorithm: sha256WithRSAEncryption
87:c1:8d:12:2d:80:01:19:6f:e7:f1:18:e8:bc:91:11:57:84:
0c:32:49:59:2b:7d:65:60:c8:f2:48:3a:0f:e8:6f:3d:9c:01:
86:14:f4:e8:94:3f:6f:0a:04:48:e6:bf:1b:ea:3d:1a:7d:f3:
51:97:04:a3:94:3b:e4:a3:e5:80:4d:20:f2:1c:3c:4f:13:8e:
97:94:bb:b9:db:90:e5:51:61:56:73:f4:45:37:d9:a0:84:22:
f0:41:6e:d1:6c:f2:f5:0f:1f:1e:e5:dc:e6:4c:8e:91:51:3d:
ab:d1:c0:99:71:97:64:ec:bf:a5:17:f6:df:35:9a:70:90:f7:
7e:5e:ce:ac:9f:59:ac:5f:9f:7d:f6:31:19:79:d3:8f:03:ff:
72:77:c2:5b:b3:8f:df:6e:5f:11:74:2f:61:de:d6:5a:50:a4:
39:94:85:b7:b8:7a:24:7e:be:78:cf:ff:38:86:26:eb:0a:09:
58:33:a2:d7:85:b7:8d:58:b5:81:f9:59:eb:f4:1c:c9:cc:60:
01:a1:fe:d1:df:1c:4e:72:6e:03:3d:9f:af:df:9f:b7:09:59:
0a:b8:b4:2d:cf:99:79:f0:1e:f5:a8:ce:d1:f4:88:3b:13:4b:
37:ec:38:7a:43:43:fe:ab:d4:ee:33:19:d9:fb:3b:4b:c9:ca:
b2:1d:04:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:56 2024 by rpki-client on console-fra.rpki-client.org