Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/L0MXH6kDgvCmgSZlZmbHH3fZN4A.roa
File: L0MXH6kDgvCmgSZlZmbHH3fZN4A.roa (raw, json)
Hash identifier: 7LxUGFKzPyVhu6p9EkHfNfapoB89p8X/bY35a92kLJs=
Subject key identifier: 2F:43:17:1F:A9:03:82:F0:A6:81:26:65:66:66:C7:1F:77:D9:37:80
Certificate issuer: /CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Certificate serial: 018570CBD83B34B51EB8A4592A33004880F7
Authority key identifier: 85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/L0MXH6kDgvCmgSZlZmbHH3fZN4A.roa
Signing time: Mon 02 Jan 2023 04:44:45 +0000
ROA not before: Mon 02 Jan 2023 04:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207640
IP address blocks: 195.69.140.0/22 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:d8:3b:34:b5:1e:b8:a4:59:2a:33:00:48:80:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Validity
Not Before: Jan 2 04:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f43171fa90382f0a68126656666c71f77d93780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:53:17:ac:9f:45:5d:90:9b:5a:b9:06:94:78:
7d:83:57:f0:e6:b5:f6:0d:f2:0a:e8:3f:3c:73:27:
18:d2:67:18:96:cd:2d:9b:96:fa:06:b7:81:39:dc:
b5:95:b6:ec:a1:2f:f7:07:5d:77:45:be:b9:6e:ef:
f3:94:eb:17:65:78:80:f3:96:ec:bb:16:4f:4c:c3:
3a:9a:08:82:be:6a:9b:11:9c:54:08:c8:56:b2:23:
70:a3:23:07:e9:05:87:bb:33:9d:e9:9e:95:14:02:
f3:39:f9:a7:a6:97:e6:d7:6b:80:d0:99:10:19:d9:
15:d4:28:a0:63:8e:7f:fb:1a:38:33:81:35:8c:b2:
24:2e:82:01:86:89:58:c7:d8:54:55:d9:a2:4a:ec:
e8:e0:d8:06:5d:7d:ef:0b:90:20:c2:41:3c:0a:01:
11:66:e7:38:54:d8:a4:df:8a:47:f1:fe:d2:8e:2c:
4b:f4:69:02:be:f9:ec:c9:24:ab:cb:13:22:f9:85:
41:cb:e3:0d:2f:6e:a7:7d:9f:9b:1f:0e:3b:61:05:
d4:ef:ae:05:0c:6b:4b:3d:e5:b5:4a:ab:28:7d:0e:
8b:a7:a1:be:7c:1c:55:41:38:51:f1:e3:6e:b1:0c:
02:29:0e:ca:7f:67:96:f6:88:0d:d7:cf:cd:6b:a8:
cf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:43:17:1F:A9:03:82:F0:A6:81:26:65:66:66:C7:1F:77:D9:37:80
X509v3 Authority Key Identifier:
keyid:85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/L0MXH6kDgvCmgSZlZmbHH3fZN4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.140.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:62:9b:4b:3e:a3:66:e5:41:90:7f:6a:10:a1:92:eb:84:8d:
89:79:2a:48:12:12:8c:40:91:84:25:7b:d9:e1:00:d4:bd:ab:
9c:d8:46:34:58:21:7c:99:c6:b3:37:93:59:5f:16:b0:e5:e7:
05:44:6d:6f:b3:d9:41:03:20:78:c6:4b:41:30:2d:70:d9:ad:
cd:3d:b4:46:fa:92:a4:62:11:9a:53:f3:4e:20:94:d3:5f:75:
9d:79:4a:a7:9f:1c:62:4e:f0:ca:84:24:1f:6b:99:76:36:e0:
cc:3c:3b:f1:53:8a:3c:9c:81:78:a4:db:b9:2b:a6:e9:9a:a7:
ad:10:b4:df:36:a8:ea:90:29:c8:52:04:cb:a1:9d:4a:1b:a8:
b4:34:ed:cf:b8:62:5a:64:0e:c8:be:02:4e:62:8c:93:3c:2c:
fc:c7:1a:85:f0:73:20:03:9e:88:78:69:12:70:2f:ac:28:a7:
cb:12:8b:64:2f:71:11:e6:8f:ab:26:1a:ee:0c:e1:1e:21:8e:
4e:c2:37:de:34:9e:ae:3b:18:c0:e2:b7:05:b9:40:4f:18:28:
be:f7:ff:6f:00:e7:0d:76:ac:b2:7c:08:cb:87:fc:39:24:00:
a5:31:e3:16:4b:3e:32:45:dc:b2:6d:28:8d:f9:cd:b1:fc:3f:
62:79:6d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:35 2024 by rpki-client on console-fra.rpki-client.org