Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/O-acA12kIO8qRAbCdQl5Xulyi_Q.roa
File: O-acA12kIO8qRAbCdQl5Xulyi_Q.roa (raw, json)
Hash identifier: lW6ANU4VNsE/s2yNts1P+UF0Nmp7aThG16un06Um2M8=
Subject key identifier: 3B:E6:9C:03:5D:A4:20:EF:2A:44:06:C2:75:09:79:5E:E9:72:8B:F4
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 01857030610F9BF9F1AAA307682A0F4F77A8
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/O-acA12kIO8qRAbCdQl5Xulyi_Q.roa
Signing time: Mon 02 Jan 2023 01:54:56 +0000
ROA not before: Mon 02 Jan 2023 01:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28924
IP address blocks: 195.56.147.0/24 maxlen: 24
195.56.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:61:0f:9b:f9:f1:aa:a3:07:68:2a:0f:4f:77:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 2 01:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3be69c035da420ef2a4406c27509795ee9728bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:81:52:26:2a:e6:6a:b3:ea:37:40:78:0a:ee:
c8:a0:61:96:da:12:84:97:12:9d:f3:0c:0d:08:32:
39:38:57:28:78:c7:b1:59:df:9f:ab:23:ba:1a:08:
72:c0:70:62:78:71:30:29:05:bc:1b:d4:be:19:9f:
ac:ad:91:57:a6:6a:b6:5e:2a:2c:c5:10:03:c6:be:
81:82:8c:bc:33:45:e4:a8:51:63:42:e5:e6:41:ed:
e9:35:c8:ee:d7:28:0f:d6:e6:63:f6:2f:a9:54:83:
9a:ae:27:8d:d1:6f:3f:4f:02:e3:10:f8:cf:66:ec:
62:9d:3c:fe:f3:69:8c:30:3e:6d:50:5d:9a:3d:2b:
26:8b:34:18:a8:81:50:66:b0:db:f6:9e:19:39:76:
bd:de:d1:07:6c:b8:d6:42:12:23:49:13:4f:f4:f0:
54:54:9c:2b:dc:fd:60:fa:44:cf:f9:70:bb:67:aa:
5d:6f:27:a5:ae:7a:34:47:d8:60:52:f9:0f:7b:f9:
44:fc:f2:36:da:6d:d9:c1:ee:4b:8e:0d:8c:70:40:
14:b6:88:c3:8d:e0:fc:87:6d:d8:33:2b:1d:10:fb:
21:45:58:3e:7f:0f:3f:39:10:42:d4:42:b0:c3:f2:
2e:cc:8a:b6:bc:5e:84:f2:ec:8c:8d:29:28:8b:4a:
cc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E6:9C:03:5D:A4:20:EF:2A:44:06:C2:75:09:79:5E:E9:72:8B:F4
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/O-acA12kIO8qRAbCdQl5Xulyi_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.56.44.0/24
195.56.147.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:61:32:52:f7:3c:c9:6b:1f:2b:f7:b5:24:ca:76:c4:10:f4:
a3:a5:84:82:61:c1:97:ea:4d:f0:e5:8b:7b:8f:d6:82:71:90:
b9:f6:ef:40:e7:f9:aa:15:8f:4d:1c:27:28:62:fc:1b:0c:01:
92:f8:6e:c0:e1:d1:bf:fc:f8:35:f1:ed:99:79:20:03:2a:48:
c8:14:9c:67:9c:e3:a1:ab:8f:fe:50:51:8a:54:80:1c:f0:bb:
4b:6d:1d:29:0c:2b:73:90:5b:d7:f4:a0:9e:8a:11:e2:e1:20:
98:8b:f8:90:9a:90:a2:46:9c:3a:66:09:90:d3:b7:bf:83:94:
db:ec:ab:81:6a:54:31:ba:4a:26:62:5b:fd:f7:dd:c3:40:19:
d6:ec:a5:c2:fb:8f:88:db:fe:3e:50:65:01:a8:0f:81:0f:7d:
e6:59:3c:db:d8:b2:39:c1:3f:bf:a1:7d:88:f3:b4:8c:6d:fb:
e2:b1:3f:5b:a0:0a:5a:80:a8:f5:fe:d8:e8:8a:f6:2d:d8:9b:
a4:df:ac:d0:42:3f:b2:a1:2b:66:1e:25:b8:3b:ad:e4:b5:fc:
cb:fb:05:d1:9e:87:f1:e4:14:8a:96:b8:38:58:b9:1d:1e:65:
36:07:00:87:eb:b7:dd:79:25:7e:21:75:78:aa:d7:df:e7:b6:
b1:af:38:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:13 2024 by rpki-client on console-ams.rpki-client.org