Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/w7zedUy3EXZu9_fzhVhE47HqKCo.roa
File: w7zedUy3EXZu9_fzhVhE47HqKCo.roa (raw, json)
Hash identifier: KMHtDTeKXOJZ3WnCunIRv48XUMWF98DmamkCXdpb2uc=
Subject key identifier: C3:BC:DE:75:4C:B7:11:76:6E:F7:F7:F3:85:58:44:E3:B1:EA:28:2A
Certificate issuer: /CN=6a937d95aebbbe62b90f24dea4d663170a6659ec
Certificate serial: 018572559C36AEF5F2A63B280AD63CB0E2A1
Authority key identifier: 6A:93:7D:95:AE:BB:BE:62:B9:0F:24:DE:A4:D6:63:17:0A:66:59:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/w7zedUy3EXZu9_fzhVhE47HqKCo.roa
Signing time: Mon 02 Jan 2023 11:54:51 +0000
ROA not before: Mon 02 Jan 2023 11:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29210
IP address blocks: 195.69.122.0/24 maxlen: 24
195.69.120.0/22 maxlen: 22
195.69.123.0/24 maxlen: 24
195.69.120.0/24 maxlen: 24
195.69.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:9c:36:ae:f5:f2:a6:3b:28:0a:d6:3c:b0:e2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a937d95aebbbe62b90f24dea4d663170a6659ec
Validity
Not Before: Jan 2 11:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3bcde754cb711766ef7f7f3855844e3b1ea282a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e0:0d:8d:bc:0d:07:18:73:e9:82:f6:be:69:
6a:af:ff:a8:37:18:f4:e5:52:c5:6f:5f:f7:c1:62:
fe:8d:5d:22:85:97:b3:f3:64:11:f4:8e:45:1c:b8:
c8:ce:77:68:f8:56:4c:7a:1b:c8:e0:da:cc:76:bd:
9f:19:13:00:f1:9e:af:c1:c8:ae:35:2b:4e:2c:df:
b2:aa:5b:73:58:36:98:48:83:12:26:6d:a8:41:c3:
aa:88:98:f9:1b:a5:3f:7b:ba:73:40:95:c9:e2:25:
be:3d:6e:12:5f:d2:2f:46:99:78:ff:d5:54:b1:24:
b3:42:73:98:ad:01:b1:00:2a:d6:f3:18:d9:42:f7:
ec:69:9e:18:34:e6:1f:ac:ae:52:a8:16:87:c9:63:
30:e6:98:2d:ce:dd:97:f0:d4:69:cb:b6:95:b7:e4:
03:60:5a:a7:75:d1:a7:bc:08:f7:10:e0:27:14:59:
53:e5:65:fa:31:ee:ce:2a:1a:f2:67:7c:56:00:c5:
15:27:f0:65:18:b4:33:fa:d2:f9:41:b8:22:0a:15:
99:34:79:c7:25:fe:ec:b1:a1:c1:df:64:27:0c:b7:
4e:b0:31:53:d5:d5:61:1c:72:b8:e7:96:20:71:89:
14:ee:c3:d4:f6:2b:4e:e3:6d:6a:aa:c9:15:61:fe:
f5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BC:DE:75:4C:B7:11:76:6E:F7:F7:F3:85:58:44:E3:B1:EA:28:2A
X509v3 Authority Key Identifier:
keyid:6A:93:7D:95:AE:BB:BE:62:B9:0F:24:DE:A4:D6:63:17:0A:66:59:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/w7zedUy3EXZu9_fzhVhE47HqKCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.120.0/22
Signature Algorithm: sha256WithRSAEncryption
10:22:86:5b:24:c4:c4:d7:dc:40:96:15:2c:18:ab:e3:ec:be:
57:f3:8e:67:12:66:07:2d:a5:0b:80:59:a5:a9:93:25:f8:30:
82:69:f0:6e:8c:56:40:2f:c4:04:45:63:52:aa:99:38:4c:1e:
46:cc:61:9c:e2:03:b5:40:c9:7f:22:b0:d7:a0:94:6d:b1:99:
fd:a0:ab:65:e2:ea:5c:f2:52:c3:2f:38:65:05:89:20:ea:fc:
48:94:71:27:6d:35:f2:0f:7c:82:34:96:5e:c3:63:ea:e8:55:
44:49:d1:5b:62:f3:da:26:a6:8b:d1:0a:0c:0c:e7:1a:e0:c6:
05:b8:74:db:b0:67:31:ec:ab:1e:19:09:7a:ee:b6:0a:fc:40:
be:b5:9a:43:04:09:33:c5:78:f2:16:20:ce:8b:62:d4:67:f1:
42:1d:91:02:f4:a7:87:4a:f4:dc:a9:d0:b4:82:c6:31:aa:5a:
4c:bc:29:5b:ea:54:ed:a8:a3:25:88:0d:b7:0d:76:86:e1:ad:
c0:10:84:93:88:26:26:89:4c:ad:2d:f8:5b:54:5f:f9:8f:96:
89:5b:6a:d6:3e:2b:5f:e2:46:9b:75:5f:fc:a8:90:d9:6f:9e:
6b:c2:1b:95:3d:42:27:8c:69:a9:5b:d5:74:f7:ae:5a:e7:04:
c9:a4:bd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:55 2024 by rpki-client on console-fra.rpki-client.org