Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/xUuXHe9vRE6gs-2aTSY520Ep9ro.roa
File: xUuXHe9vRE6gs-2aTSY520Ep9ro.roa (raw, json)
Hash identifier: A7t5jzyNm7fhAF3LwMBo15f1XyU3DLdihbFKNdimvss=
Subject key identifier: C5:4B:97:1D:EF:6F:44:4E:A0:B3:ED:9A:4D:26:39:DB:41:29:F6:BA
Certificate issuer: /CN=0690913dbbeedadde95dce4704526284e7ae7cca
Certificate serial: 018571A7886C6066C440241FD0B74091A30A
Authority key identifier: 06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/xUuXHe9vRE6gs-2aTSY520Ep9ro.roa
Signing time: Mon 02 Jan 2023 08:44:42 +0000
ROA not before: Mon 02 Jan 2023 08:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12637
IP address blocks: 195.182.210.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:88:6c:60:66:c4:40:24:1f:d0:b7:40:91:a3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0690913dbbeedadde95dce4704526284e7ae7cca
Validity
Not Before: Jan 2 08:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c54b971def6f444ea0b3ed9a4d2639db4129f6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:54:5d:dd:6c:c8:0a:61:e9:f8:56:98:76:
1b:2f:72:20:0a:0f:fd:67:5c:fb:8c:9a:5c:81:06:
b3:e3:ea:50:33:5b:6a:35:3c:2c:da:94:07:06:b3:
c2:42:4f:f3:39:61:91:4c:44:53:28:d4:ab:09:e1:
39:f9:2f:12:a6:5a:31:14:db:c4:18:90:24:20:1c:
f8:71:d7:c0:ef:02:d2:a5:11:58:00:8c:c4:62:b7:
87:09:94:3c:d2:c7:d3:7b:c3:26:d4:9d:20:ea:46:
30:6b:63:16:82:ac:ac:84:03:af:ed:79:49:ae:59:
52:e3:d8:6f:d9:a9:d9:4e:52:84:c3:ff:16:ee:63:
45:0a:5c:b8:95:f3:0d:e2:fc:7d:d1:39:23:ab:0b:
03:14:0c:fb:d6:6e:30:dc:e2:09:f7:32:00:b0:da:
48:18:79:1b:89:49:18:e4:f8:05:c9:82:fb:31:46:
b7:bc:14:0c:70:67:54:a6:b6:c0:04:26:52:3c:5d:
9c:67:4e:9f:18:2d:85:d6:41:af:d7:6f:67:62:47:
f6:ad:fd:11:21:1b:7f:b6:46:6c:56:43:e7:1f:2d:
cc:d1:b4:81:b7:8c:26:c0:78:f5:a4:be:08:df:64:
9c:5a:58:f5:66:4b:6b:21:5e:65:d1:07:03:63:88:
b7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4B:97:1D:EF:6F:44:4E:A0:B3:ED:9A:4D:26:39:DB:41:29:F6:BA
X509v3 Authority Key Identifier:
keyid:06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/xUuXHe9vRE6gs-2aTSY520Ep9ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.210.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:8a:09:84:53:b1:21:90:73:ef:df:9b:e0:d6:33:aa:80:b3:
45:56:ef:6c:c3:49:87:f6:65:81:73:ae:ed:19:1b:35:dd:30:
fd:3c:fb:da:48:30:02:a1:48:38:ec:de:74:64:5e:cf:f0:43:
c7:a4:9f:30:03:07:5a:6d:89:2f:4a:ff:df:3c:3a:09:77:73:
44:77:e8:6c:65:4f:14:c4:ec:5b:46:5f:fc:a5:ed:48:ee:43:
37:e1:88:e6:6d:f5:48:8a:fa:0e:1d:62:76:78:e8:80:35:7e:
e3:ee:f1:6f:74:dc:67:fe:b1:90:21:71:23:8b:49:7c:49:4d:
86:d1:c5:66:6d:ed:84:24:c9:db:b4:8a:6d:c3:7a:e8:ce:03:
8f:ff:0c:f7:6d:ab:a7:72:4c:46:34:c2:7f:d6:d1:a0:50:98:
12:3a:a8:90:69:a6:c1:57:76:53:67:25:d0:bc:9e:9c:62:96:
60:31:87:05:ed:36:19:82:7f:9d:73:fb:c6:dd:a4:fb:24:e8:
19:ed:b2:9b:d9:5d:6f:f7:a0:c6:18:62:47:6a:d2:5e:d0:1a:
55:e0:ed:04:af:8e:c3:cb:47:10:cf:0d:3e:8f:34:33:ff:14:
a7:81:2a:4f:a5:8c:3c:b8:dc:ea:e0:17:8c:fb:c4:8d:3c:0e:
6c:99:6b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:27 2024 by rpki-client on console-ams.rpki-client.org