Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/6BUBo4QX_pMibNn4EikNE1TyqwM.roa
File: 6BUBo4QX_pMibNn4EikNE1TyqwM.roa (raw, json)
Hash identifier: V5HGSzrSPQtDCmuWxRM/8Ek+YQx1kZB83GwlZkQ8d1I=
Subject key identifier: E8:15:01:A3:84:17:FE:93:22:6C:D9:F8:12:29:0D:13:54:F2:AB:03
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 0192FC44856C39215F79DE0AB1A329A4F86A
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/6BUBo4QX_pMibNn4EikNE1TyqwM.roa
Signing time: Tue 05 Nov 2024 12:20:01 +0000
ROA not before: Tue 05 Nov 2024 12:20:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24768
IP address blocks: 195.216.164.0/22 maxlen: 22
213.182.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 14:18:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fc:44:85:6c:39:21:5f:79:de:0a:b1:a3:29:a4:f8:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Nov 5 12:20:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e81501a38417fe93226cd9f812290d1354f2ab03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:06:65:eb:f1:56:44:67:4a:19:da:74:8a:1f:
b4:62:07:10:38:5b:d2:64:75:45:26:c8:3c:69:77:
69:25:fe:1a:48:7a:e7:e7:2c:3e:42:dd:89:b0:7d:
16:78:f7:a1:48:b6:55:76:f0:fb:fb:42:79:6a:38:
a3:be:27:a1:9b:b8:df:98:b2:df:01:af:b1:4d:e2:
4c:f3:94:c8:dc:a7:71:3c:5e:9a:a4:02:03:0c:13:
ad:a4:71:52:3b:ec:d1:dc:60:36:45:dd:5f:2d:f4:
a2:2b:b7:91:bf:e0:c3:c3:bf:42:6f:2f:c8:33:c7:
58:58:98:e9:2c:81:11:23:fa:2c:86:40:91:29:1f:
17:aa:08:9d:eb:37:cf:ed:fb:dc:ad:2b:39:9f:70:
24:2f:a5:90:ec:9c:1c:47:4a:44:72:bf:e8:0c:30:
f3:15:26:96:9c:f7:71:ba:46:23:9f:a9:f8:3b:9f:
d2:45:fe:7d:09:48:04:36:1b:15:c4:f2:58:0b:0f:
87:04:7e:22:8f:56:16:98:f5:df:e7:3c:15:ce:b0:
8f:bf:14:bd:e9:02:a0:c9:92:8b:bb:fc:b0:e8:30:
e7:f4:35:c3:db:31:d1:19:01:8d:9f:a2:d1:a9:21:
a3:48:1e:93:05:82:18:c3:e6:a5:03:23:12:4c:dc:
89:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:15:01:A3:84:17:FE:93:22:6C:D9:F8:12:29:0D:13:54:F2:AB:03
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/6BUBo4QX_pMibNn4EikNE1TyqwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.164.0/22
213.182.195.0/24
Signature Algorithm: sha256WithRSAEncryption
10:2f:1b:ec:89:e5:b8:0a:48:39:18:8f:12:73:f2:3b:27:33:
cc:62:87:5d:6e:84:59:76:bf:09:84:77:05:26:d0:4f:b4:6e:
86:35:4f:12:0a:40:59:fe:4c:af:ba:75:fb:2e:ef:f7:64:dc:
7f:c8:ee:a0:33:2e:17:fc:07:d4:ae:e7:d9:e7:97:b0:d2:7a:
ba:b4:3d:f3:02:d0:38:a1:43:2b:4d:b8:84:a2:86:8e:1e:8b:
89:40:63:97:d9:f5:cd:e4:f7:21:2b:5c:4c:25:61:fd:00:f6:
c9:69:bc:55:a6:6b:27:ae:4d:66:24:97:87:d9:47:cb:aa:ee:
49:2e:bd:03:48:c1:5f:df:eb:d0:73:77:1d:74:3d:03:ea:d6:
89:f8:2d:72:2a:0e:41:5c:50:f1:bb:84:f8:68:4c:ef:f2:a1:
77:9a:61:a2:c1:de:6f:b7:33:2e:2a:2e:b0:d8:15:2d:3f:c4:
25:04:62:4e:be:ec:69:8a:53:da:a3:07:50:f4:92:75:ed:ed:
64:e9:76:13:33:4f:f1:f4:94:cc:30:dc:26:e3:4c:18:12:30:
64:dc:cd:3a:9c:e3:e0:34:df:8b:61:a4:8f:8d:2a:90:85:6f:
1a:50:67:83:e9:16:9c:16:8e:e3:7e:63:f7:b1:24:c4:f3:39:
ed:aa:dd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 19:59:38 2024 by rpki-client on console-fra.rpki-client.org