Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c1afc6-fd95-4555-8625-3fe469db6626/1/o0USjqMFT5M43CTTHrWy2N6lz_o.roa
File: o0USjqMFT5M43CTTHrWy2N6lz_o.roa (raw, json)
Hash identifier: bq9MlNbCheUh41I+j+xHAPAPeRp32m1LArgDnC1NjUU=
Subject key identifier: A3:45:12:8E:A3:05:4F:93:38:DC:24:D3:1E:B5:B2:D8:DE:A5:CF:FA
Certificate issuer: /CN=96d900b0bc1e5f1b78c65cd83e7a20d8634726b6
Certificate serial: 01856FA6D724567DD1CD2801E1B00917F15C
Authority key identifier: 96:D9:00:B0:BC:1E:5F:1B:78:C6:5C:D8:3E:7A:20:D8:63:47:26:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltkAsLweXxt4xlzYPnog2GNHJrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c1afc6-fd95-4555-8625-3fe469db6626/1/o0USjqMFT5M43CTTHrWy2N6lz_o.roa
Signing time: Sun 01 Jan 2023 23:24:43 +0000
ROA not before: Sun 01 Jan 2023 23:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42365
IP address blocks: 195.22.155.0/24 maxlen: 24
195.22.154.0/23 maxlen: 23
195.22.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:d7:24:56:7d:d1:cd:28:01:e1:b0:09:17:f1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d900b0bc1e5f1b78c65cd83e7a20d8634726b6
Validity
Not Before: Jan 1 23:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a345128ea3054f9338dc24d31eb5b2d8dea5cffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:05:ef:40:1e:92:e8:d4:d0:b4:c3:ee:35:6a:
11:ab:d3:a1:ed:cb:cb:39:35:27:21:2b:03:e5:74:
d5:c1:a8:c3:d6:68:f7:40:c6:fe:61:a2:19:b0:70:
e3:40:a6:b0:f8:23:3c:55:4d:3c:1f:d6:02:3f:35:
87:16:98:8f:e6:dd:aa:61:79:0a:c7:af:f5:06:aa:
2d:8d:cf:49:58:b6:65:16:af:9e:fc:b4:8c:5c:91:
b9:29:65:82:02:53:fa:74:f2:1c:e3:85:d7:ad:60:
18:9e:44:10:77:e4:34:66:3e:e3:4d:2d:ba:7f:e6:
de:3b:50:61:fd:75:7b:bf:79:12:46:72:e1:f3:ef:
9e:05:04:3a:ca:a5:0e:37:01:77:8c:a6:6c:66:54:
06:b0:28:b9:5d:1b:5e:db:ba:93:58:27:8c:cd:98:
ef:8f:d9:69:40:8d:8e:6d:3d:5c:ef:54:1a:89:12:
5b:9a:9b:d6:ce:3f:8c:88:8c:c6:11:09:1d:cf:74:
9d:94:94:12:f8:04:41:43:78:e7:0e:a2:8a:65:97:
3c:38:65:9e:dd:54:63:11:bd:4c:97:b5:8d:d5:36:
b4:2c:6d:3d:2a:4f:82:a2:b5:fa:47:63:a6:cc:8e:
9b:b5:e2:aa:66:62:ac:64:67:aa:6f:c4:a4:9c:12:
69:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:45:12:8E:A3:05:4F:93:38:DC:24:D3:1E:B5:B2:D8:DE:A5:CF:FA
X509v3 Authority Key Identifier:
keyid:96:D9:00:B0:BC:1E:5F:1B:78:C6:5C:D8:3E:7A:20:D8:63:47:26:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltkAsLweXxt4xlzYPnog2GNHJrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c1afc6-fd95-4555-8625-3fe469db6626/1/o0USjqMFT5M43CTTHrWy2N6lz_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c1afc6-fd95-4555-8625-3fe469db6626/1/ltkAsLweXxt4xlzYPnog2GNHJrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.22.154.0/23
Signature Algorithm: sha256WithRSAEncryption
08:38:54:1b:d3:4b:78:90:5b:ed:9f:eb:fd:d1:be:19:32:b0:
70:97:26:ca:7d:1f:15:4d:bf:91:2b:dd:d9:6c:f9:f9:ae:32:
47:33:cc:d1:16:af:15:0f:61:07:3d:3d:ea:28:de:ff:ca:ff:
51:3c:1d:53:b6:80:d0:3a:7a:a8:57:cb:ae:92:39:00:2a:11:
97:56:e6:97:2e:70:02:ac:46:a7:79:e2:03:18:4b:34:d8:2f:
64:6e:98:a5:6f:7d:6e:47:e1:ce:af:5a:8a:42:06:f7:fb:43:
c1:1c:c3:15:2a:ec:f2:85:ab:e1:e3:93:94:0c:97:3f:c1:52:
b7:74:a7:be:07:57:c2:be:7d:1a:ca:6e:34:d1:d4:e5:54:ca:
00:58:dd:4b:f6:b8:b2:91:c0:31:73:bc:b0:83:e0:5a:bb:61:
c1:fe:e1:7a:46:e0:bd:e6:6f:32:f0:75:cd:08:d6:df:8e:b0:
be:f5:a7:5f:56:9a:5d:4d:5f:b0:7d:2d:6b:0c:f1:29:1b:52:
7e:f2:b2:1c:61:42:33:f6:2b:ed:4b:93:e8:13:6b:48:76:db:
30:7c:b0:53:c7:fc:ad:a8:1e:10:4a:74:c0:43:a0:f8:8f:cf:
fb:26:a6:0a:d5:8c:91:10:b2:a2:b4:07:0b:22:fa:1d:3e:48:
14:b5:2b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:17 2024 by rpki-client on console-fra.rpki-client.org