Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/y8YOY4wlQh616U8rG6Cc_axQAwI.roa
File: y8YOY4wlQh616U8rG6Cc_axQAwI.roa (raw, json)
Hash identifier: N22wWyQk82LQTU7TFY/TqDq0j3Ee1mWpLiI8+cl3dmc=
Subject key identifier: CB:C6:0E:63:8C:25:42:1E:B5:E9:4F:2B:1B:A0:9C:FD:AC:50:03:02
Certificate issuer: /CN=bf817dc8552df3610ffc45441b3f81464e489dc8
Certificate serial: 01894EA64B74F8B19A3C2A58DC6D10F02A39
Authority key identifier: BF:81:7D:C8:55:2D:F3:61:0F:FC:45:44:1B:3F:81:46:4E:48:9D:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4F9yFUt82EP_EVEGz-BRk5Incg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/y8YOY4wlQh616U8rG6Cc_axQAwI.roa
Signing time: Thu 13 Jul 2023 09:47:48 +0000
ROA not before: Thu 13 Jul 2023 09:47:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39029
IP address blocks: 195.88.54.0/23 maxlen: 24
2001:67c:21e0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4e:a6:4b:74:f8:b1:9a:3c:2a:58:dc:6d:10:f0:2a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf817dc8552df3610ffc45441b3f81464e489dc8
Validity
Not Before: Jul 13 09:47:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbc60e638c25421eb5e94f2b1ba09cfdac500302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:12:97:d7:17:8d:e0:17:59:2c:be:c7:b4:dc:
fe:17:8c:0d:c1:ed:1c:d6:81:b6:00:68:c8:38:f8:
7d:e1:2a:ca:c5:b7:be:b1:62:e4:cf:61:6e:15:98:
04:9a:32:ff:13:0e:40:30:76:b7:49:7c:c7:9e:b2:
39:4a:e0:9a:87:d4:97:7e:b9:ce:6d:f1:60:16:dc:
e9:44:21:1f:25:8f:2a:fc:2d:0e:61:95:a6:aa:18:
3d:44:93:c4:90:10:2c:55:fd:83:41:9b:37:8a:d8:
99:75:2e:f2:93:0b:e2:0e:0b:d4:a6:2c:69:a7:74:
db:f2:0d:f9:e0:83:4d:c5:8f:d1:95:01:77:64:36:
0d:e1:61:43:06:59:5a:45:da:10:a9:1b:71:61:8b:
cc:a3:76:be:54:87:c5:ac:7a:d8:0b:52:23:24:7f:
26:51:5b:63:7c:34:24:01:40:76:51:f5:a0:c5:c3:
1b:9f:66:49:b8:8f:1c:e8:61:67:97:58:b3:45:7a:
e7:46:25:10:c0:2e:0a:a7:ba:29:a2:44:10:54:2b:
e9:cd:9d:2a:60:a3:db:91:21:c7:ac:93:16:c9:28:
52:4b:cb:e9:f8:1b:15:93:c7:37:57:05:ff:36:07:
72:fd:90:9b:27:0f:69:cb:62:17:79:8b:73:f2:9e:
3b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C6:0E:63:8C:25:42:1E:B5:E9:4F:2B:1B:A0:9C:FD:AC:50:03:02
X509v3 Authority Key Identifier:
keyid:BF:81:7D:C8:55:2D:F3:61:0F:FC:45:44:1B:3F:81:46:4E:48:9D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4F9yFUt82EP_EVEGz-BRk5Incg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/y8YOY4wlQh616U8rG6Cc_axQAwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.54.0/23
IPv6:
2001:67c:21e0::/48
Signature Algorithm: sha256WithRSAEncryption
43:78:7d:e9:96:ff:f8:e3:5f:f1:37:c3:77:5d:7d:53:24:b7:
b4:df:ee:e9:b9:a6:97:4d:83:46:e5:0e:6f:e9:0f:86:1d:43:
f0:7a:c2:84:32:6d:3b:c1:21:aa:da:59:8d:c4:76:5c:41:6f:
95:3f:15:24:f1:2c:67:d5:aa:90:3a:c0:01:53:10:c0:5d:04:
01:a9:71:21:a5:ce:25:ff:41:42:b8:03:0a:f3:5a:21:a5:31:
d7:98:3b:ba:80:8f:fe:d5:c2:40:a0:dd:7c:a9:98:37:e8:bc:
73:e5:9b:7a:4a:23:2a:7c:e3:91:d5:ef:44:25:d1:32:94:bd:
d4:98:43:20:c0:53:55:ed:7a:d4:52:49:08:f9:88:0a:d6:5c:
6f:33:d0:de:91:78:c2:92:d7:79:57:ba:cc:47:e5:85:68:25:
e6:f1:d2:5b:b1:39:48:57:55:cd:c1:f7:e8:ca:65:2f:3e:47:
99:0c:d3:f3:7a:4e:9e:29:b0:eb:72:e8:9a:8c:72:2a:cc:55:
bf:c5:3d:7c:f7:d5:cf:5f:d5:32:80:31:ff:34:3b:41:01:eb:
cd:cf:81:2a:1f:47:8b:b1:10:54:c4:4f:06:6f:04:5b:24:c9:
88:31:eb:9d:90:ec:b7:2e:c5:b4:b8:12:7a:03:64:37:2d:2a:
30:ea:87:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:56 2024 by rpki-client on console-fra.rpki-client.org