Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/lXNlDDOebcJnz-gBMo24yJ-Ry20.roa
File: lXNlDDOebcJnz-gBMo24yJ-Ry20.roa (raw, json)
Hash identifier: LaXmkWQ4eVrVQz45jpP8KU4CQDlx1VgkJxp1GIsYbfE=
Subject key identifier: 95:73:65:0C:33:9E:6D:C2:67:CF:E8:01:32:8D:B8:C8:9F:91:CB:6D
Certificate issuer: /CN=a7f09ad8aad3b3354875bbeaed05b61a54a03704
Certificate serial: 01857094FE4D24940FDFD254FCE1065A50D1
Authority key identifier: A7:F0:9A:D8:AA:D3:B3:35:48:75:BB:EA:ED:05:B6:1A:54:A0:37:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/lXNlDDOebcJnz-gBMo24yJ-Ry20.roa
Signing time: Mon 02 Jan 2023 03:44:50 +0000
ROA not before: Mon 02 Jan 2023 03:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198572
IP address blocks: 195.200.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:fe:4d:24:94:0f:df:d2:54:fc:e1:06:5a:50:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f09ad8aad3b3354875bbeaed05b61a54a03704
Validity
Not Before: Jan 2 03:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9573650c339e6dc267cfe801328db8c89f91cb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b8:2e:ed:ab:33:44:bb:59:16:2f:07:1f:fa:
65:c8:96:0b:73:08:2d:be:e1:76:aa:ab:b4:19:a0:
88:88:14:5e:7e:eb:ea:5d:70:aa:0d:af:30:7a:4e:
3c:9e:30:c7:81:ff:b8:70:db:da:8a:f8:21:94:bd:
a8:5c:9c:ba:40:dc:5b:18:b8:12:ff:91:2a:b9:95:
6b:ba:d7:d3:af:b6:35:6d:3d:2a:23:f5:1f:95:1c:
1c:99:9d:fc:ce:e1:05:a2:26:88:c3:42:da:08:be:
1d:9b:6a:bf:70:53:7a:b0:9e:55:cb:51:53:5e:e0:
cd:02:08:b1:d8:9a:0a:b0:ae:34:37:14:6d:9e:16:
37:39:b1:d1:08:19:dd:b7:7b:b7:ec:01:60:5e:9b:
2d:a6:59:95:92:7b:aa:61:47:b0:d1:0f:20:fd:7b:
1e:52:e0:79:d8:01:c8:25:fc:9b:7d:d3:41:4c:6e:
29:70:d0:3a:e1:04:b2:59:2a:c4:98:0d:4e:64:9b:
e2:79:62:a7:ef:3f:3f:c1:19:2d:a8:71:d7:5c:a8:
6a:7d:68:2e:01:4f:22:43:8f:90:01:db:82:62:46:
e4:e0:2a:a9:b1:c1:2a:08:6f:96:d8:75:de:0c:44:
62:26:42:39:d0:90:0c:a2:fd:5f:ab:b2:2c:6e:8b:
f1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:73:65:0C:33:9E:6D:C2:67:CF:E8:01:32:8D:B8:C8:9F:91:CB:6D
X509v3 Authority Key Identifier:
keyid:A7:F0:9A:D8:AA:D3:B3:35:48:75:BB:EA:ED:05:B6:1A:54:A0:37:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/lXNlDDOebcJnz-gBMo24yJ-Ry20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.200.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:f7:f4:aa:45:91:aa:43:6f:52:6f:96:d8:ba:51:0e:74:99:
8e:e9:ad:c1:11:3b:15:da:18:09:1c:1e:dd:84:19:72:a3:6f:
4b:61:26:94:b3:1e:95:a7:3b:3e:ba:b4:35:b4:cf:e7:ca:35:
83:e3:29:01:8c:c4:a4:fd:8b:6c:54:2f:3b:f7:ab:78:ab:30:
74:f6:20:84:ba:9c:05:fd:d3:44:71:9f:0b:b6:64:7b:48:6c:
34:2f:05:ff:c6:38:5f:cc:46:d8:d7:49:6c:ab:9c:f5:66:41:
3f:f8:40:5f:4a:f6:87:45:82:da:cc:03:70:ab:a9:4b:10:a7:
e8:eb:11:89:02:5a:49:1f:44:d2:36:77:93:05:e7:72:7a:11:
8c:e9:9d:58:77:5a:da:a2:5a:a0:21:35:0a:5f:12:e8:0f:3d:
00:e8:d8:46:0a:5e:75:a8:b3:4b:de:b7:af:82:3a:7b:42:71:
4f:b1:93:3b:5d:56:9e:b7:34:13:99:8c:7d:d6:77:40:3f:ac:
ab:6b:18:4d:86:70:57:34:92:82:ba:5f:1b:2b:eb:cb:db:75:
a1:21:e9:e3:84:e6:c1:22:0d:c9:d1:64:78:f4:5a:3e:97:b6:
f1:17:86:85:72:83:75:5f:89:69:23:ae:76:b7:32:3c:6f:82:
b8:8e:60:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:56 2024 by rpki-client on console-fra.rpki-client.org