Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/avwa1K_eRtJ_i-neI12pcQNqvxU.roa
File: avwa1K_eRtJ_i-neI12pcQNqvxU.roa (raw, json)
Hash identifier: /yh81f0ZT5kuUGD9VgbLvhocBlgZzjsi1HA8D6ODCV8=
Subject key identifier: 6A:FC:1A:D4:AF:DE:46:D2:7F:8B:E9:DE:23:5D:A9:71:03:6A:BF:15
Certificate issuer: /CN=7e5555f1a2cee89b7134656086f054d796353c1e
Certificate serial: 01866F075743B6A223851FC69B90F0C3E63F
Authority key identifier: 7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/avwa1K_eRtJ_i-neI12pcQNqvxU.roa
Signing time: Mon 20 Feb 2023 13:33:17 +0000
ROA not before: Mon 20 Feb 2023 13:33:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25577
IP address blocks: 195.135.208.0/22 maxlen: 22
195.210.54.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6f:07:57:43:b6:a2:23:85:1f:c6:9b:90:f0:c3:e6:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5555f1a2cee89b7134656086f054d796353c1e
Validity
Not Before: Feb 20 13:33:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6afc1ad4afde46d27f8be9de235da971036abf15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:67:34:07:d5:fe:ea:c0:9f:b3:30:42:a0:85:
1e:62:29:a2:38:1c:9b:97:44:fa:28:e3:59:4c:c4:
44:1b:f9:95:22:76:0d:ef:6d:1c:8c:06:52:9b:a2:
9c:94:64:b0:74:35:ba:2d:42:38:f6:45:d9:52:dc:
96:64:b0:10:d4:92:d8:4f:b0:90:db:54:f1:bd:3c:
3e:90:c4:96:fd:b7:54:8f:80:87:c4:2f:45:53:f1:
10:eb:21:67:41:a0:c7:43:80:4f:da:87:af:7b:02:
19:e8:b3:da:c5:35:35:a0:65:cd:7c:f1:42:bd:ef:
6f:b3:80:1d:39:3a:a9:7b:fa:eb:39:0b:66:3c:39:
ee:4f:b2:6a:18:eb:31:63:58:59:b5:28:8f:df:d3:
38:11:79:63:7c:d6:e2:7d:b7:9a:e6:94:c0:9f:bc:
86:d9:33:2e:09:15:00:33:bd:5d:e0:73:8c:85:08:
3a:92:5d:f9:f3:0e:13:d2:a1:6e:a5:a8:fd:d0:ce:
5a:71:ba:19:45:c0:1e:eb:19:ab:0a:22:56:a9:c6:
d0:2a:b9:cb:74:a0:95:3d:a8:88:ed:d7:44:5c:69:
8e:2f:c6:4e:49:e6:86:43:8b:89:9e:eb:c8:4b:07:
0d:c6:d7:a0:77:22:02:62:3d:a1:e5:2a:8a:ed:4c:
04:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FC:1A:D4:AF:DE:46:D2:7F:8B:E9:DE:23:5D:A9:71:03:6A:BF:15
X509v3 Authority Key Identifier:
keyid:7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/avwa1K_eRtJ_i-neI12pcQNqvxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.135.208.0/22
195.210.54.0/23
Signature Algorithm: sha256WithRSAEncryption
75:1d:fe:32:9e:30:16:7d:69:be:cb:fa:e6:e1:8c:a7:35:3e:
66:fa:59:9a:c1:00:57:53:63:e9:87:7a:18:76:e7:0a:4d:68:
aa:3d:01:6b:12:85:86:b3:72:e6:57:7e:4d:c4:e0:d1:9e:0b:
61:04:d7:5e:3b:30:3a:6b:06:33:88:3e:cd:62:81:8f:81:02:
46:0d:80:0f:7e:9f:15:c7:0b:6a:a0:b6:81:31:85:3a:88:ca:
b0:f7:c6:22:1e:b6:ef:61:8b:19:e4:f2:79:b4:8a:b8:ad:b4:
71:c2:b3:70:af:b2:58:9d:44:ea:0a:12:65:0b:68:37:9c:6e:
15:e5:5f:cb:70:c1:7d:aa:71:e4:90:8d:c2:68:43:52:a5:64:
c0:cf:dc:43:fc:e5:59:97:13:74:41:05:d4:59:cb:d6:93:be:
19:8d:1f:9e:e0:b5:f4:0d:d6:66:d5:a1:00:f5:e0:13:bc:65:
8a:86:66:33:c5:5e:c5:3a:d2:05:2c:e6:98:27:49:7b:f1:0a:
e4:39:27:7f:ae:b2:be:04:5f:e9:36:96:67:2e:ab:6d:36:19:
6c:4d:64:2b:23:26:a6:f0:fa:07:38:6f:ca:f1:07:79:7b:4c:
09:89:3b:ec:d3:25:41:4b:b5:8e:d0:62:df:22:3b:ae:0a:c5:
47:6f:9f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:57 2024 by rpki-client on console-fra.rpki-client.org