Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/toZMnggRsncCAje9uCtkOzGMcho.roa
File: toZMnggRsncCAje9uCtkOzGMcho.roa (raw, json)
Hash identifier: 42tA7d/lo88Pz2epSXUnS3Kmlw3r4TKf89lLG48Xe74=
Subject key identifier: B6:86:4C:9E:08:11:B2:77:02:02:37:BD:B8:2B:64:3B:31:8C:72:1A
Certificate issuer: /CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Certificate serial: 01856E1427C7213ADC43FA79B85DCB4A9B5C
Authority key identifier: 5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/toZMnggRsncCAje9uCtkOzGMcho.roa
Signing time: Sun 01 Jan 2023 16:04:52 +0000
ROA not before: Sun 01 Jan 2023 16:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42821
IP address blocks: 195.182.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:27:c7:21:3a:dc:43:fa:79:b8:5d:cb:4a:9b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Validity
Not Before: Jan 1 16:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6864c9e0811b277020237bdb82b643b318c721a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9e:7e:9d:37:1d:ee:95:4d:d6:06:a7:ae:03:
9f:4c:10:a9:ac:5f:f8:01:d4:84:04:3c:6e:39:a6:
6e:3d:8d:11:91:66:9b:f7:bc:9a:64:b2:04:78:0e:
c3:e6:ad:ba:88:b0:b5:37:aa:66:16:ba:68:ab:07:
3d:6a:7b:5b:92:b1:a8:b3:56:dd:7a:84:9c:18:a1:
d9:ac:cf:d7:1e:8d:46:3e:95:80:c2:a5:46:2f:c4:
a0:67:6c:3d:23:00:d1:96:a8:6f:08:d4:7e:d1:47:
23:17:ac:1e:88:9e:05:05:a9:c2:57:e0:5e:1c:e5:
9d:6a:59:a0:51:0c:32:f8:cc:eb:80:58:36:8f:54:
5d:0b:59:b6:4e:f6:14:16:8d:9b:4f:80:e6:e4:bc:
f3:4d:53:0a:95:40:30:13:38:71:79:4d:84:01:12:
f6:9b:f6:bb:82:46:e1:d4:b8:a5:e0:18:b5:a9:c1:
01:0c:cb:11:49:e9:7b:4f:23:84:07:4b:89:1e:48:
8b:64:91:34:f9:45:fc:69:b5:c9:74:65:c9:ea:21:
ca:fc:c6:fc:c6:73:1d:44:32:9e:03:a0:c7:d4:fc:
dc:da:c3:10:7e:97:7f:60:26:f1:a2:b0:96:58:2c:
e8:e7:39:e4:68:c9:aa:0c:ad:5b:87:ad:80:ff:86:
07:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:86:4C:9E:08:11:B2:77:02:02:37:BD:B8:2B:64:3B:31:8C:72:1A
X509v3 Authority Key Identifier:
keyid:5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/toZMnggRsncCAje9uCtkOzGMcho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.50.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:ba:1a:9e:8d:a3:ec:43:d8:3f:16:6d:79:46:7b:0e:da:14:
bc:24:89:9b:1b:35:d3:86:ce:ef:c2:8b:1f:03:90:c5:f2:a9:
52:7a:62:0f:f8:40:71:ed:60:10:f1:95:f1:45:d5:40:a2:44:
0f:81:5d:5b:dc:ab:b2:8a:a9:4f:df:38:ca:a5:c7:6e:cd:af:
b0:8c:30:53:80:2e:89:87:e2:63:55:4f:04:49:a7:d5:2b:dc:
ee:6b:a8:8e:ed:89:45:e6:ad:3a:2d:6f:03:a8:1d:ef:d4:ce:
b8:db:f1:1c:35:cf:f4:98:7a:eb:d1:06:ff:05:9d:95:ec:b3:
64:d4:70:5b:85:20:3f:a2:24:94:73:cf:cb:eb:58:30:ff:d4:
dd:99:81:cf:45:67:94:65:c0:b0:cd:dc:93:2f:7d:2e:31:d8:
7e:93:af:c0:11:65:c7:27:05:e0:9b:ff:6d:1e:fb:a4:ea:83:
85:93:90:31:b0:b0:b5:e9:d1:43:ee:46:ea:1e:66:c7:a5:47:
e0:b4:ea:6e:50:1c:3a:55:26:46:fb:a1:55:46:30:00:87:77:
ed:4d:05:e2:35:4f:f5:da:d7:70:83:eb:ea:04:3a:dc:87:a3:
79:27:40:c9:62:fc:01:87:8f:1f:f3:44:a7:66:e6:ff:39:9f:
6a:0c:73:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-fra.rpki-client.org