Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/a43RqGzvFVUe2ZeFLjS0h7gfpBE.roa
File: a43RqGzvFVUe2ZeFLjS0h7gfpBE.roa (raw, json)
Hash identifier: IDbPluJincFt2ZxlpWGcYA2qigAkANfgLW4/2btBVLo=
Subject key identifier: 6B:8D:D1:A8:6C:EF:15:55:1E:D9:97:85:2E:34:B4:87:B8:1F:A4:11
Certificate issuer: /CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Certificate serial: 01856CCAED84EEE4FFDF82783508253C0EB4
Authority key identifier: 80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/a43RqGzvFVUe2ZeFLjS0h7gfpBE.roa
Signing time: Sun 01 Jan 2023 10:05:16 +0000
ROA not before: Sun 01 Jan 2023 10:05:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45035
IP address blocks: 195.158.234.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 13 Jun 2023 16:52:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:ed:84:ee:e4:ff:df:82:78:35:08:25:3c:0e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Validity
Not Before: Jan 1 10:05:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b8dd1a86cef15551ed997852e34b487b81fa411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8c:a6:b0:af:22:a6:74:b7:f0:4d:30:d2:00:
26:f7:9b:da:af:cc:b4:ca:b9:11:6a:70:79:ea:e4:
1b:c9:ad:ea:13:f0:8b:fa:8c:bc:f8:c2:8d:e3:bd:
75:01:a7:b0:19:d6:a2:ab:22:49:e2:8a:1d:78:0e:
5d:a8:d3:63:f1:ee:ff:07:b5:a4:86:dc:99:94:50:
d2:5a:b6:d8:04:6e:e0:71:e2:0c:7a:d3:ed:07:81:
fe:1a:74:ad:76:a8:8a:23:73:07:45:60:5b:35:ff:
3b:06:1a:4b:46:63:49:f5:d0:e2:e3:e5:da:ef:23:
73:89:a2:d2:e3:b6:32:11:38:e0:e5:8a:bb:62:f3:
7d:7a:ba:ac:52:1c:2a:c3:3b:f9:19:d2:b0:e5:5c:
23:d3:51:d4:be:30:70:31:e9:bb:f0:84:51:09:eb:
3e:39:be:21:d1:28:64:19:41:d2:7e:ed:81:ac:2a:
83:b5:d6:8d:3a:22:99:33:9b:21:63:8b:23:37:dd:
29:c3:00:e8:b8:eb:2e:6c:47:a8:7e:5d:bb:46:1e:
d4:69:73:c3:01:67:05:e0:ed:c2:a3:64:f9:7e:8c:
84:92:2c:c9:2b:99:c5:d4:6c:ef:92:c3:ab:14:53:
2f:8f:51:66:13:04:d9:14:a7:52:e4:69:e1:25:45:
88:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8D:D1:A8:6C:EF:15:55:1E:D9:97:85:2E:34:B4:87:B8:1F:A4:11
X509v3 Authority Key Identifier:
keyid:80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/a43RqGzvFVUe2ZeFLjS0h7gfpBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.158.234.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:67:d8:fa:e3:ad:b3:08:49:25:36:f3:ba:7e:fb:56:2d:89:
1a:39:e1:69:09:90:61:a4:f6:3b:eb:a3:8d:b2:57:49:37:7d:
24:bb:90:55:1a:b3:84:a4:21:21:f9:71:05:39:71:9d:ef:07:
91:c7:f1:bd:63:36:9a:e7:31:ef:b4:aa:ba:a8:26:f7:81:04:
56:6f:f3:57:41:42:8f:fa:ab:8a:3c:68:f5:65:68:06:2a:92:
0b:ab:5b:3d:5a:5d:00:65:91:64:f0:f8:64:0b:9e:c4:da:3b:
f2:ed:33:9a:5b:e8:00:c0:8d:85:90:49:7c:14:7a:3d:c7:ad:
3e:f3:d2:2b:f3:e0:a0:ec:26:85:0f:b5:58:5e:2e:eb:68:c2:
53:09:cb:6f:a2:4e:1e:a3:24:55:d2:95:b0:b3:a0:ef:ce:e1:
16:79:a2:ec:13:1c:fa:a5:8d:ee:c7:46:a8:c1:5a:9b:ab:fd:
15:15:8c:e0:3a:12:a3:7d:1e:89:e1:a5:3b:2a:fd:fc:db:a6:
67:e2:8e:1f:f3:1a:73:06:ad:d1:e1:d7:72:95:1f:5e:52:86:
ff:33:6a:ce:1a:36:39:bf:cd:5d:ba:cf:c4:33:aa:96:0e:d2:
fc:51:a2:40:4e:1f:86:15:6e:e1:3f:f7:6b:6e:1c:4e:ae:4e:
cf:24:30:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:58 2024 by rpki-client on console-ams.rpki-client.org