Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/vQw-lV0hSly6ycTTUk4BNxw7wOk.roa
File: vQw-lV0hSly6ycTTUk4BNxw7wOk.roa (raw, json)
Hash identifier: kcxnRCJ6oH1rp8moIlikwGIKYP2bKIRelCBjjbrO7gQ=
Subject key identifier: BD:0C:3E:95:5D:21:4A:5C:BA:C9:C4:D3:52:4E:01:37:1C:3B:C0:E9
Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial: 018CC42485118681FFD980127DC15C7E3062
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/vQw-lV0hSly6ycTTUk4BNxw7wOk.roa
Signing time: Mon 01 Jan 2024 08:29:36 +0000
ROA not before: Mon 01 Jan 2024 08:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212847
IP address blocks: 195.234.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 11:20:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:85:11:86:81:ff:d9:80:12:7d:c1:5c:7e:30:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
Validity
Not Before: Jan 1 08:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd0c3e955d214a5cbac9c4d3524e01371c3bc0e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:69:ee:3c:b3:e0:79:86:da:10:c3:c6:02:
b3:7a:c8:d4:f6:bf:25:d3:e2:e1:e1:2c:55:2a:9d:
fd:a7:ad:af:91:36:0f:be:40:d8:5d:8a:92:a1:4a:
bc:df:27:e0:55:cf:cd:d3:6c:76:12:cc:74:b7:1f:
3b:ca:53:8a:ef:41:41:16:6e:df:69:c1:4b:a2:f5:
f6:49:51:04:69:d0:c0:27:9b:69:ce:6d:fd:ad:a8:
9f:51:ce:48:2a:a6:f7:e1:e3:75:f9:30:a7:9b:b2:
4a:71:45:d3:3d:07:c6:60:c6:c2:64:96:b6:02:f2:
65:bd:fa:7b:e6:21:7b:2f:42:de:3d:65:b5:7e:bd:
9e:2f:5b:ea:2b:90:d7:89:0d:82:38:86:97:48:35:
30:dc:6c:93:5c:df:d0:8c:2e:ca:0d:d8:b6:30:bf:
cc:17:95:33:8a:73:7a:8e:f3:58:5e:2d:1e:e0:54:
8b:77:f1:0d:ef:46:9a:21:19:d8:35:fe:f5:9c:9b:
64:ea:5c:df:6b:d1:f5:5a:a8:e1:21:b8:d4:f6:2a:
83:ea:82:13:d7:bc:3b:76:9e:9b:4c:5f:03:f2:58:
45:5c:7d:ef:27:c3:bf:92:50:42:33:81:e2:56:5e:
09:42:23:42:00:69:29:81:11:a8:3a:1a:63:51:dc:
f4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0C:3E:95:5D:21:4A:5C:BA:C9:C4:D3:52:4E:01:37:1C:3B:C0:E9
X509v3 Authority Key Identifier:
keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/vQw-lV0hSly6ycTTUk4BNxw7wOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.191.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:5d:cf:43:59:60:05:9b:0f:d3:e4:aa:59:8c:ad:fa:e5:db:
d6:26:38:ea:bf:73:18:43:4b:20:4b:dc:56:3d:ea:39:3d:c7:
9d:f2:7c:74:a3:e4:e8:7d:82:a8:f9:9d:bd:a2:47:cc:05:74:
a9:99:9a:81:c1:c9:ab:72:8a:40:fd:99:c1:33:06:68:e6:f4:
42:e4:2e:39:7c:45:81:7f:c2:1f:71:1e:bd:05:a2:5d:58:ed:
e2:e6:dc:c6:75:f2:3e:8b:a1:46:70:8f:d5:55:3e:8c:61:53:
ba:5f:ad:32:37:b8:4d:9f:e3:4c:ea:10:82:9e:8c:1f:4e:11:
9e:46:76:14:a8:e1:8e:05:05:4b:d1:d7:ef:93:67:e8:ec:f3:
83:e7:bf:65:f9:d0:42:5f:f4:f8:f4:e0:fb:2b:80:0a:d4:ae:
6c:55:29:ab:2a:8c:e2:a7:69:66:53:cf:39:10:04:78:eb:f6:
72:9d:f4:65:8b:8d:f9:02:ae:17:3b:3e:27:d4:c0:f5:83:8e:
23:bb:b4:6c:57:1a:52:2e:32:b4:6f:a0:f6:5f:df:41:ac:ae:
bb:84:11:31:0d:c2:e9:65:c9:59:f3:0f:b0:2f:a8:b7:31:8d:
5a:0a:9c:88:12:c7:fd:fb:d3:64:ed:37:79:42:6a:ef:04:2c:
64:d1:dd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 13:52:12 2024 by rpki-client on console-fra.rpki-client.org