Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/ip9-LKYd4M3mKaJt5cbeyNFdk-c.roa
File: ip9-LKYd4M3mKaJt5cbeyNFdk-c.roa (raw, json)
Hash identifier: xVu8o0Ir7fCxTtUODXZ3kh8dv+v+s4AyV3EE4H0usDQ=
Subject key identifier: 8A:9F:7E:2C:A6:1D:E0:CD:E6:29:A2:6D:E5:C6:DE:C8:D1:5D:93:E7
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0185719E8A268EDC43D819C1F498AD751152
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/ip9-LKYd4M3mKaJt5cbeyNFdk-c.roa
Signing time: Mon 02 Jan 2023 08:34:53 +0000
ROA not before: Mon 02 Jan 2023 08:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60375
IP address blocks: 195.209.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:8a:26:8e:dc:43:d8:19:c1:f4:98:ad:75:11:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 2 08:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a9f7e2ca61de0cde629a26de5c6dec8d15d93e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:4b:fc:97:fc:c1:47:f3:af:d3:7e:83:87:
66:d9:2f:9a:96:99:6f:11:23:6a:47:5d:66:e0:5f:
d4:df:4e:8e:1e:e5:73:34:46:ee:45:c9:75:84:a0:
e3:c1:d9:81:6e:fb:a9:bf:a7:7a:b7:f6:e4:ed:34:
87:d6:24:fc:8e:f0:fa:07:12:a4:84:51:c4:23:4b:
1c:5f:0b:70:21:ef:af:a0:6a:fd:5d:3f:2e:81:1b:
be:8f:3a:96:6e:f4:b3:aa:3c:be:02:ad:0b:ab:0f:
95:3b:ab:60:ce:fb:9b:96:89:86:ce:25:00:c8:f2:
14:a9:21:80:71:8a:33:d9:8a:4e:b5:7d:50:78:b5:
bc:ed:89:26:4b:81:cd:d5:c2:ff:36:c1:11:a4:04:
fb:46:60:3c:9d:8e:29:08:22:0a:09:e9:43:5e:98:
81:5d:31:18:44:39:77:a4:3d:cd:fb:1f:99:6a:6d:
e4:fb:fd:07:de:08:46:41:fb:03:d0:03:a0:6b:ff:
16:54:ca:a6:1f:f4:c4:ce:e2:12:c5:94:9f:9c:e5:
85:7b:59:8b:13:f4:43:fc:af:fe:cd:54:67:27:81:
c8:6b:e5:e8:06:8d:21:d6:7e:35:28:b1:21:2a:40:
82:b8:bb:33:85:81:41:e8:9f:42:13:7d:76:00:82:
f3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9F:7E:2C:A6:1D:E0:CD:E6:29:A2:6D:E5:C6:DE:C8:D1:5D:93:E7
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/ip9-LKYd4M3mKaJt5cbeyNFdk-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.209.104.0/24
Signature Algorithm: sha256WithRSAEncryption
61:e6:65:21:8f:f9:5e:ee:ee:39:22:c5:8c:f9:de:49:47:1d:
79:82:9c:a7:24:ea:1a:15:3d:1d:79:d7:66:ca:d3:40:37:9f:
98:e0:47:b4:a9:f0:39:be:64:1c:82:1b:09:0a:18:45:80:9e:
d4:1f:fb:d9:18:a1:98:a1:ab:05:b8:8b:25:e1:71:8c:8d:bc:
ad:83:02:80:4d:e5:38:fc:e1:b9:42:a4:18:5c:72:c7:55:2d:
a7:5a:72:d8:30:48:69:92:60:f2:92:20:e6:0b:67:1c:9b:2e:
7b:49:ae:57:08:77:ab:98:d5:72:6c:73:fb:bb:0f:0f:55:09:
46:6d:1a:95:d3:c4:84:4f:c0:98:0f:87:55:fd:f2:75:e9:df:
e4:20:55:83:64:c4:6d:a5:78:20:7f:3e:86:8e:44:83:a1:77:
36:f8:b0:ad:0e:1a:93:65:ed:ba:14:49:35:36:92:d5:82:53:
49:05:7b:36:e5:b4:b6:bc:96:ed:60:2a:5f:3d:c1:45:55:91:
81:a9:85:8e:67:73:26:5b:f4:71:87:a3:52:b9:71:96:00:5d:
b0:5d:5a:1c:26:2f:77:ea:30:3c:10:e1:d2:4c:32:15:77:16:
3f:12:9c:da:0f:a9:22:35:66:a9:a4:b0:de:fe:5c:fc:df:6c:
f1:f3:22:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:56 2024 by rpki-client on console-fra.rpki-client.org