Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/3ky9lcgXKX-jUSjbaO6y5wMH2uc.roa
File: 3ky9lcgXKX-jUSjbaO6y5wMH2uc.roa (raw, json)
Hash identifier: kPmnw7aEns/tjlwe4ux6Njvqx1b36bwZhHvF8QM6F/M=
Subject key identifier: DE:4C:BD:95:C8:17:29:7F:A3:51:28:DB:68:EE:B2:E7:03:07:DA:E7
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 0185720C54B931F7F9F3A85415E3B976ABB0
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/3ky9lcgXKX-jUSjbaO6y5wMH2uc.roa
Signing time: Mon 02 Jan 2023 10:34:48 +0000
ROA not before: Mon 02 Jan 2023 10:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211030
IP address blocks: 195.5.115.0/24 maxlen: 24
2a0d:f407:1030::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:54:b9:31:f7:f9:f3:a8:54:15:e3:b9:76:ab:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 2 10:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de4cbd95c817297fa35128db68eeb2e70307dae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:e1:de:cc:76:9f:8c:1d:e0:9a:41:b6:84:
37:a6:4a:f8:27:78:e3:9f:a3:64:11:48:a8:16:ae:
c1:77:2a:a7:f8:eb:10:02:3e:24:c6:7b:11:e6:60:
08:03:b0:84:86:2b:1d:66:49:09:a5:b0:53:8c:57:
a2:88:42:23:04:3b:e7:f9:3e:5f:ad:f6:91:15:c1:
5a:b5:13:f3:e6:17:b2:f2:c0:0e:00:3c:c2:a5:24:
f6:e6:a4:7d:8b:9d:12:d7:7f:a8:fa:07:05:2d:ef:
6f:62:cd:ee:01:3b:31:1f:02:22:a8:21:48:17:98:
bc:cf:64:ee:4f:b7:1f:d7:37:ad:d1:b1:0c:1b:80:
56:48:19:2b:cc:11:d2:9c:b2:d5:d7:97:6a:71:98:
2f:e0:c2:24:6a:50:db:1d:d5:7e:2a:a8:3f:a3:e5:
e9:f1:34:8b:b8:80:55:02:fa:a8:3e:04:ac:d5:ad:
23:6a:26:3b:e6:de:69:00:23:c9:52:c4:73:d9:e2:
69:53:f8:69:4e:72:15:8c:18:3a:29:12:a2:9b:b9:
b8:90:39:fb:bc:ef:00:3b:2a:84:9f:e7:8e:77:d7:
ea:9c:9b:5d:3c:7f:7b:61:32:99:96:6b:78:7b:71:
d5:50:73:55:c9:f8:65:9d:d4:53:53:64:37:18:c0:
da:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4C:BD:95:C8:17:29:7F:A3:51:28:DB:68:EE:B2:E7:03:07:DA:E7
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/3ky9lcgXKX-jUSjbaO6y5wMH2uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.115.0/24
IPv6:
2a0d:f407:1030::/48
Signature Algorithm: sha256WithRSAEncryption
42:c1:79:88:f7:3a:a1:34:a3:f7:a4:84:fc:dc:80:e2:3d:7d:
ee:e7:8f:d9:94:cb:7d:c6:3a:b2:1a:c9:f4:f8:75:a0:89:07:
a2:29:a9:c3:19:3d:81:fc:c5:6f:e6:ea:dd:32:56:22:e0:aa:
8f:f1:7e:db:af:e2:4f:eb:2f:97:ed:32:6a:43:df:81:2c:80:
d3:c7:ce:d5:1e:6e:d2:c2:2c:7d:8b:e5:5d:12:37:f3:86:62:
15:71:82:ed:28:fd:18:c0:3c:0a:5e:e2:c5:50:a2:9d:86:0b:
ab:f0:10:ce:0d:cc:c5:6a:6c:55:85:4b:63:b6:da:5c:85:fa:
4a:e5:35:04:61:1f:64:4f:c2:0d:de:68:ce:34:7f:fe:c6:8a:
1a:83:89:7e:30:aa:61:9d:73:4d:d5:98:14:3a:0f:4a:6c:59:
85:fe:d6:fa:83:7f:9a:9e:4d:cd:00:87:43:7d:3f:b0:02:81:
1e:90:2f:cb:66:66:44:74:77:b4:66:8d:e9:6e:80:a9:18:fb:
8c:cb:48:45:7a:51:7f:69:29:5a:02:27:c6:ec:3e:fa:8a:ec:
ba:55:da:6c:ac:94:d4:26:a2:75:01:74:3d:60:a4:f8:29:15:
74:13:b8:e0:4e:20:1e:9d:d0:aa:fa:3b:4d:2c:27:2f:a8:e8:
ff:0b:73:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:36 2024 by rpki-client on console-ams.rpki-client.org