Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/2kiqj8DAnhGnTmmUermt-TDkLM0.roa
File: 2kiqj8DAnhGnTmmUermt-TDkLM0.roa (raw, json)
Hash identifier: AJ8sS2uehVdC2/7pDKEQJ6mSjkeUUwVVyXRlPVRuM1E=
Subject key identifier: DA:48:AA:8F:C0:C0:9E:11:A7:4E:69:94:7A:B9:AD:F9:30:E4:2C:CD
Certificate issuer: /CN=2109b475d3ab5cd1cc1c49671e77ff9db5ce19f1
Certificate serial: 01856E267FB23B9B23FE4395C6CC45350AA1
Authority key identifier: 21:09:B4:75:D3:AB:5C:D1:CC:1C:49:67:1E:77:FF:9D:B5:CE:19:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQm0ddOrXNHMHElnHnf_nbXOGfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/2kiqj8DAnhGnTmmUermt-TDkLM0.roa
Signing time: Sun 01 Jan 2023 16:24:54 +0000
ROA not before: Sun 01 Jan 2023 16:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48222
IP address blocks: 195.43.133.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:7f:b2:3b:9b:23:fe:43:95:c6:cc:45:35:0a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2109b475d3ab5cd1cc1c49671e77ff9db5ce19f1
Validity
Not Before: Jan 1 16:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da48aa8fc0c09e11a74e69947ab9adf930e42ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5c:3c:ff:2a:4a:6b:de:4e:5f:b0:f1:7b:3c:
20:22:a8:d6:6d:f4:83:7b:80:a4:58:39:a3:93:79:
35:d5:71:6b:0d:1c:d8:52:83:6b:95:78:61:c5:44:
c1:a4:fe:0e:e3:3b:bc:37:e1:9d:7c:13:85:37:da:
db:1b:14:24:14:25:f1:d2:9e:af:71:9e:83:af:c7:
f3:2c:79:fa:12:30:af:12:e0:4c:df:46:c4:ca:75:
6b:65:d3:f8:ac:a0:ce:05:50:7e:1f:30:0e:4d:51:
64:3f:7a:f4:58:97:39:67:d6:ed:f4:85:ad:06:5b:
79:e0:78:4c:43:89:74:d5:2c:99:1b:26:79:f6:60:
6f:de:27:1b:d8:dc:d8:77:38:9c:aa:cf:65:eb:8f:
46:5e:10:fc:0f:39:85:be:97:9d:28:62:f5:59:1f:
47:02:88:a4:d6:9a:3f:cd:1b:e4:68:71:12:ac:e8:
61:3b:e1:67:19:ba:59:86:a2:5e:e1:67:11:1c:75:
4d:4b:eb:22:58:4b:63:8c:11:e1:4e:e8:a2:56:f7:
31:be:62:1f:0d:3a:fc:90:c9:39:9b:4f:de:84:f9:
c6:9a:02:5a:7f:4e:c8:fe:3f:b6:93:9f:a3:d1:7e:
2d:f3:0d:b0:2b:37:3d:40:64:1c:77:ac:97:4c:61:
2e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:48:AA:8F:C0:C0:9E:11:A7:4E:69:94:7A:B9:AD:F9:30:E4:2C:CD
X509v3 Authority Key Identifier:
keyid:21:09:B4:75:D3:AB:5C:D1:CC:1C:49:67:1E:77:FF:9D:B5:CE:19:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQm0ddOrXNHMHElnHnf_nbXOGfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/2kiqj8DAnhGnTmmUermt-TDkLM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.133.0/24
Signature Algorithm: sha256WithRSAEncryption
09:6c:0a:9e:f9:d6:65:c1:3f:10:6b:b8:ef:cd:e6:74:03:16:
79:b4:ba:2a:d0:35:1e:ab:df:36:be:d2:d7:d1:4d:b7:bc:bc:
07:d7:d5:b2:cf:38:23:fe:f3:a5:bb:5b:4f:3c:ac:21:3f:ea:
9c:31:78:d9:33:b1:be:46:10:6f:97:04:b2:42:f6:8e:3a:75:
36:41:9d:f4:2d:11:c5:b1:4f:3f:dd:0e:7b:ee:89:bf:dc:78:
23:5a:d4:85:61:41:4c:c5:72:39:7a:ac:b9:15:d4:61:49:52:
59:9b:f6:b5:54:e0:ac:20:03:10:02:37:88:44:9c:6a:c6:c9:
4a:01:da:32:fd:25:04:d3:4a:92:de:11:bc:f5:43:f0:ab:e8:
a9:b1:36:58:4d:82:60:50:79:27:c0:fa:a3:69:b9:43:56:b3:
e6:75:f4:6a:90:5c:76:44:35:5b:73:04:24:70:85:7c:37:80:
42:79:13:1c:32:86:3a:ff:23:7c:5f:b0:c1:3f:78:12:60:81:
d9:89:5e:8d:07:69:fb:ec:5e:46:7e:70:0e:32:12:64:1c:b0:
d6:2a:80:52:40:39:fb:56:28:2f:7d:90:f0:7f:36:b2:a6:e2:
ce:8a:85:92:e2:4d:60:61:84:a0:26:99:0a:57:ed:67:e1:b5:
38:d0:1f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:08 2024 by rpki-client on console-ams.rpki-client.org