Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/JhVJEoQU4X2aUOIzsmjDETBYs0E.roa
File: JhVJEoQU4X2aUOIzsmjDETBYs0E.roa (raw, json)
Hash identifier: JYBy8iB0tWa/bIV697bnUbZGObVI2PfzCz1WNVwl13o=
Subject key identifier: 26:15:49:12:84:14:E1:7D:9A:50:E2:33:B2:68:C3:11:30:58:B3:41
Certificate issuer: /CN=6cc57691c15c9eb3a379917806d294fd39175e07
Certificate serial: 01856EC237AD9532DF8D7C90DDBEC4B69D88
Authority key identifier: 6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/JhVJEoQU4X2aUOIzsmjDETBYs0E.roa
Signing time: Sun 01 Jan 2023 19:14:59 +0000
ROA not before: Sun 01 Jan 2023 19:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47698
IP address blocks: 195.47.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:37:ad:95:32:df:8d:7c:90:dd:be:c4:b6:9d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc57691c15c9eb3a379917806d294fd39175e07
Validity
Not Before: Jan 1 19:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=261549128414e17d9a50e233b268c3113058b341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ff:e6:79:92:08:21:80:c6:e6:5e:2b:41:81:
e9:46:86:3a:b0:30:d0:0c:ce:a5:41:b8:9b:c9:56:
b7:88:6d:32:04:f9:be:18:1b:4d:a1:24:ae:70:e1:
f0:52:2c:2b:fd:ca:a7:fc:b5:4c:c5:f1:76:02:4f:
f4:95:c2:24:b4:fa:a6:b8:cf:2a:56:95:57:8a:38:
58:43:6d:e9:61:05:5e:40:b6:0c:37:9a:01:57:9a:
d1:b1:9a:04:58:20:ac:80:64:d0:aa:77:85:33:7c:
2b:f0:21:5b:9d:d2:f0:7b:af:6f:8c:a4:60:a0:e3:
3f:e4:d2:3d:93:a9:0e:a7:b9:fa:09:52:21:f8:be:
4a:d7:11:02:68:04:d0:fa:24:d3:1c:36:9f:ea:ef:
99:90:2b:ca:02:95:73:3a:5d:de:2d:e1:0c:4c:cb:
b3:c8:8f:ae:a0:20:c0:78:49:b8:ad:23:ae:26:5c:
32:e4:b5:5b:c5:f9:1c:bf:44:60:ba:85:9f:a0:93:
a1:83:52:0f:0a:14:f9:e4:af:a1:15:d8:3f:e9:17:
bc:fa:74:2d:4a:29:d1:6d:24:ce:bb:34:9b:22:f8:
66:81:b2:5d:1a:ef:e7:d6:7b:2a:d5:34:6e:9c:47:
7c:ae:7b:2d:45:b5:78:27:c4:3e:51:b4:bc:de:58:
e7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:15:49:12:84:14:E1:7D:9A:50:E2:33:B2:68:C3:11:30:58:B3:41
X509v3 Authority Key Identifier:
keyid:6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/JhVJEoQU4X2aUOIzsmjDETBYs0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.254.0/24
Signature Algorithm: sha256WithRSAEncryption
37:5e:f0:1b:37:4b:02:66:3f:ed:78:d8:c6:04:ac:f1:b5:31:
16:be:5d:4a:3a:7d:b4:d9:4b:db:8f:a5:da:84:ed:60:df:07:
2b:be:21:2c:d1:4a:e5:45:a4:59:57:b1:43:e6:03:20:7b:62:
ec:c2:63:a6:a9:6a:2d:a4:b3:03:5c:6d:33:b5:c5:17:1a:cd:
53:4a:18:4d:7a:4f:15:3d:e8:70:34:2b:cb:95:e0:a7:a7:cd:
9c:1c:02:d9:18:a1:04:0a:a1:f3:64:58:05:87:a4:2b:9c:a0:
70:94:21:ed:03:e0:5b:ee:55:fb:2f:f9:07:b3:91:52:e8:fc:
77:af:40:1c:75:14:94:0c:35:4e:1f:0a:e8:fd:af:74:65:44:
9c:45:2f:0d:07:c8:a8:63:d5:fa:ae:54:d6:fe:2f:cf:b6:02:
18:d3:2d:c7:fb:a0:6d:9e:42:11:00:61:9c:2f:aa:7d:d1:1d:
d3:1b:fc:ec:b8:4f:02:f8:23:bc:6b:87:21:2b:29:fd:a6:32:
c7:a2:d1:06:ec:38:b2:84:a5:a1:3e:8e:9d:4c:ab:0a:87:36:
a6:b6:fd:1b:74:69:8c:b9:60:8f:94:05:ff:0a:bf:f3:fe:42:
42:30:75:13:15:e7:92:a6:2b:ef:7d:f3:ca:23:35:d6:ac:38:
d0:c1:5d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:58 2024 by rpki-client on console-ams.rpki-client.org