Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/7pxdWSHstAZ2PJ-I31CoPVsUBBU.roa
File: 7pxdWSHstAZ2PJ-I31CoPVsUBBU.roa (raw, json)
Hash identifier: v67mwfU5MasyPjhrvM1bPvLSRVOvwG7J4UxQ+q3P1No=
Subject key identifier: EE:9C:5D:59:21:EC:B4:06:76:3C:9F:88:DF:50:A8:3D:5B:14:04:15
Certificate issuer: /CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256
Certificate serial: 01856BC10C482C403A4471D632D1CCDD084D
Authority key identifier: 13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/7pxdWSHstAZ2PJ-I31CoPVsUBBU.roa
Signing time: Sun 01 Jan 2023 05:14:51 +0000
ROA not before: Sun 01 Jan 2023 05:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33925
IP address blocks: 195.177.224.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:0c:48:2c:40:3a:44:71:d6:32:d1:cc:dd:08:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256
Validity
Not Before: Jan 1 05:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee9c5d5921ecb406763c9f88df50a83d5b140415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:05:5c:68:6e:b3:20:83:9d:62:b2:b3:7b:37:
62:66:20:d6:2d:db:a1:9c:a2:29:98:3c:4f:ad:67:
3f:42:7d:57:28:49:8d:a6:1e:20:58:e7:36:16:21:
b0:0e:f4:dc:94:f4:37:77:42:81:8c:c1:c8:a9:68:
c9:09:6a:c4:ee:3b:5b:54:4e:1d:81:59:60:e2:70:
ab:d9:c1:4e:4f:31:dc:b5:46:ce:eb:06:92:7e:ba:
45:95:8a:3a:f0:e5:bb:6d:f9:3a:b6:30:61:bf:b1:
bc:ad:d1:8f:63:14:1b:74:c7:57:d9:fe:d1:22:57:
99:3c:ca:51:f5:7d:99:d8:3e:91:dc:7e:f2:7b:4f:
1f:69:a0:81:31:b1:86:90:ca:a6:65:04:c1:ce:b9:
a8:f8:dc:7c:2c:1e:a4:f3:fb:69:e9:d0:34:04:79:
d1:a6:26:e7:60:a4:50:32:9c:e6:c2:cc:ed:39:49:
d0:a3:4c:ba:83:45:31:a7:91:f2:8e:d5:f7:f9:01:
c6:c6:13:73:73:4c:68:a6:8e:ea:35:40:5c:94:f8:
4c:8a:91:95:21:6b:d4:36:77:3a:a8:56:22:03:59:
cf:47:a5:53:34:34:94:d9:df:25:e5:37:a1:a2:ec:
8d:4f:06:ee:29:69:fe:6f:81:96:19:9d:f6:ca:17:
21:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9C:5D:59:21:EC:B4:06:76:3C:9F:88:DF:50:A8:3D:5B:14:04:15
X509v3 Authority Key Identifier:
keyid:13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/7pxdWSHstAZ2PJ-I31CoPVsUBBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.224.0/23
Signature Algorithm: sha256WithRSAEncryption
28:b3:fb:6d:1e:d7:e8:48:6c:21:d6:c6:80:10:ff:fd:4a:9e:
81:12:72:c5:73:b6:2b:56:08:f5:83:a9:e6:4b:ad:0a:4c:91:
32:9c:91:77:b6:19:0b:38:07:2e:57:fc:b8:6c:ef:f1:b5:f6:
e9:3a:03:fe:9d:9b:d1:4a:e0:bf:c6:5e:53:0e:91:67:53:9b:
8a:8a:c3:76:50:e9:89:47:ac:91:cf:41:1f:f6:38:2a:c3:64:
cf:03:89:ba:96:f2:77:5e:5f:72:7f:17:9e:d7:e7:b7:fb:b3:
ea:34:d0:d4:c8:c8:eb:49:98:0a:ea:5b:bd:1e:47:1c:92:d8:
96:9e:45:55:6f:be:59:e0:81:d5:b1:e0:f7:d4:95:3f:58:15:
70:cd:bd:76:6d:ca:b6:32:32:84:01:1c:f5:71:e3:f5:21:34:
90:b5:64:2e:a0:1a:82:8f:a7:25:4f:df:c3:e2:88:e3:40:60:
0b:ac:aa:66:6b:0e:82:07:e4:4e:9b:a4:f4:21:64:70:93:bc:
00:b3:e3:e9:9b:ff:fd:f5:32:6c:31:9b:6d:b0:ec:f1:7a:79:
18:2d:a6:9d:7c:ad:f8:7e:ab:6a:59:02:8e:af:1b:43:a7:5c:
bb:f9:ce:d4:6b:d7:ef:29:fc:bd:e8:60:c7:5d:3e:e2:3c:bf:
3a:96:9d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:44 2024 by rpki-client on console-fra.rpki-client.org