Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/t4ayIiJ1-Bko2tIRKSjSpseVi-c.roa
File: t4ayIiJ1-Bko2tIRKSjSpseVi-c.roa (raw, json)
Hash identifier: Sf/v7UVG5qGrsgVz8XjcrHdvAWrCEOauJ93fNxgABts=
Subject key identifier: B7:86:B2:22:22:75:F8:19:28:DA:D2:11:29:28:D2:A6:C7:95:8B:E7
Certificate issuer: /CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Certificate serial: 01856E78C8C7CFA4F3DA20E3208B7400F81F
Authority key identifier: FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/t4ayIiJ1-Bko2tIRKSjSpseVi-c.roa
Signing time: Sun 01 Jan 2023 17:54:47 +0000
ROA not before: Sun 01 Jan 2023 17:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203167
IP address blocks: 195.88.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:78:c8:c7:cf:a4:f3:da:20:e3:20:8b:74:00:f8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Validity
Not Before: Jan 1 17:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b786b2222275f81928dad2112928d2a6c7958be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6f:3c:a3:4c:44:5c:4b:ee:70:fc:2e:d9:5a:
58:a2:22:ae:08:f9:ff:2f:c6:cc:25:d0:57:c1:8b:
55:8c:f3:47:62:a5:d1:68:a2:ec:37:68:5e:99:c2:
24:df:d5:1f:a4:03:d9:51:85:e2:42:f1:67:f6:99:
e1:89:ae:8c:0d:e6:e8:65:f2:55:ae:50:28:5a:67:
55:05:f4:ed:c6:ab:ec:f3:c3:63:3b:e6:39:88:c2:
5a:12:ec:81:8c:f1:88:d8:81:ee:b3:ca:5b:96:d2:
d3:9a:d6:36:85:c7:6e:61:75:e4:96:82:f2:27:f1:
45:80:32:fd:44:0c:4f:03:e6:3f:a0:af:f3:3c:40:
12:3e:fd:00:53:83:73:6b:e0:33:3c:89:3d:c0:6c:
00:cb:f6:41:61:a7:76:c1:73:ae:ca:57:c1:49:63:
64:1d:87:5f:1f:dc:7f:bd:ee:17:92:03:23:14:3e:
cb:5c:09:0e:17:f5:d4:2a:72:f5:ac:3e:54:ba:8b:
6f:6b:37:fc:8e:43:11:2a:8a:2d:b5:38:62:b7:f7:
93:f5:2d:6c:5c:35:3b:8d:4a:ed:69:96:56:91:b8:
0f:b2:4e:22:46:9a:5c:cb:41:3b:57:c7:6d:6d:c1:
2f:bd:60:b7:ba:cf:3f:f9:d1:a9:05:fa:18:c4:58:
25:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:86:B2:22:22:75:F8:19:28:DA:D2:11:29:28:D2:A6:C7:95:8B:E7
X509v3 Authority Key Identifier:
keyid:FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/t4ayIiJ1-Bko2tIRKSjSpseVi-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.197.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:b1:b7:8e:17:bc:d2:b2:e0:60:9e:db:09:a0:6c:78:da:8a:
db:6e:68:94:d7:ba:22:31:c8:fe:68:32:61:ec:e9:65:4a:39:
96:97:45:09:19:07:d6:dd:5a:90:6a:b6:6c:72:dd:4b:3f:18:
25:ed:f4:a9:6b:b9:a7:78:9c:14:96:c9:37:0c:b3:6d:99:da:
ee:4c:d5:aa:c4:fb:ca:3c:e6:c9:65:f2:62:51:ea:11:e5:e2:
12:ae:36:dc:1f:5d:bb:06:40:4d:23:e5:7c:b9:f1:90:b3:6f:
e5:c8:48:8c:49:79:46:89:a1:a3:d7:4a:0a:26:4d:29:26:cc:
2e:4b:a3:73:60:19:4c:cd:e9:c3:c3:37:a4:e0:16:e1:c9:c9:
12:7c:77:16:9c:93:73:ed:f3:b9:90:10:62:37:36:80:f8:8f:
c6:5e:3a:e8:01:28:20:65:a2:7b:53:61:52:ed:b8:86:87:41:
25:0c:f0:70:b4:83:b0:0c:6f:39:4f:be:f8:26:be:1d:63:79:
61:85:d7:04:51:03:9f:a4:42:0d:d7:cb:4a:c5:2c:be:12:5e:
f1:27:f7:a6:68:1f:22:9f:df:43:3b:82:d7:f8:02:c4:00:4c:
5c:1f:de:97:97:12:2e:32:82:e2:fd:7b:26:a1:52:cb:5f:35:
22:49:1c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:03 2024 by rpki-client on console-ams.rpki-client.org