Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/Snbdlr4lMezQxG8IRHQpb0-gGpo.roa
File: Snbdlr4lMezQxG8IRHQpb0-gGpo.roa (raw, json)
Hash identifier: R2Ob/AZG4j2DR1Z7DxDFjGMX2aTgEwIlYvPmtgnX7X8=
Subject key identifier: 4A:76:DD:96:BE:25:31:EC:D0:C4:6F:08:44:74:29:6F:4F:A0:1A:9A
Certificate issuer: /CN=c0b8b92f9d62b5c3177d52eb36a532567ef4b0f2
Certificate serial: 01899C507B34CDDC3F343561DA3D215BBE20
Authority key identifier: C0:B8:B9:2F:9D:62:B5:C3:17:7D:52:EB:36:A5:32:56:7E:F4:B0:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wLi5L51itcMXfVLrNqUyVn70sPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/Snbdlr4lMezQxG8IRHQpb0-gGpo.roa
Signing time: Fri 28 Jul 2023 11:44:27 +0000
ROA not before: Fri 28 Jul 2023 11:44:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44622
IP address blocks: 195.162.8.0/23 maxlen: 23
91.222.208.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 28 Jul 2023 14:22:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9c:50:7b:34:cd:dc:3f:34:35:61:da:3d:21:5b:be:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0b8b92f9d62b5c3177d52eb36a532567ef4b0f2
Validity
Not Before: Jul 28 11:44:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a76dd96be2531ecd0c46f084474296f4fa01a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:14:d7:dd:30:ed:cd:6b:6c:9b:98:b9:55:e2:
36:c5:4b:b0:59:54:34:11:09:93:08:85:98:61:e0:
73:01:18:89:b6:04:c4:4f:f0:ef:95:5b:29:4f:ed:
21:30:08:27:c9:f1:e0:53:e9:b6:d0:cd:0b:58:1c:
b6:e0:a5:05:6f:5d:7e:eb:ee:4f:f4:e4:36:f2:c6:
05:96:20:16:1e:83:a3:e9:15:ef:5e:33:3d:b0:0b:
b7:2d:78:38:05:d3:fd:31:47:3a:00:15:86:2b:5a:
de:ef:48:79:56:eb:85:b9:30:fe:c4:6e:1f:cd:62:
b1:2f:59:89:13:07:b8:9a:2e:44:90:10:e3:69:9d:
71:26:37:7d:7f:41:33:89:02:b8:33:04:8b:3a:39:
7d:fe:ea:3d:80:12:73:90:84:40:16:82:01:a9:07:
fa:94:fd:6f:0a:67:b7:4f:e6:b2:30:cd:94:bc:26:
b1:76:d9:3e:1d:65:cb:f5:ac:06:7e:d1:4f:30:df:
50:5c:7a:34:38:0e:9a:20:68:ce:1d:cc:42:e0:96:
60:1f:7d:34:a9:45:cf:b4:c0:ec:41:d8:66:90:9b:
4d:04:68:1a:70:b8:41:4b:e9:20:aa:bb:a5:5e:27:
cb:b4:b0:e9:55:37:6f:bd:5e:29:97:c6:42:61:1a:
b3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:76:DD:96:BE:25:31:EC:D0:C4:6F:08:44:74:29:6F:4F:A0:1A:9A
X509v3 Authority Key Identifier:
keyid:C0:B8:B9:2F:9D:62:B5:C3:17:7D:52:EB:36:A5:32:56:7E:F4:B0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLi5L51itcMXfVLrNqUyVn70sPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/Snbdlr4lMezQxG8IRHQpb0-gGpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.208.0/22
195.162.8.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:00:0e:2e:97:44:af:9b:db:f9:f4:cd:b7:83:82:ef:ed:62:
c9:96:76:8a:c6:8d:fe:37:f6:5a:cb:34:b1:f8:55:d6:db:3a:
f5:4d:b9:95:a5:c5:ac:79:12:5b:65:ba:8f:cb:e8:a0:e0:31:
a9:fe:60:bd:df:f7:1b:12:28:c1:3c:f7:e5:a8:bd:27:79:ca:
56:a8:91:9c:04:6a:34:54:05:06:4a:a2:60:0e:e3:b0:39:9f:
de:e6:b8:02:35:1a:bc:d3:72:69:5d:b9:01:3c:22:c8:9f:f1:
56:1b:0b:91:fe:9f:55:38:ab:90:36:9b:d6:75:0f:44:06:eb:
29:85:81:f5:2e:3d:67:49:af:e2:e4:1c:44:da:31:46:bc:ad:
96:50:ac:23:f4:b9:b6:38:20:ec:fc:07:10:e1:da:9e:cb:68:
be:e4:08:7d:eb:65:25:35:fa:33:3f:7c:32:1a:d2:fb:85:b1:
e2:ca:08:2e:94:89:34:ab:a9:c0:36:6c:39:a2:a8:e5:9c:d6:
db:21:84:6b:f5:67:60:be:94:e9:39:23:f6:83:18:35:e0:67:
57:66:96:43:17:5a:4f:be:81:d0:70:91:d7:aa:cf:59:36:b9:
d5:9b:cd:8f:24:83:cc:08:a3:74:04:51:9f:4c:d0:08:87:b7:
1d:71:95:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:21 2024 by rpki-client on console-fra.rpki-client.org