Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/m_m0eZytQU0TYAgk1cUf5K-r8Sg.roa
File: m_m0eZytQU0TYAgk1cUf5K-r8Sg.roa (raw, json)
Hash identifier: 4G+B5buk2ayL4gLVH+j6kU85x3WlYglRci6eq8O6DMY=
Subject key identifier: 9B:F9:B4:79:9C:AD:41:4D:13:60:08:24:D5:C5:1F:E4:AF:AB:F1:28
Certificate issuer: /CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Certificate serial: 0189B631D963A8E0621FD683CD3D8213D3AF
Authority key identifier: BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/m_m0eZytQU0TYAgk1cUf5K-r8Sg.roa
Signing time: Wed 02 Aug 2023 12:21:07 +0000
ROA not before: Wed 02 Aug 2023 12:21:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12670
IP address blocks: 195.234.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Nov 2023 11:42:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b6:31:d9:63:a8:e0:62:1f:d6:83:cd:3d:82:13:d3:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Validity
Not Before: Aug 2 12:21:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9bf9b4799cad414d13600824d5c51fe4afabf128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e8:1c:1c:9d:04:77:45:eb:69:18:b5:f4:0e:
d5:b0:ab:bf:e9:a5:7a:bb:ca:79:08:a5:c1:0e:bf:
e0:b0:b2:eb:7e:e5:1e:21:1a:05:63:17:7e:48:30:
b9:67:a2:4d:6a:ee:89:93:91:bc:5c:58:89:8b:56:
37:04:bc:4a:40:be:77:da:9f:ce:f1:a3:65:25:78:
5f:01:25:2a:f0:14:23:9f:4f:92:78:9c:03:8e:dd:
41:0d:06:8d:14:bc:f1:b2:80:2c:9b:12:c7:c1:a3:
fb:75:29:54:07:d1:c7:ec:7d:91:2a:ed:99:44:f7:
7a:a9:40:c4:af:9e:ac:4d:82:3e:df:e6:e4:78:c0:
cd:ef:4d:8d:e8:54:83:9b:cd:8d:33:61:bb:2f:e2:
d7:2b:19:17:94:0d:7d:b5:8b:f4:8b:1d:62:19:d2:
e6:64:0e:ed:c9:83:d4:a6:52:f2:f9:e1:c8:06:d1:
95:b6:b5:0b:ec:54:30:57:3c:05:61:45:d5:1a:86:
c8:52:cd:26:f3:c2:f5:1d:8c:94:d5:3f:58:03:29:
b0:08:d3:13:89:36:47:1f:d5:83:48:14:0c:90:77:
78:9f:bd:9a:79:11:51:30:af:32:27:7b:8f:7a:76:
e7:06:56:6c:16:52:e7:51:2a:97:6b:d1:51:66:24:
29:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F9:B4:79:9C:AD:41:4D:13:60:08:24:D5:C5:1F:E4:AF:AB:F1:28
X509v3 Authority Key Identifier:
keyid:BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/m_m0eZytQU0TYAgk1cUf5K-r8Sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.41.0/24
Signature Algorithm: sha256WithRSAEncryption
97:c6:f5:aa:f7:df:42:64:8c:04:6a:4c:35:87:e3:1b:3a:2e:
e1:ed:86:d4:17:96:3f:d2:ad:d7:79:7b:33:b3:dc:6d:21:f7:
77:eb:8b:2f:6a:0b:8e:92:e0:06:49:30:ff:a2:57:27:5a:3d:
6d:61:e6:60:a4:15:58:3a:15:2e:ae:52:b2:fe:a2:72:57:fd:
36:db:79:dc:52:a6:f5:8f:07:d4:67:28:ab:44:f8:f5:67:8e:
25:4e:22:a4:a8:93:2f:04:a3:bb:c4:cd:24:c6:1d:ba:24:54:
78:9a:df:e2:a7:66:3a:b1:6d:23:e5:c0:83:a3:f4:5d:8f:57:
97:ef:dc:ea:c8:a6:57:54:42:f9:5b:2b:14:fd:7d:45:4e:07:
da:93:92:9b:51:7a:0c:4c:05:ee:48:9a:7d:de:aa:07:e2:07:
29:92:fd:e6:a0:5e:52:f5:3e:76:b8:55:5a:0c:f2:d3:41:18:
8e:76:d0:0d:84:76:b2:ec:a9:bc:63:5f:05:e0:ed:1e:1b:c7:
2e:a1:ea:dc:2e:fe:6e:81:ca:a9:83:14:41:fa:0f:72:e5:f0:
79:7e:61:4d:c9:39:78:65:4b:56:b1:1f:e4:e5:8d:38:ff:7f:
84:2e:eb:15:a6:f6:47:2b:f3:e1:d5:fb:11:22:70:43:2b:50:
06:a3:b8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:17 2024 by rpki-client on console-ams.rpki-client.org