Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/SXHEg5YfYFHaQwa__HeUB9bN4N0.roa
File: SXHEg5YfYFHaQwa__HeUB9bN4N0.roa (raw, json)
Hash identifier: c/WGeUd5wRGQgO3deigrCnro/11P5IEPjcT2ez/VoNM=
Subject key identifier: 49:71:C4:83:96:1F:60:51:DA:43:06:BF:FC:77:94:07:D6:CD:E0:DD
Certificate issuer: /CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Certificate serial: 01856D78741CD20992EBB41A81DA1374F8D0
Authority key identifier: A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/SXHEg5YfYFHaQwa__HeUB9bN4N0.roa
Signing time: Sun 01 Jan 2023 13:14:48 +0000
ROA not before: Sun 01 Jan 2023 13:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50858
IP address blocks: 195.5.234.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:74:1c:d2:09:92:eb:b4:1a:81:da:13:74:f8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Validity
Not Before: Jan 1 13:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4971c483961f6051da4306bffc779407d6cde0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ae:77:01:63:63:ad:65:f9:81:6b:69:94:26:
e6:47:a4:70:20:ae:9b:81:9f:67:f0:a3:e1:ad:dc:
f6:34:7f:1d:ba:e8:bf:e1:e1:2f:27:f7:02:a9:e8:
a0:72:cd:93:92:df:c9:8d:78:49:68:79:1d:01:fc:
a9:2a:5d:72:0e:86:88:ea:ad:49:7a:93:46:77:41:
4c:58:8e:dd:6a:ae:c9:d0:2f:49:77:b9:43:3b:ff:
ef:a6:1d:12:9a:2e:5a:c2:9f:9c:bc:ad:e2:56:c9:
de:32:7f:48:04:fc:06:10:76:9e:c7:dc:1f:ab:52:
8a:fc:8c:ce:21:9f:18:f0:bb:ff:a9:c7:93:d6:3a:
c1:cf:c4:52:22:5d:c4:64:7a:4a:37:28:f0:b6:d4:
ac:5d:1b:86:45:66:5d:90:48:c9:4c:ed:7f:42:72:
1c:65:43:1a:e1:ff:cf:cd:9c:6c:24:5d:51:38:ca:
7d:67:af:bc:4a:e2:5f:3d:08:35:19:26:ff:6b:60:
2a:c7:ef:36:1b:5c:4e:e2:c1:66:94:c3:5c:c6:7d:
1c:af:93:75:2b:7d:e8:1e:3e:43:38:78:34:8f:10:
aa:12:59:fb:47:1a:be:91:5a:28:e6:9b:b4:1e:6e:
42:4d:4f:ab:22:4d:ee:74:e2:d9:53:83:2e:f4:0a:
63:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:71:C4:83:96:1F:60:51:DA:43:06:BF:FC:77:94:07:D6:CD:E0:DD
X509v3 Authority Key Identifier:
keyid:A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/SXHEg5YfYFHaQwa__HeUB9bN4N0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.234.0/23
Signature Algorithm: sha256WithRSAEncryption
17:56:01:9c:7e:53:15:8c:15:3f:6f:66:04:32:e0:b2:c4:7c:
72:34:cf:7d:99:aa:50:15:39:64:07:ab:d4:9a:77:8f:6a:96:
e0:b0:ac:f1:fd:80:98:7f:d4:42:23:cc:fb:72:d2:41:36:b5:
06:2a:85:ff:e2:22:9b:f0:f2:ce:69:b4:38:87:84:d8:99:94:
dc:6e:6e:e6:0f:4f:71:8a:1c:17:c8:4c:54:af:0e:d1:67:72:
42:ca:fe:fa:a6:3c:ab:3d:90:e4:c5:6a:69:4b:f4:df:95:c2:
65:27:b8:d8:0d:76:2a:82:5e:94:07:24:54:ba:c0:af:d4:e1:
e5:1c:cd:d2:87:c4:2c:16:e3:01:2c:76:b4:ae:3e:52:43:21:
dd:50:0f:6d:91:e4:ef:ea:8a:e5:c1:59:be:cc:ed:2b:91:03:
05:22:ba:7f:f5:e9:7b:0f:24:6e:5a:1b:b2:d6:72:b8:5c:2a:
0f:c7:07:9e:d8:8a:1c:3c:55:29:69:c3:e4:58:66:98:70:a0:
00:fc:56:d2:96:d8:e4:67:a4:eb:26:68:5a:f4:0c:17:09:23:
f2:79:ee:34:35:eb:45:b0:f3:89:13:b1:e7:24:86:12:30:09:
14:c2:a9:81:ea:0a:f9:44:25:e2:02:87:81:cd:5b:73:87:64:
1d:9f:2b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:23 2024 by rpki-client on console-ams.rpki-client.org