Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/fYISlUiZXfwi2-mxwxq7m-TlGF0.roa
File: fYISlUiZXfwi2-mxwxq7m-TlGF0.roa (raw, json)
Hash identifier: x7kuvWnEtodK73RJddchFOA0OvskhiBha0rfP6pXbNg=
Subject key identifier: 7D:82:12:95:48:99:5D:FC:22:DB:E9:B1:C3:1A:BB:9B:E4:E5:18:5D
Certificate issuer: /CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
Certificate serial: 0188A4BFC82F62CF10CBC04CBFBC8579A169
Authority key identifier: 03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/fYISlUiZXfwi2-mxwxq7m-TlGF0.roa
Signing time: Sat 10 Jun 2023 10:00:12 +0000
ROA not before: Sat 10 Jun 2023 10:00:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209823
IP address blocks: 195.24.245.0/24 maxlen: 24
2a12:5542::/32 maxlen: 32
2a12:5541:1::/48 maxlen: 48
2a12:5541:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a4:bf:c8:2f:62:cf:10:cb:c0:4c:bf:bc:85:79:a1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
Validity
Not Before: Jun 10 10:00:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d82129548995dfc22dbe9b1c31abb9be4e5185d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c6:f3:42:af:0d:19:b5:d6:c3:d4:f7:91:fc:
64:71:7b:f2:7a:cf:f1:c8:ca:14:b9:37:7e:e9:ee:
ce:2e:8b:e3:55:82:33:4f:42:4c:db:b0:a8:5b:40:
da:81:6b:61:87:28:6f:86:19:71:21:9e:1e:7b:4c:
75:3c:0f:31:53:ad:31:b5:23:9a:6e:53:95:20:ae:
f9:c3:aa:3c:f9:26:1b:57:87:c6:99:7c:0f:6e:a6:
8f:da:de:a7:eb:c5:09:15:99:ae:76:f2:1c:88:01:
15:d7:cd:18:f4:9c:ed:a6:af:ce:b7:c6:eb:8b:ac:
0c:19:91:da:09:ee:7e:e3:32:81:f5:55:ba:15:ee:
1a:65:4b:86:16:65:a2:aa:9d:51:d6:dd:c5:fe:80:
5a:15:f9:b3:be:45:6b:1f:8b:18:d3:c0:72:2d:22:
45:59:ee:0d:7b:d1:ee:72:10:fa:a0:bb:f8:95:d3:
55:77:e9:97:b8:38:b3:ec:d3:2b:3c:73:ac:02:20:
4e:16:2e:66:61:eb:ea:21:52:de:a4:f2:22:a6:e5:
37:4d:94:0f:f8:79:8f:ac:25:2b:8c:ce:e3:f2:e5:
21:02:0e:73:2a:f8:07:20:52:2e:53:61:f0:b0:f2:
a5:b3:d1:93:5e:fe:4a:ad:ff:56:f7:09:e2:29:30:
f9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:82:12:95:48:99:5D:FC:22:DB:E9:B1:C3:1A:BB:9B:E4:E5:18:5D
X509v3 Authority Key Identifier:
keyid:03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/fYISlUiZXfwi2-mxwxq7m-TlGF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.24.245.0/24
IPv6:
2a12:5541:1::-2a12:5541:2:ffff:ffff:ffff:ffff:ffff
2a12:5542::/32
Signature Algorithm: sha256WithRSAEncryption
07:c4:07:26:91:d9:0b:01:03:bf:60:9a:1e:d2:d1:59:d0:9c:
51:d6:2b:1a:5f:3b:80:6f:cb:18:e3:7f:5f:98:88:a8:7a:10:
66:6a:ec:55:c8:ed:b2:86:a0:2d:49:09:ae:bf:fd:b2:89:d1:
5c:72:8f:4d:89:07:60:e5:39:30:ae:cf:f3:6c:46:97:74:a6:
25:0a:66:a1:88:c3:a4:f4:ac:f7:1b:f2:14:98:50:0b:1b:04:
73:7d:02:e3:93:e7:4b:aa:32:4c:25:95:c8:1a:b1:34:9a:1a:
d3:f3:e9:32:dd:16:2c:1f:a7:51:4b:cc:c7:fb:64:5a:8c:7b:
7b:45:45:f4:ab:b1:4a:be:44:71:b8:9e:ce:4a:6a:a7:1e:7d:
2a:41:d3:4f:5e:a3:7f:71:2c:7f:07:b1:ad:c2:cc:20:74:6d:
19:55:54:f5:a9:d6:88:fa:6d:4f:54:35:d4:c8:2f:e5:b6:fb:
66:72:45:25:31:57:86:b2:dd:0f:d5:fd:88:8a:35:40:b1:42:
69:0b:a0:3e:59:3f:33:cc:cb:e7:e2:e6:8c:f4:19:97:ce:42:
ab:c2:1e:dc:d0:5c:54:05:9f:30:4c:e8:92:41:48:6d:87:02:
5c:6e:c9:d3:98:17:41:72:db:36:48:29:14:ef:b4:4a:b4:33:
8b:ef:70:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:31 2024 by rpki-client on console-ams.rpki-client.org