Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/Ngq2Ye6Qm4zgw_teKCJQhYAOkhE.roa
File: Ngq2Ye6Qm4zgw_teKCJQhYAOkhE.roa (raw, json)
Hash identifier: Gsk38er48SIjmIuY4WurXOzYp1bE6iOhEJ7l0BCBhfA=
Subject key identifier: 36:0A:B6:61:EE:90:9B:8C:E0:C3:FB:5E:28:22:50:85:80:0E:92:11
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 018C8C57E074287E65C48C0934A05C343D9B
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/Ngq2Ye6Qm4zgw_teKCJQhYAOkhE.roa
Signing time: Thu 21 Dec 2023 12:26:58 +0000
ROA not before: Thu 21 Dec 2023 12:26:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 195.14.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8c:57:e0:74:28:7e:65:c4:8c:09:34:a0:5c:34:3d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Dec 21 12:26:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=360ab661ee909b8ce0c3fb5e28225085800e9211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f1:db:73:bc:51:6e:7a:3f:89:37:00:a9:59:
a0:23:35:c8:01:e3:e1:09:45:b4:20:8f:13:33:37:
fb:ea:b5:6e:49:30:be:34:ba:d9:00:bb:99:a2:f6:
e0:a2:67:09:30:3b:3f:55:1a:c4:04:65:63:03:6f:
3b:23:39:1e:22:57:ad:54:a5:00:13:d2:e1:4c:cb:
44:21:92:17:db:d9:e8:a2:60:c1:18:1c:d5:37:75:
a6:19:b2:c7:3a:79:e2:77:cb:c1:e8:86:f8:4a:6b:
25:09:f7:22:af:e2:68:22:81:4c:b6:c4:8d:a5:5f:
50:52:4a:ae:99:6b:96:d0:71:e9:32:d8:24:d0:1e:
fc:66:b5:bb:60:f7:8a:68:61:fb:96:a0:03:e1:3b:
33:37:47:98:b7:49:71:fc:66:39:24:dc:cb:e9:1b:
0f:91:72:97:d1:9f:57:d6:ad:93:d6:eb:c6:45:ac:
0a:5b:e8:f7:89:c1:a5:ca:45:7a:3b:0b:51:03:b5:
ea:9c:ff:4e:f8:75:7f:d9:b1:3d:20:c9:20:bc:5e:
5b:a6:9e:ac:62:ba:02:ad:20:db:a3:eb:a0:82:c3:
8f:0d:74:f5:df:a8:d4:b5:b1:f7:dc:bf:06:78:42:
fe:1b:8d:2c:9e:35:a4:1f:ef:4f:a6:ff:d6:2c:e9:
85:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0A:B6:61:EE:90:9B:8C:E0:C3:FB:5E:28:22:50:85:80:0E:92:11
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/Ngq2Ye6Qm4zgw_teKCJQhYAOkhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.14.105.0/24
Signature Algorithm: sha256WithRSAEncryption
29:ff:a2:51:9e:06:1a:a0:ad:5b:13:1f:99:6e:66:7e:59:61:
c4:c6:87:cd:47:61:47:85:40:09:fc:4b:30:25:08:85:33:47:
f8:7d:23:66:aa:40:04:fe:87:01:78:f7:b4:cc:13:71:aa:29:
25:65:66:ae:c9:4e:2a:e7:d2:fc:ce:dd:72:4a:53:c8:b7:5d:
a3:b1:5e:2b:52:e0:94:ca:d6:a5:f5:94:cd:41:d1:cf:a1:85:
b0:06:97:f1:24:54:7a:b7:f7:7d:d3:44:b5:82:91:1d:6d:c4:
34:7c:2a:8d:bb:a1:5b:df:0c:4a:d0:90:a9:26:a4:c3:0d:91:
c9:51:2c:a3:e8:e5:fd:87:53:af:fb:ff:1b:84:2c:9a:6a:37:
ee:5f:fd:39:ba:58:e8:10:36:49:73:da:8f:dc:0c:35:be:0d:
f0:ab:8a:a0:45:71:16:5f:8f:34:c4:dd:02:67:7b:d8:8a:62:
cf:aa:78:5b:2f:1e:e3:1c:4e:a7:38:cc:13:7c:8f:74:ba:73:
f8:0c:36:c2:fe:d9:e7:f3:09:d1:3f:d2:ff:3f:03:7c:9e:c1:
2f:01:6a:4b:ec:36:0f:3e:1a:db:ab:f2:fd:29:b1:b4:7b:39:
73:9d:f8:7d:16:95:74:d1:02:fd:02:88:f9:8f:ab:d7:26:b7:
50:3f:6e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:48 2024 by rpki-client on console-ams.rpki-client.org