Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/_Jk0itCkfd0wb4zGh7wh4wQLSk4.roa
File: _Jk0itCkfd0wb4zGh7wh4wQLSk4.roa (raw, json)
Hash identifier: hiGeHrlaBEhzA497MBgQCSW2p6CASc7lxM4tw6aZTPQ=
Subject key identifier: FC:99:34:8A:D0:A4:7D:DD:30:6F:8C:C6:87:BC:21:E3:04:0B:4A:4E
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 018571BA2E118A70447645C8ED1E8F0B5B2C
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/_Jk0itCkfd0wb4zGh7wh4wQLSk4.roa
Signing time: Mon 02 Jan 2023 09:05:05 +0000
ROA not before: Mon 02 Jan 2023 09:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 195.14.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Jun 2023 08:05:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:ba:2e:11:8a:70:44:76:45:c8:ed:1e:8f:0b:5b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Jan 2 09:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc99348ad0a47ddd306f8cc687bc21e3040b4a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a1:38:e3:b2:b7:a4:1f:e1:00:84:ff:28:36:
a7:65:b3:d4:a2:c3:65:cf:a2:da:d2:11:19:4d:82:
74:39:33:e3:a2:31:26:91:0b:9b:4d:67:f1:d3:24:
cf:09:1f:33:e0:10:b3:a7:64:ba:bb:15:9f:a1:65:
6a:1c:35:ad:b5:2e:33:ba:44:ee:5d:bf:99:d4:36:
8e:d4:b2:13:7e:91:e4:ff:b8:f3:44:f5:01:8a:6c:
fa:54:cc:2b:17:ef:e1:bc:f1:92:e2:71:6c:4d:a8:
e8:91:a2:0c:24:60:b5:84:96:c6:96:7c:f6:de:0d:
04:ad:a8:52:99:81:3f:7b:1d:87:2c:d4:e0:44:5d:
c3:47:ea:18:3b:b8:c9:fe:59:95:00:a8:2b:54:a8:
c2:f6:9c:a4:59:ec:cf:ff:fb:14:d6:d9:c9:de:81:
d5:f7:9a:1e:81:cf:b8:c7:fd:35:de:80:12:00:ea:
67:7f:b9:a6:10:8c:43:4d:27:71:cc:a0:18:27:01:
bc:b0:47:7a:cf:d9:b6:b2:62:19:fc:14:ff:5e:64:
a5:43:72:c0:28:53:f2:27:68:c9:6d:fb:50:58:33:
3c:e1:67:e9:10:84:f6:3f:88:be:b8:4f:39:a4:36:
40:5c:58:d2:17:bb:a0:3c:4c:5a:4b:bb:d5:ec:84:
18:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:99:34:8A:D0:A4:7D:DD:30:6F:8C:C6:87:BC:21:E3:04:0B:4A:4E
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/_Jk0itCkfd0wb4zGh7wh4wQLSk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.14.105.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:ab:59:14:c6:b9:0c:0f:f7:86:6a:3e:e4:6b:35:e6:63:b7:
68:67:5a:6c:3c:4c:e7:56:e2:1e:14:56:74:e2:3e:57:07:38:
14:08:8d:f0:65:52:9a:19:d9:d5:f8:f4:54:74:b6:46:1b:4c:
91:32:8e:57:13:da:ac:0b:f2:5e:21:51:ee:fd:41:26:28:f4:
37:5f:17:95:82:5c:31:6b:42:cf:02:56:5a:1a:5d:5c:ac:65:
8e:96:8c:3a:8b:7f:20:4c:1c:fd:49:50:a1:2b:eb:87:9b:f6:
07:d7:21:03:e0:83:8c:71:96:71:01:1a:1a:e3:49:f1:a3:04:
8a:95:0c:12:7b:7b:c6:58:de:1d:fa:b8:0f:90:ba:7c:ba:01:
7a:64:89:d2:54:96:04:26:1f:2f:dd:b8:4c:04:72:47:02:2c:
50:8e:e9:59:1a:5b:3a:9f:a4:1e:ad:d4:1f:0c:4f:dc:01:f3:
b2:84:ed:56:e2:1f:d1:a1:2e:54:68:5a:8a:01:b8:fc:78:0b:
84:63:aa:ed:f5:e2:2e:e9:ef:fa:e8:14:d8:e7:09:97:bb:67:
c8:16:8d:44:67:bd:81:b1:ce:fa:db:ba:e9:b1:27:e4:80:b0:
69:48:f6:85:65:c2:89:b6:71:cc:51:2c:cd:03:2b:ef:21:ad:
65:96:e2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:48 2024 by rpki-client on console-ams.rpki-client.org