Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/iqSCz9l70CCwV54ODTFCTSy_sSU.roa
File: iqSCz9l70CCwV54ODTFCTSy_sSU.roa (raw, json)
Hash identifier: tETJNZIoBS81gm5HDMC9ObExuV0MLv4E1Y2kfVMPC68=
Subject key identifier: 8A:A4:82:CF:D9:7B:D0:20:B0:57:9E:0E:0D:31:42:4D:2C:BF:B1:25
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 018B4DBF7A2F9975F398372E5A113F599BC7
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/iqSCz9l70CCwV54ODTFCTSy_sSU.roa
Signing time: Fri 20 Oct 2023 15:41:16 +0000
ROA not before: Fri 20 Oct 2023 15:41:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 195.14.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4d:bf:7a:2f:99:75:f3:98:37:2e:5a:11:3f:59:9b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Oct 20 15:41:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8aa482cfd97bd020b0579e0e0d31424d2cbfb125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:54:fe:8b:bf:17:ab:f5:38:7e:f4:c0:66:66:
22:73:85:e4:bb:d2:21:e6:ec:f8:5b:42:16:b2:11:
c9:fe:f0:19:c5:f5:cb:d7:76:0c:e8:5c:a1:71:75:
e7:bb:4d:cd:3c:10:28:76:c8:81:6d:60:ad:23:33:
21:e0:2e:59:3c:9e:5d:1f:98:58:93:06:00:dd:d5:
f6:ad:d8:f2:d3:0c:aa:8b:14:23:8c:31:67:a4:1d:
10:69:90:85:76:27:0d:2e:0f:7f:72:13:92:64:1d:
f6:47:08:28:4c:d6:05:16:ba:0a:9f:e6:ba:d4:98:
6a:20:d3:b1:e3:da:c9:41:c3:0b:43:fa:84:a4:6f:
63:1c:30:ae:c8:68:e5:00:d2:c0:0f:66:3a:b4:e8:
2c:df:6e:9a:cb:38:86:c0:62:e6:7f:fd:1c:8a:53:
71:b2:3b:37:4f:db:ef:61:91:e6:58:b8:a7:68:26:
95:34:36:58:9a:82:c2:c4:65:27:5a:2a:05:42:a7:
e5:87:cd:3b:28:2d:85:b7:8f:36:1b:16:94:9a:ce:
e1:7b:fe:ac:3c:cd:b9:54:58:e2:2d:bf:25:39:30:
45:c8:f1:55:a6:e0:ae:0a:10:ce:ef:9c:e5:25:37:
16:bc:b0:92:ce:23:1f:40:53:b2:35:67:eb:44:d6:
3a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A4:82:CF:D9:7B:D0:20:B0:57:9E:0E:0D:31:42:4D:2C:BF:B1:25
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/iqSCz9l70CCwV54ODTFCTSy_sSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.14.105.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:af:bf:84:bf:35:87:eb:23:33:f6:dd:6a:d0:dc:f7:8f:30:
e4:f0:c7:83:a4:95:f4:ae:db:4f:b5:0a:68:e1:16:ae:e0:cf:
13:1f:87:8f:ea:54:e2:43:6e:f3:c1:14:2d:17:d7:e2:ee:f9:
dc:fb:4d:5d:ab:7e:64:0a:29:7d:fe:86:fb:c4:03:d2:3e:b9:
94:a1:76:10:b4:24:36:4b:2c:7c:b4:49:9c:e0:8b:c3:b8:4a:
b7:1a:cb:ad:37:3e:53:96:96:ea:1b:fa:24:76:b4:e2:1f:71:
e0:60:78:7c:41:51:dc:40:2e:c0:a0:a5:ba:26:e8:f6:6a:b7:
ae:a2:45:47:3f:74:40:33:52:0d:70:d0:f5:a4:2e:7a:66:ce:
1b:ed:0d:08:8c:88:e6:45:fe:9e:db:a9:c3:79:62:34:b3:f1:
de:4f:d3:9e:a9:95:5d:ce:fb:34:c3:35:a1:de:d4:fb:83:ba:
f1:21:94:ee:be:4b:60:35:17:85:2e:4f:72:8a:f0:b4:bf:1d:
f9:0a:b8:be:71:07:58:6c:1b:4d:ab:b8:c1:0b:9a:7d:33:56:
d9:63:b7:36:6b:47:f8:e8:c4:2f:37:56:32:6f:1d:97:cd:86:
28:03:6b:fe:3d:d8:4a:2c:90:fd:4e:80:2b:e3:75:6c:0c:e5:
46:e0:e7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 28 11:02:24 2023 by rpki-client on console-ams.rpki-client.org