Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/fuSw_RHbHOLMQ1pOExQsGQjQZSk.roa
File: fuSw_RHbHOLMQ1pOExQsGQjQZSk.roa (raw, json)
Hash identifier: Fx02ED/ZI2nv9t7y31Dg7+4cPuQYbhsZSFv1gdMZsU0=
Subject key identifier: 7E:E4:B0:FD:11:DB:1C:E2:CC:43:5A:4E:13:14:2C:19:08:D0:65:29
Certificate issuer: /CN=9a4336da1eb7216e20ec04a7f031eb4a1b631bb3
Certificate serial: 01856D66135D3193F9F839912690538F7321
Authority key identifier: 9A:43:36:DA:1E:B7:21:6E:20:EC:04:A7:F0:31:EB:4A:1B:63:1B:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkM22h63IW4g7ASn8DHrShtjG7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/fuSw_RHbHOLMQ1pOExQsGQjQZSk.roa
Signing time: Sun 01 Jan 2023 12:54:44 +0000
ROA not before: Sun 01 Jan 2023 12:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41026
IP address blocks: 195.140.152.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:13:5d:31:93:f9:f8:39:91:26:90:53:8f:73:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4336da1eb7216e20ec04a7f031eb4a1b631bb3
Validity
Not Before: Jan 1 12:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ee4b0fd11db1ce2cc435a4e13142c1908d06529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8b:b2:59:bf:ae:4a:db:36:ed:20:bd:77:a0:
ca:5c:16:58:4f:6a:2e:0a:29:83:36:d7:b8:b5:aa:
14:1a:36:58:a2:a6:19:1c:01:c3:f6:41:e7:f3:25:
16:94:c8:2f:c2:50:67:10:ed:dc:6d:4f:9d:80:c2:
56:11:5e:4d:a8:23:d9:dc:f3:41:1d:c8:34:17:67:
9e:3d:0d:77:f8:8f:12:80:89:cb:29:c7:85:a2:3c:
4b:02:b0:7a:34:2c:aa:b6:c0:38:2b:f1:a4:13:dc:
f0:9d:87:4e:9f:6b:fd:5f:67:cf:89:85:43:c6:f6:
a7:2d:82:b2:5c:38:79:74:51:93:cd:5f:05:b6:7a:
79:35:c4:c7:2e:d6:a5:95:b6:cb:d2:e8:4d:32:69:
86:3c:86:d4:68:e0:94:a7:a5:aa:9a:62:e3:0a:76:
a6:b5:09:34:e0:d3:cd:f3:4d:64:1d:46:4b:d1:72:
1b:2b:cb:ce:de:6a:48:74:61:f9:69:d9:e4:12:ca:
9f:68:62:99:fe:60:8a:2c:7b:76:a5:51:36:0e:d0:
5c:a5:56:97:a7:ed:24:12:0e:47:2b:02:2c:2d:a7:
93:d2:db:70:dd:4d:32:2d:ed:4b:95:d3:8a:5f:34:
83:53:c4:2c:e2:b5:7c:fa:35:f4:88:b3:37:40:c7:
21:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E4:B0:FD:11:DB:1C:E2:CC:43:5A:4E:13:14:2C:19:08:D0:65:29
X509v3 Authority Key Identifier:
keyid:9A:43:36:DA:1E:B7:21:6E:20:EC:04:A7:F0:31:EB:4A:1B:63:1B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkM22h63IW4g7ASn8DHrShtjG7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/fuSw_RHbHOLMQ1pOExQsGQjQZSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.140.152.0/22
Signature Algorithm: sha256WithRSAEncryption
97:96:ec:ee:be:4c:c7:a1:0c:71:f2:1b:aa:76:f9:7b:ed:d3:
8e:c0:75:51:cc:a3:ae:42:ff:87:77:e9:91:f2:f5:c8:20:a7:
5d:c7:a5:a8:0e:24:3e:4c:e2:b3:e3:ea:cd:18:3d:1b:83:30:
0e:28:d1:2b:3b:20:f7:84:03:a7:73:5b:f1:1d:b5:74:4c:0b:
3a:d9:f6:6c:f4:88:e2:4c:88:b6:d8:ae:a6:65:ed:d0:b1:7c:
94:65:6e:f9:b1:13:0b:59:64:95:c7:85:53:a0:47:27:14:82:
93:5a:ec:5f:7a:94:99:1e:fa:fa:72:1d:ea:c4:11:15:5e:5e:
bc:59:e9:66:94:a4:a2:e1:bb:5e:29:e3:87:a9:87:1e:37:fe:
dc:b1:a3:cd:b2:db:c9:59:62:18:ef:73:17:2b:03:53:56:29:
b7:19:ef:4e:b2:aa:16:c3:8c:24:ee:72:4c:87:e7:41:03:3a:
db:78:5f:99:9d:4c:d4:9e:f0:44:f2:b7:6c:02:48:be:e8:4e:
3a:f6:5b:91:26:3a:e5:33:00:18:b7:2c:6f:79:d3:51:9c:03:
5d:28:06:b7:22:35:96:9d:36:c8:77:b4:6b:d8:e3:51:c0:44:
e2:65:48:f9:f4:ef:9a:36:38:8b:71:3e:57:4e:0f:f6:f2:79:
3e:6d:88:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:04 2024 by rpki-client on console-fra.rpki-client.org