Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/wSs9YZ7LiyVeesC4yRCxp5uVjhk.roa
File: wSs9YZ7LiyVeesC4yRCxp5uVjhk.roa (raw, json)
Hash identifier: AOllIFGoQmbmhXHxEDiI9bP3JQL7TKbUhTxFXwxVGUE=
Subject key identifier: C1:2B:3D:61:9E:CB:8B:25:5E:7A:C0:B8:C9:10:B1:A7:9B:95:8E:19
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 018B6BB303B0E8EC0FD2D29A538FBABC61BA
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/wSs9YZ7LiyVeesC4yRCxp5uVjhk.roa
Signing time: Thu 26 Oct 2023 11:16:15 +0000
ROA not before: Thu 26 Oct 2023 11:16:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50816
IP address blocks: 195.76.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6b:b3:03:b0:e8:ec:0f:d2:d2:9a:53:8f:ba:bc:61:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Oct 26 11:16:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c12b3d619ecb8b255e7ac0b8c910b1a79b958e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2e:9e:af:d0:45:4e:50:eb:f2:98:2a:c5:b4:
cc:15:8f:39:29:d4:2c:04:d3:60:ce:75:ea:3c:71:
22:a6:99:8a:46:9e:e7:f7:39:37:2c:eb:a5:f6:ec:
d7:59:bd:ed:a2:2b:fa:c1:bd:b9:64:8e:a6:5c:98:
71:0d:5f:f0:4e:2a:b4:fd:fb:39:df:dd:bb:ce:a2:
ae:4f:a1:fe:94:01:fb:bd:4a:6e:5d:8e:e0:8e:1b:
4b:73:8d:c3:f3:43:37:bd:85:ca:90:89:2d:d6:36:
b3:9d:a2:2b:88:34:b8:41:e1:8a:28:e8:92:ee:89:
05:51:ef:0d:07:a8:1d:99:82:be:82:e0:6d:09:b0:
40:14:0c:f6:9b:d0:4f:07:a7:13:0c:fd:cf:14:53:
1c:81:d9:72:74:56:b1:e9:c3:6f:4a:2f:08:cc:49:
dd:37:48:e5:f9:20:3a:58:22:49:5b:76:3e:59:5c:
a7:0b:59:b2:28:d8:58:4c:cf:73:b5:f7:a7:01:38:
63:f7:7b:65:3a:63:dd:bf:42:77:a4:48:b1:03:1c:
0d:c4:69:5d:36:6e:65:06:ef:71:5c:36:aa:e7:80:
c5:2b:12:f2:08:35:96:6b:88:7c:2a:7d:f2:e5:a5:
90:f3:49:91:0b:9b:88:80:cc:88:e0:a5:92:4d:00:
5f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2B:3D:61:9E:CB:8B:25:5E:7A:C0:B8:C9:10:B1:A7:9B:95:8E:19
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/wSs9YZ7LiyVeesC4yRCxp5uVjhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.76.31.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:1a:37:b1:4a:b4:99:81:f2:ee:3a:bb:36:72:14:98:ee:fb:
df:70:8a:8a:8a:93:d9:d2:34:7b:c0:c2:da:1b:19:46:fb:b9:
be:9c:b8:c4:2b:0a:17:f6:7d:48:b3:a4:e5:28:d8:79:21:f6:
38:2c:f5:4f:47:a9:d7:db:b2:a5:d8:dd:59:02:f6:5f:47:13:
74:2e:01:ac:43:28:05:ee:87:6f:f7:1b:ad:08:73:01:06:c9:
a4:ef:95:a4:01:b2:77:c8:a8:8e:55:b3:04:12:9d:0f:44:a4:
f8:ff:50:3f:45:a4:60:8e:df:9e:3c:a3:c4:8e:db:51:aa:68:
dd:cc:46:00:78:2f:62:6f:f4:a5:ce:16:23:fa:89:85:dc:b1:
fe:ed:83:9d:0f:de:53:45:38:28:c2:d1:db:ae:41:17:4d:8d:
e2:26:c4:29:65:6a:25:5c:44:96:ef:f8:a3:ff:03:1f:15:48:
eb:e6:bf:61:bb:18:a9:9e:fe:7f:a6:85:a4:0a:08:14:93:21:
d5:30:60:83:5c:1d:cc:e9:77:93:12:18:87:f5:e1:5c:4f:63:
de:e9:f7:f2:28:56:72:ab:71:de:2b:75:1b:5f:a2:db:de:e2:
4b:c2:6b:83:ad:a9:17:a4:61:de:70:f2:98:bd:f9:b4:cd:bc:
e0:64:08:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:27 2024 by rpki-client on console-fra.rpki-client.org