Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/9dxsGR05hhmGMfUdbS-jdNp0YY8.roa
File: 9dxsGR05hhmGMfUdbS-jdNp0YY8.roa (raw, json)
Hash identifier: rM1LQP2xZ6g9jRgAQF2rKOR65FRluwzby04y0d5KPYk=
Subject key identifier: F5:DC:6C:19:1D:39:86:19:86:31:F5:1D:6D:2F:A3:74:DA:74:61:8F
Certificate issuer: /CN=2cf022ce4dc81f03b3b30730a6c23eaf342ecc5e
Certificate serial: 01856E790051DC09B488BEA5335BA1B9A1D6
Authority key identifier: 2C:F0:22:CE:4D:C8:1F:03:B3:B3:07:30:A6:C2:3E:AF:34:2E:CC:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPAizk3IHwOzswcwpsI-rzQuzF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/9dxsGR05hhmGMfUdbS-jdNp0YY8.roa
Signing time: Sun 01 Jan 2023 17:55:01 +0000
ROA not before: Sun 01 Jan 2023 17:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47472
IP address blocks: 195.242.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:79:00:51:dc:09:b4:88:be:a5:33:5b:a1:b9:a1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf022ce4dc81f03b3b30730a6c23eaf342ecc5e
Validity
Not Before: Jan 1 17:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5dc6c191d3986198631f51d6d2fa374da74618f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:54:4e:22:57:d8:2b:56:28:37:7e:97:9e:ba:
a1:86:aa:b1:14:d9:11:4d:8c:eb:d4:cd:bb:9d:f2:
54:b9:50:45:fc:d8:b8:9f:f7:13:80:d8:72:ed:f1:
f3:99:60:a8:a0:9a:09:b6:34:67:08:63:24:7e:af:
5a:26:ae:b0:d1:fe:5a:a7:ab:4e:35:20:0d:79:8a:
f8:bb:55:8a:59:02:b2:9a:f2:8e:4a:05:8e:5a:14:
cc:b4:24:0b:a6:78:d5:9f:72:14:18:a1:fd:10:ce:
f9:5a:fc:4a:81:49:8b:ba:ff:ce:5b:a1:7b:16:b5:
7c:9b:ac:1a:ed:41:13:33:eb:d7:3e:44:62:ac:b6:
78:57:a8:e5:ec:9e:86:31:60:73:3c:ed:8e:73:83:
21:fe:fd:79:9d:69:38:95:9f:02:ee:e2:95:5b:14:
11:c9:8d:01:35:f2:42:29:42:ff:9e:be:be:ec:6b:
65:11:f8:36:69:be:bc:91:32:d9:b3:13:97:f5:b8:
ee:5b:a8:ff:ca:d5:c6:b5:1d:01:37:53:d8:b8:fa:
e1:73:05:a9:85:d5:0f:b3:98:20:b3:78:1b:c3:a4:
bd:f7:09:94:6d:16:e9:bb:e5:5e:05:9d:52:16:1b:
6b:e4:fd:09:05:e2:b6:16:93:b1:90:50:46:88:61:
58:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DC:6C:19:1D:39:86:19:86:31:F5:1D:6D:2F:A3:74:DA:74:61:8F
X509v3 Authority Key Identifier:
keyid:2C:F0:22:CE:4D:C8:1F:03:B3:B3:07:30:A6:C2:3E:AF:34:2E:CC:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPAizk3IHwOzswcwpsI-rzQuzF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/9dxsGR05hhmGMfUdbS-jdNp0YY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.180.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:77:ec:22:45:36:6c:81:ee:cc:de:07:71:1e:94:43:11:d2:
e7:8d:9b:3e:6a:38:38:c7:d2:c6:58:a8:00:17:49:5a:c7:a6:
62:74:55:ff:ac:1f:fe:87:7d:e4:99:1e:38:1e:0a:b9:de:2f:
f3:8b:c4:20:53:34:35:f9:32:78:04:34:bd:2c:bc:9e:aa:ce:
3b:34:a1:aa:f8:72:d9:de:ad:42:0f:cd:6f:61:50:a2:54:3a:
98:06:9e:61:fc:3e:97:78:9e:c5:ce:7b:35:05:17:dc:0b:91:
f7:fb:60:c8:10:52:0a:e2:14:71:9d:4d:e3:14:e3:11:31:88:
22:ee:9d:bf:6e:5b:e7:a8:96:37:b0:6f:25:ec:20:6a:01:5a:
db:73:7d:78:b0:6e:12:4a:01:fb:72:db:ff:a4:44:86:9e:e4:
8b:83:17:03:db:b5:ce:71:1e:7d:8f:8c:57:36:0d:62:09:f5:
41:7b:b4:4c:5e:b0:46:c8:0f:c9:e4:17:a8:29:44:56:b0:f9:
8d:49:a7:3e:ba:fa:bd:a1:6c:da:70:8c:85:d3:e6:f5:67:be:
b9:42:f3:b3:ad:b1:34:49:72:7f:09:0c:a9:d3:54:c6:20:26:
55:68:72:6d:d4:53:53:fb:a9:9b:e9:76:71:0c:db:cd:58:43:
31:f4:47:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:12 2024 by rpki-client on console-fra.rpki-client.org