Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/dz0MmShiOntSt5EL2wNGwRtzttE.roa
File: dz0MmShiOntSt5EL2wNGwRtzttE.roa (raw, json)
Hash identifier: rRE6AiT4pFRRABftjCrBgH5KausZkIc0Bc75fZu53To=
Subject key identifier: 77:3D:0C:99:28:62:3A:7B:52:B7:91:0B:DB:03:46:C1:1B:73:B6:D1
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019180AB1A0E16B6CA7CF9940D1957E2D701
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/dz0MmShiOntSt5EL2wNGwRtzttE.roa
Signing time: Fri 23 Aug 2024 19:16:22 +0000
ROA not before: Fri 23 Aug 2024 19:16:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199760
IP address blocks: 195.96.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Aug 2024 16:41:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:80:ab:1a:0e:16:b6:ca:7c:f9:94:0d:19:57:e2:d7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Aug 23 19:16:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=773d0c9928623a7b52b7910bdb0346c11b73b6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a1:f8:32:d7:93:f9:79:b4:c8:e9:f6:5f:64:
53:37:de:d7:e1:c9:a6:2f:04:3a:d4:c4:a8:b5:fe:
66:40:24:2c:db:e8:c8:f0:db:06:21:b3:aa:cf:15:
c5:36:e6:1e:08:33:b8:e7:6c:7d:90:99:f9:51:91:
29:15:18:70:d9:ab:31:9a:0b:bf:b7:15:a4:10:61:
40:6f:75:51:9a:d7:d9:59:35:fa:3c:8c:1a:30:21:
87:9f:36:57:ab:d0:44:e0:9f:74:98:c7:a3:5a:d5:
e8:b0:80:90:a0:fd:fc:fd:1d:10:03:20:6a:3b:86:
a8:97:0b:fb:c2:56:cd:7e:54:9b:3c:66:48:1d:ce:
cc:f8:a5:4e:ae:bd:45:69:3e:a3:9a:b8:e4:b4:15:
1f:0a:5b:d6:74:6c:14:0d:ec:ca:7c:f5:bb:3a:bb:
48:d9:58:e2:80:d8:60:b0:6f:2d:13:0a:f3:c8:18:
56:ce:c4:9e:a2:2c:6f:4d:25:37:55:30:9b:61:87:
08:c1:c9:f7:54:31:6c:a5:40:41:de:1a:b8:61:6e:
83:a1:9a:28:68:53:37:89:9f:44:72:4c:c1:ed:b1:
3d:c7:4f:91:ed:72:73:5e:83:ae:f4:cf:74:93:23:
68:e4:d5:66:5d:84:0d:73:6e:93:46:d7:2f:91:8e:
92:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3D:0C:99:28:62:3A:7B:52:B7:91:0B:DB:03:46:C1:1B:73:B6:D1
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/dz0MmShiOntSt5EL2wNGwRtzttE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.129.0/24
Signature Algorithm: sha256WithRSAEncryption
33:2b:61:cf:e8:98:00:e9:41:58:b7:40:ff:44:ad:bd:18:34:
00:6d:ad:c1:b0:10:84:65:a2:ee:a4:2b:eb:62:93:93:db:6d:
07:46:4f:0b:1d:6d:88:c5:76:f7:57:55:73:81:7a:e0:92:45:
2e:bf:ba:84:47:18:cf:68:d9:6a:6e:9d:b2:8b:f8:3e:c7:66:
e3:1a:93:30:da:31:d7:bb:97:3f:6b:51:7e:96:4b:e4:b5:9c:
86:df:0b:20:0e:00:77:da:d3:34:37:9d:37:cd:c9:22:5e:17:
5b:8d:df:33:a1:65:6a:17:59:c3:91:b6:ae:21:2b:93:28:9d:
1e:1c:02:c9:4e:51:4c:17:de:ba:cf:b8:d3:d1:93:68:f6:8a:
d5:ec:8a:53:52:c8:18:86:97:38:64:32:3c:be:41:fe:06:91:
07:d8:e3:9e:83:09:8d:d9:8c:fc:7e:e4:87:ae:90:9b:ac:52:
a5:24:a1:61:00:18:7a:0d:b1:51:8b:52:c0:10:fd:ac:ba:77:
cb:5f:9d:d0:b6:6b:38:05:e9:37:39:12:e4:19:2b:66:c5:c0:
f3:b1:d2:65:24:5f:8f:29:6d:17:f9:a8:19:b7:5c:65:c6:e0:
fe:dc:16:03:b0:59:24:8f:df:1d:cf:87:15:0e:c8:81:f3:3d:
ce:63:f7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 20:06:10 2024 by rpki-client on console-fra.rpki-client.org