Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/pKgj3WD_zEX9b5Cu0iTprHJKFVg.roa
File: pKgj3WD_zEX9b5Cu0iTprHJKFVg.roa (raw, json)
Hash identifier: C/0bM+V/4HVtOhvOULsVDHkMmP+t95kBswrGmzW2wHw=
Subject key identifier: A4:A8:23:DD:60:FF:CC:45:FD:6F:90:AE:D2:24:E9:AC:72:4A:15:58
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 018CC64B6418E9E3BA4417419F050B2E7C8F
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/pKgj3WD_zEX9b5Cu0iTprHJKFVg.roa
Signing time: Mon 01 Jan 2024 18:31:18 +0000
ROA not before: Mon 01 Jan 2024 18:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44092
IP address blocks: 195.96.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Feb 2024 11:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:64:18:e9:e3:ba:44:17:41:9f:05:0b:2e:7c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jan 1 18:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4a823dd60ffcc45fd6f90aed224e9ac724a1558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c7:16:ea:e2:52:6a:31:5f:b1:54:c1:2c:1d:
59:fa:22:38:49:36:04:2f:ca:bc:4c:7d:f1:23:69:
bb:45:93:ac:a5:29:87:62:5e:f7:ea:90:73:bd:dd:
e9:ed:22:2c:68:84:b5:30:57:66:d7:c5:f4:90:7f:
40:9d:9a:54:4b:26:d8:32:a2:87:95:6c:89:d2:9a:
2b:49:be:aa:6e:7d:a4:ec:65:7c:30:c1:94:36:dd:
10:f3:c0:d4:01:1e:04:cc:f4:1b:73:62:4c:bc:59:
59:e2:66:3f:8c:d4:60:21:70:27:37:56:c4:2d:18:
d3:3e:cb:ca:39:e7:7d:82:d3:d6:09:52:09:c9:f6:
81:2f:eb:86:d0:36:43:86:d5:d4:bd:97:3e:c2:d7:
95:f4:aa:30:76:ee:c0:11:54:8d:b6:fd:14:92:75:
3b:1b:f5:b1:4f:66:72:c0:c4:1d:04:cf:0f:e1:91:
02:e9:f8:86:99:ef:81:4a:33:25:ed:13:7d:7f:b5:
e9:f5:f0:92:03:bb:da:ed:e5:0e:42:57:df:ef:e6:
01:45:d4:6a:6f:ad:74:95:ed:fd:d9:1b:1d:41:53:
e4:3b:0f:9c:a2:74:0c:26:f0:7b:e5:3a:84:28:bb:
a1:32:2a:4d:5b:20:14:33:48:af:92:12:0f:7e:e0:
63:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A8:23:DD:60:FF:CC:45:FD:6F:90:AE:D2:24:E9:AC:72:4A:15:58
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/pKgj3WD_zEX9b5Cu0iTprHJKFVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.129.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:cb:5d:33:17:9d:ad:e1:bd:04:81:8f:90:9f:96:78:88:92:
48:0c:e2:ff:2a:b7:a1:13:0b:85:70:fb:94:0b:e0:1a:6f:53:
27:c4:40:32:4d:24:a0:bf:78:f3:a8:f1:b7:7f:57:14:b3:02:
3c:c3:ce:ca:0d:8c:a3:56:e4:60:79:11:01:9b:1f:70:fb:49:
3b:80:f3:f8:2d:d5:bf:73:56:c4:21:56:04:95:a1:9a:f2:16:
2c:34:02:ad:15:d9:af:30:a9:82:41:78:ae:1d:38:79:e3:af:
62:8f:ca:52:20:16:e3:f9:02:d3:69:1e:bd:3f:e9:6f:67:79:
02:92:94:13:c3:6e:3d:fb:e7:e0:1e:51:61:2a:cd:78:8b:c9:
17:52:06:40:3b:30:f4:3b:82:45:ae:fe:91:44:63:d3:0f:29:
5f:ec:01:8b:89:70:c0:62:62:a6:5f:22:b7:02:4b:fa:15:aa:
90:2d:74:93:0c:a8:a3:fc:26:67:d4:15:8a:70:a8:8d:36:82:
11:df:b7:a8:05:d5:d4:f0:fa:12:9b:07:58:cb:d9:b1:2f:6f:
11:2c:e4:99:b6:a9:b1:04:0f:fa:b5:b4:a6:eb:b3:96:71:c9:
18:e1:4e:8b:e3:d3:6b:9a:42:5d:3c:44:fa:df:ad:85:a0:f7:
bc:58:f4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:07 2024 by rpki-client on console-ams.rpki-client.org