Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/3_RrSEjNFH6o7qad27lQhTtPoCs.roa
File: 3_RrSEjNFH6o7qad27lQhTtPoCs.roa (raw, json)
Hash identifier: m91Ddci+RzqRa9V/y4ffuWjW6lnzS6713JUp83r31ws=
Subject key identifier: DF:F4:6B:48:48:CD:14:7E:A8:EE:A6:9D:DB:B9:50:85:3B:4F:A0:2B
Certificate issuer: /CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Certificate serial: 018572280BB9C7AA4726A778BE9482A45256
Authority key identifier: 04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/3_RrSEjNFH6o7qad27lQhTtPoCs.roa
Signing time: Mon 02 Jan 2023 11:05:05 +0000
ROA not before: Mon 02 Jan 2023 11:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60615
IP address blocks: 195.28.162.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:28:0b:b9:c7:aa:47:26:a7:78:be:94:82:a4:52:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Validity
Not Before: Jan 2 11:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dff46b4848cd147ea8eea69ddbb950853b4fa02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4b:5b:61:23:bc:60:cf:5a:83:3d:d6:cf:6f:
10:00:c5:e1:9b:ea:cd:44:54:c5:30:f6:0c:73:db:
5d:f1:4f:10:ef:fc:ad:2a:84:80:01:67:58:a8:d1:
2d:0a:ce:d5:ea:ec:cf:7d:cd:25:87:c7:44:50:4e:
f9:db:ca:82:72:b0:32:b6:17:d8:70:39:3c:ee:9f:
fe:09:9e:5e:5c:88:4c:fe:e9:cf:66:0b:67:54:fd:
a3:99:60:f1:b6:6c:09:04:80:e7:d7:bf:9e:5d:13:
d6:a7:e0:a2:09:d1:96:72:be:1a:17:ca:c9:26:ca:
d6:ce:20:a6:6b:98:4b:aa:e7:65:ac:72:a3:2b:59:
44:52:91:e6:36:1f:cd:91:56:01:c9:cc:72:20:0a:
49:50:b4:ef:68:d9:ea:da:1b:00:4f:65:f0:7c:52:
97:79:9c:ce:f2:10:8f:39:2e:49:95:e9:23:08:97:
54:b2:60:de:f5:b9:32:47:25:9c:14:f6:4e:0b:77:
8a:c2:31:33:a5:8d:75:67:86:b9:47:dd:11:01:98:
21:dd:72:05:51:e6:1e:01:f0:7b:b9:49:34:17:aa:
c5:9d:50:f5:de:78:96:20:43:90:25:e0:69:7e:e6:
17:8a:44:ac:be:16:a8:7d:44:3b:7b:06:f2:63:1f:
97:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F4:6B:48:48:CD:14:7E:A8:EE:A6:9D:DB:B9:50:85:3B:4F:A0:2B
X509v3 Authority Key Identifier:
keyid:04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/3_RrSEjNFH6o7qad27lQhTtPoCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.28.162.0/23
Signature Algorithm: sha256WithRSAEncryption
73:66:04:68:25:3b:1b:a3:56:b2:4e:df:78:8f:fa:b0:89:8f:
ae:77:fb:48:86:79:a4:f3:aa:8b:65:c7:a8:25:cd:1f:27:05:
36:30:84:47:9b:b1:82:64:48:d0:e5:22:8f:4e:64:74:39:f1:
db:27:a0:47:4e:34:a2:9d:87:2c:c5:32:ef:95:d7:80:3d:81:
ba:80:f7:89:8f:f9:46:93:83:f2:62:05:16:ba:e6:ce:51:e2:
87:d6:30:02:35:cf:e1:b5:49:7b:c0:bf:ca:10:ce:04:37:03:
6e:64:d1:55:c6:9a:46:31:ce:a5:2b:00:c6:d8:d0:1a:9d:17:
d0:f6:e9:fa:44:c3:5b:87:a2:4f:80:58:9f:28:22:cd:1a:24:
b7:16:16:cc:c1:59:72:85:f0:b8:9e:ff:7f:c6:a5:41:9c:7e:
7f:cb:1d:25:b6:bc:69:7d:67:fd:9d:a5:80:0a:fd:bd:d7:4a:
57:cb:fe:14:a6:79:f1:4a:d8:09:39:db:5e:0e:3e:5f:c4:58:
3b:b5:34:43:86:6b:b1:14:d1:bb:26:78:94:af:00:cc:fc:72:
06:10:eb:f7:59:c4:2a:e9:90:f8:32:9a:94:df:d6:a7:11:71:
43:c4:e1:17:c0:43:fb:86:bd:b0:c7:7d:2c:36:60:94:6f:50:
53:68:78:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:27 2024 by rpki-client on console-ams.rpki-client.org