Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/Apk44lDyHfixix64qbhrTi81RY0.roa
File: Apk44lDyHfixix64qbhrTi81RY0.roa (raw, json)
Hash identifier: Yo7HiaCtxEb1zAXKCB3H8IJaGJJrAzL++magW5A8EdQ=
Subject key identifier: 02:99:38:E2:50:F2:1D:F8:B1:8B:1E:B8:A9:B8:6B:4E:2F:35:45:8D
Certificate issuer: /CN=c66d45a24d1c785839fecabbe1b4731bc2417790
Certificate serial: 018CC94D5DD5E7E3E17F60F7B19197A914B8
Authority key identifier: C6:6D:45:A2:4D:1C:78:58:39:FE:CA:BB:E1:B4:73:1B:C2:41:77:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm1Fok0ceFg5_sq74bRzG8JBd5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/Apk44lDyHfixix64qbhrTi81RY0.roa
Signing time: Tue 02 Jan 2024 08:32:19 +0000
ROA not before: Tue 02 Jan 2024 08:32:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213296
IP address blocks: 195.5.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 May 2024 09:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:5d:d5:e7:e3:e1:7f:60:f7:b1:91:97:a9:14:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d45a24d1c785839fecabbe1b4731bc2417790
Validity
Not Before: Jan 2 08:32:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=029938e250f21df8b18b1eb8a9b86b4e2f35458d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ed:dc:cf:db:7d:17:12:b1:10:67:e3:77:c6:
e1:cc:f0:25:c4:6a:16:f6:87:5b:ca:17:93:27:f7:
f7:90:04:a5:5a:c8:46:39:68:de:9f:7b:89:e8:a0:
f7:75:5a:14:78:43:d9:5c:20:e0:a7:4f:0b:0d:0b:
96:fc:55:22:9d:54:63:67:98:97:c3:13:d4:ef:47:
50:8f:57:e6:cd:12:34:fa:ac:a6:29:5d:39:6e:69:
67:c7:18:f2:4b:fe:52:ab:dd:ee:28:95:f2:2c:ff:
da:41:68:e3:4c:e7:63:1c:2a:c6:36:b3:21:19:b3:
69:db:e2:f8:5a:77:12:2f:0d:b9:ae:61:2e:37:bb:
b8:c5:51:23:ee:95:2a:13:83:78:c0:9a:ac:76:7f:
bb:cc:1b:74:f2:80:26:8e:89:c4:02:84:ca:96:27:
71:01:ec:a3:5f:5d:12:eb:5a:2e:a7:5f:5d:70:83:
5e:52:4a:ed:df:1a:14:fa:6e:34:9f:fe:ca:6a:71:
39:17:70:d4:ab:8b:ed:75:c0:a3:17:d1:27:8b:7f:
56:fb:76:6a:da:36:4c:11:34:2e:92:59:fd:e8:76:
04:86:fe:7d:d9:2f:e9:98:e5:74:32:87:c7:4b:12:
bd:15:e5:3c:63:bb:60:7c:ef:0e:1a:33:54:19:a9:
78:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:99:38:E2:50:F2:1D:F8:B1:8B:1E:B8:A9:B8:6B:4E:2F:35:45:8D
X509v3 Authority Key Identifier:
keyid:C6:6D:45:A2:4D:1C:78:58:39:FE:CA:BB:E1:B4:73:1B:C2:41:77:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm1Fok0ceFg5_sq74bRzG8JBd5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/Apk44lDyHfixix64qbhrTi81RY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.105.0/24
Signature Algorithm: sha256WithRSAEncryption
25:65:80:17:c3:65:a8:59:90:45:3c:f5:b2:03:a0:53:3c:76:
4e:b3:05:47:c6:5d:9a:10:bf:0f:1b:04:40:15:88:0f:fd:59:
d9:90:c8:cb:1e:c5:74:62:71:79:e8:b8:4d:44:2c:b0:e1:27:
d1:5e:5a:d6:2c:5f:28:72:ab:ca:f6:e5:f8:5b:23:ec:75:0f:
a5:a2:de:30:00:08:55:9e:7f:24:39:d7:e3:7a:0c:7b:11:3b:
f2:28:b6:13:0a:3f:73:94:00:ef:00:50:76:4e:8e:71:14:13:
95:63:3d:d9:d1:d2:c3:89:7d:92:42:d7:60:1e:55:ab:a4:9e:
fe:a6:cf:5e:79:5e:bb:c2:3d:7b:f0:18:78:a3:87:c3:95:63:
06:d0:3a:82:68:fd:ec:4d:b0:08:ea:da:6d:69:5f:b4:2b:4a:
28:7b:82:81:f3:ff:1d:5a:83:4a:0a:7f:33:19:69:ad:42:72:
04:37:2d:68:e5:21:52:5a:31:c8:23:08:7c:6d:41:a1:2a:24:
1d:64:3d:d0:69:4c:49:36:10:6e:4d:ea:ac:ab:f5:ac:30:52:
9f:07:e3:62:b5:1e:ec:99:5a:98:87:a5:67:1d:ac:fd:a7:a0:
9d:0a:3e:6a:dc:77:2e:cc:51:28:7a:02:58:b4:f2:f1:c9:04:
18:c0:f7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 14:04:59 2024 by rpki-client on console-ams.rpki-client.org