Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/lIvP4I_JeHUYID2t4IlhvCFRxPQ.roa
File: lIvP4I_JeHUYID2t4IlhvCFRxPQ.roa (raw, json)
Hash identifier: VkxppMKfK/MOdd91+yMSx4IICrvA/V7laH9PWygLbBc=
Subject key identifier: 94:8B:CF:E0:8F:C9:78:75:18:20:3D:AD:E0:89:61:BC:21:51:C4:F4
Certificate issuer: /CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Certificate serial: 0188F8AEFA6827B716D59DE7ED782698D518
Authority key identifier: 9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/lIvP4I_JeHUYID2t4IlhvCFRxPQ.roa
Signing time: Mon 26 Jun 2023 17:09:56 +0000
ROA not before: Mon 26 Jun 2023 17:09:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7117502
IP address blocks: 195.96.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f8:ae:fa:68:27:b7:16:d5:9d:e7:ed:78:26:98:d5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Validity
Not Before: Jun 26 17:09:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=948bcfe08fc9787518203dade08961bc2151c4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2a:f8:79:6f:13:94:9c:68:da:52:80:d0:b3:
b8:7d:c5:b3:8a:b7:4c:22:a3:6c:b8:5e:04:02:05:
f9:16:48:08:19:5d:18:26:62:42:bd:46:8c:2f:31:
44:0c:44:8b:21:4c:6c:1d:d9:3d:de:c0:5b:77:8e:
60:90:9e:a2:70:90:b6:96:ea:96:12:2d:60:d1:47:
f0:17:fb:f5:1d:7c:a6:f4:5c:e9:76:7c:19:89:ee:
22:7d:ee:db:6d:c3:81:de:1d:87:54:83:08:54:f9:
4f:dd:ad:8f:20:c7:6f:ec:0a:8a:5a:23:c7:ea:d1:
26:25:a9:60:7f:c2:dd:fc:90:6b:e6:db:5c:42:eb:
9a:c1:0f:fe:88:c6:a4:35:02:29:11:d5:b7:93:09:
38:e8:f1:16:ed:41:76:61:63:20:5a:26:cd:18:67:
ed:b5:b4:ba:ab:2c:c4:b2:ad:ee:55:6f:95:0e:db:
5e:37:68:09:2e:e6:2e:84:ea:f8:9a:9d:4f:6d:e7:
ac:94:27:33:08:d2:6a:ae:3c:45:72:8b:0b:a7:cf:
57:26:3a:92:3a:13:25:44:0d:06:44:f0:aa:fd:89:
25:76:07:c0:cf:80:a2:a4:13:a5:7e:85:ba:29:84:
56:b0:3e:a6:27:07:21:4d:3d:d0:bb:93:45:1f:62:
fe:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8B:CF:E0:8F:C9:78:75:18:20:3D:AD:E0:89:61:BC:21:51:C4:F4
X509v3 Authority Key Identifier:
keyid:9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/lIvP4I_JeHUYID2t4IlhvCFRxPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.138.0/24
Signature Algorithm: sha256WithRSAEncryption
08:92:db:61:cd:90:6f:9c:69:6a:9e:58:73:b9:8f:5a:6e:b0:
97:46:20:04:0e:57:a8:fa:d2:f4:4d:0a:0a:63:4a:73:52:88:
25:fc:e2:08:04:d9:f7:49:11:73:7b:74:1f:45:d4:bc:28:57:
6e:f3:65:ff:1f:de:38:22:5f:c0:90:2d:ee:af:c7:b0:db:a1:
43:ba:ff:7b:04:cf:4f:67:bc:b7:0e:00:d8:a6:ef:d0:4d:76:
17:77:4c:7e:84:81:18:3e:fa:d2:4d:bb:ef:b3:7a:75:c9:24:
02:80:bd:30:12:e6:bb:19:6f:e5:31:dc:00:9a:b4:2c:67:8c:
f7:57:a2:8f:4d:32:05:1a:88:a6:d4:06:64:91:e2:8a:4f:3e:
45:2d:ba:e2:30:03:ae:5c:04:b2:cc:8c:4f:ca:06:01:2f:4c:
85:be:2e:ff:14:32:de:2c:46:62:51:dd:ee:28:34:77:ef:c5:
f2:93:3b:c8:81:70:29:76:e9:6b:55:0e:ba:ae:1b:b0:cf:47:
93:a7:98:94:13:59:17:4b:42:69:6f:6e:a7:61:76:06:78:fc:
c3:05:e7:57:09:86:1f:13:15:99:02:55:3d:5a:21:30:6f:5a:
df:cc:02:e8:2d:2e:6e:34:48:2b:04:6e:60:9f:e4:e5:aa:73:
0a:ec:b3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:20 2024 by rpki-client on console-fra.rpki-client.org