Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/wLcu9e_RObdomGnZ0-Z0Sp9nW28.roa
File: wLcu9e_RObdomGnZ0-Z0Sp9nW28.roa (raw, json)
Hash identifier: uObFTkXwwsDThXz2QOSDfK8xPK03UazV8Nsg9mD0wHw=
Subject key identifier: C0:B7:2E:F5:EF:D1:39:B7:68:98:69:D9:D3:E6:74:4A:9F:67:5B:6F
Certificate issuer: /CN=a898496b8d1dd825b487038fb87ca199b13b93df
Certificate serial: 01857082933DE2820367E24954B25DBCBE65
Authority key identifier: A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/wLcu9e_RObdomGnZ0-Z0Sp9nW28.roa
Signing time: Mon 02 Jan 2023 03:24:43 +0000
ROA not before: Mon 02 Jan 2023 03:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56533
IP address blocks: 195.211.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:93:3d:e2:82:03:67:e2:49:54:b2:5d:bc:be:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a898496b8d1dd825b487038fb87ca199b13b93df
Validity
Not Before: Jan 2 03:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0b72ef5efd139b7689869d9d3e6744a9f675b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:20:7d:95:bc:a3:19:5f:e4:30:0c:c8:5a:ed:
56:d2:59:cc:c4:e3:09:b8:17:aa:d4:58:27:1f:fc:
d7:11:50:96:17:14:7a:68:56:34:8c:0f:45:a5:27:
a7:71:f5:41:e1:bf:37:15:a1:3e:35:6f:4a:2b:dc:
ed:e8:28:2f:24:42:79:9c:7d:5e:4f:7e:9e:16:b6:
38:7f:41:3b:7d:bc:e9:7a:3e:35:b0:d5:84:22:0d:
3f:96:e4:d9:2b:2c:fa:c1:55:21:22:66:75:5f:f4:
92:d1:6d:cd:d5:9c:3f:12:9c:f4:ad:10:c2:a2:a1:
a6:0d:12:b2:6b:85:ea:9c:a8:54:99:7a:3b:1a:e3:
37:fd:78:65:22:ef:4f:9c:40:97:fe:64:34:e9:d0:
04:da:23:61:c0:1c:a8:28:43:44:3e:ea:bb:a9:8c:
46:78:99:c7:1c:ee:d5:ce:79:98:b7:4f:41:22:1f:
59:77:c2:6d:0e:d2:48:24:dd:4b:12:ec:3e:fb:45:
30:9a:0b:83:38:08:bd:ba:73:e7:27:7f:45:49:4e:
a7:9c:7e:4d:b3:cb:40:81:9d:5e:ad:da:e6:32:57:
95:d9:ba:f2:25:f9:86:22:03:0e:4a:95:29:c0:28:
9a:14:a7:66:62:17:ed:2c:b9:cf:67:e2:ea:1c:d5:
57:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B7:2E:F5:EF:D1:39:B7:68:98:69:D9:D3:E6:74:4A:9F:67:5B:6F
X509v3 Authority Key Identifier:
keyid:A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/wLcu9e_RObdomGnZ0-Z0Sp9nW28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.250.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:e8:b4:15:90:ae:54:da:ef:63:10:10:6d:e3:d1:37:67:ab:
3a:0b:7d:a4:88:b1:7f:a6:36:6f:49:89:5a:68:cc:2d:a7:c7:
f0:b3:c4:17:25:00:4d:5b:86:96:d3:3f:4c:e0:63:6c:91:92:
9a:52:cf:c1:f5:4b:b2:a2:48:a7:b3:c3:67:da:71:4c:d2:d9:
0a:6c:1f:54:e1:2c:29:70:fd:df:6f:0d:7e:7c:d5:f2:08:d6:
2d:8e:3f:ac:bc:a4:d0:84:c9:ce:aa:c6:d9:b2:a2:fe:44:24:
0a:ae:69:76:4d:c9:5c:1d:24:49:44:30:78:fe:18:18:60:c2:
3c:79:2a:dc:55:05:c1:65:d0:f1:0b:51:26:ab:5f:2f:f6:06:
ba:11:97:39:5c:99:9a:29:9f:e2:d0:4c:37:f6:47:27:16:ed:
ae:11:76:3f:7b:1e:13:ea:12:e0:4f:4f:e7:6c:98:41:db:14:
0f:83:9f:a7:0f:d8:73:37:61:f9:40:e7:44:36:dd:c3:2b:10:
d3:34:d3:88:89:83:1b:9d:f5:7d:92:f5:58:b8:ae:66:36:a7:
32:07:25:d1:8b:a2:bf:10:ef:3e:ad:d5:26:9d:89:62:11:86:
ef:f7:2c:bd:96:a6:11:c5:88:95:7f:1f:22:91:73:84:bc:8b:
60:58:84:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:34 2024 by rpki-client on console-fra.rpki-client.org