Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/KUjAoSzD8iNxNBzximbXzPTsIBU.roa
File: KUjAoSzD8iNxNBzximbXzPTsIBU.roa (raw, json)
Hash identifier: 2kzFvra4wz0VUJtFaJWl9l+3H242EC1/2erw1CdwhE0=
Subject key identifier: 29:48:C0:A1:2C:C3:F2:23:71:34:1C:F1:8A:66:D7:CC:F4:EC:20:15
Certificate issuer: /CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Certificate serial: 01856F9DD8578A87499AB02D858F9DAF7558
Authority key identifier: 04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/KUjAoSzD8iNxNBzximbXzPTsIBU.roa
Signing time: Sun 01 Jan 2023 23:14:53 +0000
ROA not before: Sun 01 Jan 2023 23:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197512
IP address blocks: 195.20.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:d8:57:8a:87:49:9a:b0:2d:85:8f:9d:af:75:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Validity
Not Before: Jan 1 23:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2948c0a12cc3f22371341cf18a66d7ccf4ec2015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:37:1e:64:23:4e:5e:40:fb:86:6b:b6:1b:a5:
4d:d7:ab:63:5e:52:f4:64:a8:cd:fd:04:18:96:e8:
2f:37:c9:04:c3:df:ba:77:eb:ad:30:4e:c7:36:e9:
dd:d7:5b:f3:c6:60:30:40:c0:6f:42:ad:5a:13:3e:
07:8f:a4:2a:6c:ac:42:ad:0f:e7:60:7b:59:98:30:
86:be:4e:0b:1c:ba:d4:3e:ce:c3:da:9c:c1:9a:a5:
17:f4:5b:20:e5:7f:3d:6e:44:05:f3:fa:9e:2f:93:
9d:79:0a:c2:e3:82:31:e2:30:6b:97:92:59:14:e8:
fb:8d:2a:9e:f1:ae:9a:56:a1:0e:80:56:fc:86:0c:
b7:cd:62:18:5f:c7:0b:41:76:33:6e:82:a1:28:28:
a3:e7:af:92:8b:e0:19:d9:2f:e3:d6:0d:a9:d2:58:
4b:d2:6a:dc:83:ea:60:de:20:d8:c1:64:b3:e3:1e:
f6:d1:fa:b0:51:8a:66:29:66:ef:36:3f:a4:48:79:
81:1c:d7:d0:c1:30:de:e7:7a:b9:f0:4a:48:10:d7:
29:b1:c3:18:41:5e:65:88:d3:a5:d7:b6:12:31:37:
d9:b3:6a:eb:ff:4c:ab:50:c4:42:44:87:0d:19:14:
c9:41:d3:28:7f:9d:63:ee:40:f3:51:36:dd:eb:f7:
d0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:48:C0:A1:2C:C3:F2:23:71:34:1C:F1:8A:66:D7:CC:F4:EC:20:15
X509v3 Authority Key Identifier:
keyid:04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/KUjAoSzD8iNxNBzximbXzPTsIBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.130.0/24
Signature Algorithm: sha256WithRSAEncryption
65:99:fb:8d:6f:53:4c:16:42:7a:fd:63:e6:73:07:fc:1d:89:
23:ec:78:4f:bb:56:c3:8f:d1:7d:d4:6e:c4:31:da:2b:e9:71:
4c:cf:33:f3:72:82:07:06:a0:03:38:3b:d4:84:3e:15:9b:f0:
b9:5d:4e:92:26:3b:3d:da:2d:b7:95:0c:fb:98:30:c4:fb:50:
f2:6f:b3:05:83:74:38:97:ce:bb:65:74:77:00:bd:99:a0:a5:
94:95:fa:9d:a9:a1:da:9c:2b:81:a0:9a:5d:4f:42:8e:0e:6c:
66:ef:94:fd:e6:8c:b9:43:af:a1:c3:ce:e0:e5:63:3a:72:27:
0d:e2:7d:17:c7:e7:05:67:9c:ce:bc:62:ca:46:4b:94:cd:99:
dc:d1:f6:e0:56:0a:eb:2e:cb:eb:66:1b:2f:88:06:dd:0f:35:
7f:b8:e5:8f:13:51:95:06:54:24:f4:89:ae:ef:d7:ec:17:3e:
db:24:36:a9:a1:bc:81:ec:31:1b:e9:80:d0:bb:95:5c:c4:e9:
d4:94:de:23:4d:c1:fd:28:02:79:1d:af:cb:e6:f9:7e:2d:5b:
fe:c4:a9:1b:77:94:f7:82:f5:9d:38:85:0f:dc:5c:92:9c:bd:
47:87:92:ff:4c:87:02:e9:b6:df:52:54:4e:62:90:56:45:24:
38:fb:f6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:54 2024 by rpki-client on console-fra.rpki-client.org