Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/1-Hi1FGiS9FqzZMFEMy7Hc3SHSC4.roa
File: 1-Hi1FGiS9FqzZMFEMy7Hc3SHSC4.roa (raw, json)
Hash identifier: 0yICHXX+hILIh66PJaFaM+IUVTQSxXu47qIh6IVd0tQ=
Subject key identifier: F8:78:B5:14:68:92:F4:5A:B3:64:C1:44:33:2E:C7:73:74:87:48:2E
Certificate issuer: /CN=4eeb86abd5374e553098209075b9afecabef333a
Certificate serial: 01856B40E5051C644546C03CFF9FBF7C5E5E
Authority key identifier: 4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/1-Hi1FGiS9FqzZMFEMy7Hc3SHSC4.roa
Signing time: Sun 01 Jan 2023 02:54:53 +0000
ROA not before: Sun 01 Jan 2023 02:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31463
IP address blocks: 195.191.164.0/24 maxlen: 24
2a10:4a40:4ddc::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:40:e5:05:1c:64:45:46:c0:3c:ff:9f:bf:7c:5e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eeb86abd5374e553098209075b9afecabef333a
Validity
Not Before: Jan 1 02:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f878b5146892f45ab364c144332ec7737487482e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ff:11:4b:db:ce:48:dd:3f:a2:d1:41:45:fe:
45:28:0c:81:dd:2d:ef:5d:d4:9a:73:e1:64:eb:b5:
6e:f4:d8:88:ee:7c:2f:3d:0c:e3:5b:ed:fc:85:24:
a8:97:38:5a:9c:26:d7:3f:f0:23:22:8f:16:e6:a3:
8d:4d:8b:89:e6:f2:44:bd:a9:39:d7:b9:1f:ba:0c:
e3:23:5b:ae:1f:22:9c:44:69:dd:a6:61:01:3d:f1:
cc:ab:f9:bf:3d:53:3c:5f:1a:72:f0:8c:a0:94:e0:
d6:65:1c:e6:37:12:45:cb:0b:fe:40:74:12:a1:35:
d2:bf:90:9a:98:02:02:3c:91:b6:ac:a3:3a:a7:c2:
d6:71:5e:19:46:38:2e:7b:a1:d0:23:5f:dc:58:f9:
cf:87:58:1e:d9:73:d6:b5:17:c5:a2:42:25:59:f2:
52:75:03:df:7b:95:19:d9:d2:02:8c:ee:69:99:36:
b5:98:9c:9d:08:36:fa:cb:4f:f6:24:bc:82:c0:67:
01:94:ef:08:8b:dc:c3:94:08:35:e7:ec:b8:4f:1c:
9e:d6:59:ea:a0:28:9a:59:88:49:5d:cf:7c:99:41:
6c:6b:7f:5a:1b:c5:a8:41:3c:2d:ae:4b:5a:dc:ee:
f5:f6:8f:13:9f:97:ff:6b:48:5a:95:82:25:71:e5:
b3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:78:B5:14:68:92:F4:5A:B3:64:C1:44:33:2E:C7:73:74:87:48:2E
X509v3 Authority Key Identifier:
keyid:4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/1-Hi1FGiS9FqzZMFEMy7Hc3SHSC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.164.0/24
IPv6:
2a10:4a40:4ddc::/48
Signature Algorithm: sha256WithRSAEncryption
4f:31:cf:d8:c0:c4:b5:fb:e3:b7:08:33:0c:6e:c5:5d:5f:1d:
f7:64:a1:e6:c6:2f:9a:6e:f2:cb:c0:40:a6:f5:2c:9f:a9:dc:
c7:6a:52:43:24:b0:c5:5c:c1:6f:ca:8b:46:a8:6d:23:b0:a2:
e1:4d:43:b8:c1:69:02:9a:4a:a4:c0:88:eb:e6:39:a4:95:30:
15:27:d2:3d:c0:f4:5f:04:46:59:3d:03:8a:d3:55:a1:95:a4:
5b:87:04:8f:95:83:32:13:bf:9c:4e:4c:b5:33:02:7d:98:80:
9c:04:8d:4e:3a:12:04:b1:88:71:32:3f:7e:d4:83:4c:f4:5d:
3b:f6:dc:08:65:e6:02:82:d9:9e:e9:f2:38:cc:58:d2:d6:09:
3e:6a:16:a9:52:e1:e4:14:9f:a6:7d:ad:12:ad:31:df:bb:6f:
b8:b1:4e:5c:f9:98:46:60:57:87:08:de:80:a4:23:21:9e:73:
1d:35:ae:f8:ca:fc:93:2e:b7:37:08:1c:84:f4:df:87:e2:f4:
a1:2d:f2:87:71:d9:0f:83:de:3d:95:54:b1:bf:86:2e:ac:60:
15:8c:36:35:a9:a2:88:be:4c:63:90:9f:85:e8:e2:9a:28:7a:
1f:3f:31:eb:30:80:eb:b8:2f:ff:5b:a9:28:c5:75:f6:51:d4:
3f:d8:ac:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:04 2024 by rpki-client on console-fra.rpki-client.org