Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/85DH7wEyUy4D06ajM3fKu6ucIUA.roa
File: 85DH7wEyUy4D06ajM3fKu6ucIUA.roa (raw, json)
Hash identifier: w28GjCWbg8r6Hf3vbapfuUP266z+p5fy3IqLo5qJ170=
Subject key identifier: F3:90:C7:EF:01:32:53:2E:03:D3:A6:A3:33:77:CA:BB:AB:9C:21:40
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 01856EAFD22782E48B0C51A1CE406B24D3BD
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/85DH7wEyUy4D06ajM3fKu6ucIUA.roa
Signing time: Sun 01 Jan 2023 18:54:54 +0000
ROA not before: Sun 01 Jan 2023 18:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8307
IP address blocks: 195.250.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:d2:27:82:e4:8b:0c:51:a1:ce:40:6b:24:d3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Jan 1 18:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f390c7ef0132532e03d3a6a33377cabbab9c2140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:94:1d:fb:65:55:54:1c:73:be:61:67:c3:8b:
dc:4b:cd:12:8e:08:a7:12:25:74:69:f4:6d:68:a1:
68:8a:68:52:5e:01:cf:b0:67:c8:ab:f3:57:44:ae:
dc:97:6f:3d:4b:dc:7c:b1:a8:0b:a2:e9:4a:95:3d:
d4:f4:17:58:83:65:90:b1:1c:eb:f1:bc:08:ac:3a:
bb:fa:f9:51:c2:d5:b6:05:e2:1c:a5:bb:09:35:5d:
89:95:ff:95:f0:d8:9e:10:0e:30:df:04:fa:42:c1:
89:8e:c4:be:bc:bb:e3:b3:9e:34:34:a1:ad:37:36:
b3:bc:8c:20:b2:2c:05:d0:97:9d:1e:a5:b7:2a:09:
b2:9a:fb:15:8b:a2:c4:e5:b3:52:b2:1a:40:48:55:
b6:1b:63:1a:8b:9f:81:68:8a:73:83:99:c6:1d:8c:
23:56:66:34:79:9a:c6:15:cf:76:e6:f9:c4:99:a4:
59:61:5b:4c:8c:a6:fd:e8:93:ec:f2:19:3d:e5:f8:
18:4c:d5:e1:80:6b:79:5a:7b:11:15:03:94:b1:48:
71:64:8e:a6:86:cf:1b:4d:56:84:58:3b:32:be:21:
53:b2:71:63:86:a8:97:b6:2c:64:db:21:b3:77:fb:
e6:0d:99:be:07:00:da:30:52:c6:8a:a5:0b:ad:86:
89:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:90:C7:EF:01:32:53:2E:03:D3:A6:A3:33:77:CA:BB:AB:9C:21:40
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/85DH7wEyUy4D06ajM3fKu6ucIUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.250.192.0/24
Signature Algorithm: sha256WithRSAEncryption
55:f2:0e:90:75:68:82:60:08:1b:d8:21:16:c0:c4:fc:c0:6d:
b9:c5:f1:47:de:39:6a:f5:88:c1:f1:ab:6d:16:ac:bd:81:8a:
71:bb:a5:09:5e:5e:fa:d1:58:a5:38:50:15:fc:b7:cb:88:03:
bb:f5:eb:ed:86:26:c8:87:38:16:f2:7b:2c:31:b8:57:cd:bb:
a2:2b:07:2a:d9:6e:16:bd:c6:db:90:b5:c5:1b:ca:54:76:42:
8b:c9:a0:09:f6:a3:9b:4f:7f:08:2c:49:ff:35:ad:95:92:0e:
6a:38:87:44:bf:6a:66:ca:28:96:e7:0b:eb:9e:ff:80:94:9e:
10:ec:59:46:4f:b8:23:7b:3f:64:32:3c:87:55:d1:92:21:4a:
1e:22:41:53:2a:dd:02:86:5d:51:13:97:ad:42:00:d7:a1:00:
8d:83:f0:5e:03:d3:0b:9b:b0:4a:f4:9d:b9:e6:8b:56:c1:c1:
3f:b1:cd:df:39:f8:60:da:e3:44:e6:62:d7:d8:25:8e:8b:94:
47:ec:f3:3a:b9:30:36:57:58:38:c0:02:f3:42:ff:c3:b5:8a:
f9:d5:32:bf:d3:93:9e:1b:d3:2b:f6:c7:8b:1d:32:3d:28:4d:
20:3f:a6:17:92:55:3a:59:af:76:88:71:7f:7d:62:5b:4f:e7:
7e:ab:08:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:12 2024 by rpki-client on console-ams.rpki-client.org