Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/DEpoer6Bo4YsR12MO55A1FuQT34.roa
File: DEpoer6Bo4YsR12MO55A1FuQT34.roa (raw, json)
Hash identifier: sAIqebwShJ6+U8IUN3ZXuiqq5HCOUTtOzwkAVujGJIE=
Subject key identifier: 0C:4A:68:7A:BE:81:A3:86:2C:47:5D:8C:3B:9E:40:D4:5B:90:4F:7E
Certificate issuer: /CN=4716a44374fea5ec99f10fb8d6c7d8efe2a3348b
Certificate serial: 0185714C1A13331DCEBBFE0CBA2B6424FA65
Authority key identifier: 47:16:A4:43:74:FE:A5:EC:99:F1:0F:B8:D6:C7:D8:EF:E2:A3:34:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/DEpoer6Bo4YsR12MO55A1FuQT34.roa
Signing time: Mon 02 Jan 2023 07:04:50 +0000
ROA not before: Mon 02 Jan 2023 07:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25326
IP address blocks: 195.234.30.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:34:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:1a:13:33:1d:ce:bb:fe:0c:ba:2b:64:24:fa:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4716a44374fea5ec99f10fb8d6c7d8efe2a3348b
Validity
Not Before: Jan 2 07:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c4a687abe81a3862c475d8c3b9e40d45b904f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c1:be:65:10:5f:42:a9:81:d8:c3:ba:d1:53:
b7:d7:22:8b:e5:2e:2e:82:41:dd:79:2d:35:c1:96:
72:d3:3b:cf:04:04:dc:92:e2:1f:f6:c7:23:9c:30:
70:d7:08:44:3b:c7:f3:69:30:ab:a6:8c:c5:38:51:
16:fe:bc:2c:9e:05:ab:80:62:bf:d5:cb:fe:24:23:
51:92:25:1f:7e:3f:05:23:0c:3c:e7:97:c8:83:e7:
dc:31:ce:00:c8:8b:34:06:b3:31:a3:f0:c8:b6:38:
02:76:9c:45:3e:d6:c3:77:2d:8f:56:02:ec:95:4d:
3a:e0:ee:40:2e:e2:3e:28:2b:1c:c5:0f:75:06:00:
00:a0:b3:af:ba:e1:b6:5f:f7:47:cb:71:54:8e:1d:
92:3e:c6:d1:00:71:fb:05:36:75:95:19:45:a2:45:
fa:63:43:35:fc:55:1c:24:29:b2:0f:57:75:76:73:
04:e1:08:f2:e6:1a:61:09:79:5b:09:44:30:97:72:
26:cf:b8:77:ff:d8:b5:84:44:3b:96:1e:bb:37:3a:
0b:48:f6:3c:ac:c7:16:34:d0:ee:e7:88:43:15:fb:
cd:00:c5:5c:a6:ba:70:10:45:d9:9e:ee:48:9b:a4:
50:ff:0a:d5:f5:a7:59:f4:dd:19:14:d9:a4:27:ac:
78:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4A:68:7A:BE:81:A3:86:2C:47:5D:8C:3B:9E:40:D4:5B:90:4F:7E
X509v3 Authority Key Identifier:
keyid:47:16:A4:43:74:FE:A5:EC:99:F1:0F:B8:D6:C7:D8:EF:E2:A3:34:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/DEpoer6Bo4YsR12MO55A1FuQT34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.30.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:5d:67:56:9b:61:77:aa:96:ba:57:ea:bb:42:93:7f:ca:20:
47:3f:37:45:e3:d3:49:62:5e:2c:be:85:87:d0:3a:1e:3f:7f:
6a:b3:60:f3:29:1b:b5:3c:5a:ed:eb:bc:a9:40:dd:c2:31:8d:
3e:a2:18:c6:17:3a:e1:0b:6d:63:cf:c2:ad:15:ca:9b:f6:1b:
4d:85:fc:3f:73:fa:3e:a1:ac:60:c4:29:0a:eb:26:4c:8a:b6:
41:20:ca:50:25:7e:9f:04:6c:93:82:53:e8:7a:4f:c8:1d:c0:
9e:b8:79:93:0d:cf:97:2a:00:11:2d:24:d9:9c:4a:2d:c9:81:
8a:34:ea:8c:67:85:36:a1:6b:ab:74:32:39:13:db:52:28:9e:
35:57:d2:9a:72:e5:5c:98:a8:55:e1:8c:b5:36:58:63:e1:4e:
be:d3:cf:b3:86:18:4e:e5:69:48:b4:e5:c7:a0:bc:ad:14:d6:
0e:82:c9:3e:55:01:34:32:d8:a6:4e:71:5b:5b:9d:ae:54:9e:
24:aa:e6:48:5f:52:08:f3:ca:8b:5c:2d:9c:51:a0:03:dc:e4:
a8:79:e8:b3:81:e3:20:50:12:56:d6:e5:70:bf:b1:9e:f7:78:
bb:ee:4c:d9:ee:55:a5:ee:00:39:de:12:7b:27:ab:b5:f4:75:
98:41:e1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:22 2024 by rpki-client on console-ams.rpki-client.org