Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/KiZ7a2NgUol38nII8logjowEXLY.roa
File: KiZ7a2NgUol38nII8logjowEXLY.roa (raw, json)
Hash identifier: D1h9f4Uho4bf7PWCS4UI9JtTcK9YbJ9A6ulSEpxBKyA=
Subject key identifier: 2A:26:7B:6B:63:60:52:89:77:F2:72:08:F2:5A:20:8E:8C:04:5C:B6
Certificate issuer: /CN=5730e2f703f698b9dceac63f1e8691d879c0b2a7
Certificate serial: 018E9C2B44218D7DC2AB6911F53DDF7BF58A
Authority key identifier: 57:30:E2:F7:03:F6:98:B9:DC:EA:C6:3F:1E:86:91:D8:79:C0:B2:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/KiZ7a2NgUol38nII8logjowEXLY.roa
Signing time: Tue 02 Apr 2024 00:17:44 +0000
ROA not before: Tue 02 Apr 2024 00:17:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196924
IP address blocks: 195.191.126.0/24 maxlen: 24
195.191.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9c:2b:44:21:8d:7d:c2:ab:69:11:f5:3d:df:7b:f5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730e2f703f698b9dceac63f1e8691d879c0b2a7
Validity
Not Before: Apr 2 00:17:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a267b6b6360528977f27208f25a208e8c045cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:39:c5:7f:42:04:b1:6d:14:ad:b5:85:48:42:
c5:2e:93:b1:9e:fb:69:c9:f4:fd:6b:4a:8a:42:db:
99:91:f3:e8:3a:35:2c:fb:f5:e2:ca:bb:8f:75:27:
7b:29:79:32:a0:c1:12:22:ee:cc:17:44:52:04:c3:
9c:9e:84:eb:a7:80:d2:02:dc:1b:d6:f8:fa:50:fe:
80:35:67:12:f2:3a:78:6c:c0:2b:07:74:be:c3:6d:
37:ad:8a:37:a3:f6:53:12:10:3a:c6:1d:a6:57:26:
12:7b:d3:b1:43:5d:26:6f:a2:8c:c3:bb:42:e9:73:
3f:91:b9:fb:ff:ab:02:b8:0b:c1:38:33:db:79:70:
c5:e7:9d:53:4b:af:86:5f:76:d2:f0:0a:ca:9b:a3:
1c:38:e0:f5:e0:76:27:91:11:d9:b7:2e:58:1c:71:
dd:ba:ed:62:ca:5f:5d:f3:8a:7c:5f:8a:55:e0:fb:
e8:28:2f:d7:41:dd:77:a8:85:c9:98:88:6f:40:80:
e8:0a:04:b5:09:53:7d:15:14:27:fa:20:5a:d2:5f:
5b:fa:10:33:f2:33:d1:a2:a0:56:c0:2b:6b:54:b6:
9e:a9:04:4c:1d:89:1f:59:33:bd:48:57:97:a5:63:
9f:18:ed:3e:61:da:66:ef:b1:e0:28:87:db:64:f6:
d6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:26:7B:6B:63:60:52:89:77:F2:72:08:F2:5A:20:8E:8C:04:5C:B6
X509v3 Authority Key Identifier:
keyid:57:30:E2:F7:03:F6:98:B9:DC:EA:C6:3F:1E:86:91:D8:79:C0:B2:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/KiZ7a2NgUol38nII8logjowEXLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.126.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:0f:11:1c:b3:ab:7c:1d:90:e9:ad:07:5d:9f:f3:2e:90:6f:
0d:4f:59:7f:4e:19:87:d0:44:e1:dd:f0:ec:f7:d8:d8:1a:9f:
ff:0c:d3:88:29:25:12:ed:66:09:dd:a5:8a:25:ca:12:ef:b6:
ca:26:a7:19:2c:76:be:34:11:74:77:61:df:65:64:fb:90:8f:
4b:19:4e:5e:90:56:11:5c:e0:e0:39:f4:20:36:32:ec:1d:86:
86:c8:ea:94:61:3c:a7:6b:a4:d2:29:dd:03:d1:3a:55:e5:c4:
83:cd:7f:b8:2a:c9:98:a1:8a:a3:f5:05:d7:b5:61:f1:70:8a:
a8:01:3d:8b:76:67:18:03:0e:66:88:75:8a:af:75:6d:39:f3:
5a:68:d3:e3:e4:97:13:b0:88:ac:01:71:3a:42:0b:c2:6b:c0:
46:7c:74:f4:be:4e:73:e6:fa:31:8d:4a:c0:4c:da:e9:58:41:
88:77:5e:fb:3b:89:1e:cf:48:14:44:67:6a:27:11:c9:dc:7c:
75:0a:dd:ee:f2:38:c4:e6:35:e8:72:4c:97:20:46:0e:b0:69:
64:36:e6:8a:f6:67:7c:c0:f8:1f:91:b4:37:d1:72:fb:aa:6d:
e9:3e:d3:fd:a3:28:68:3a:2b:7d:70:5e:6e:ac:89:e1:25:2c:
cf:08:0b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:13 2025 by rpki-client