Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/w0eseE-i-vOW68LMIAEELKn5eJ8.roa
File: w0eseE-i-vOW68LMIAEELKn5eJ8.roa (raw, json)
Hash identifier: EJSaYD/7GJWnbdIMtwoa+640Y7AmHZb7UMMwTwufEuI=
Subject key identifier: C3:47:AC:78:4F:A2:FA:F3:96:EB:C2:CC:20:01:04:2C:A9:F9:78:9F
Certificate issuer: /CN=21a00080cd2cb1bb073903b32b25ad660a366486
Certificate serial: 0192E1DE1873261A069DA276AC0CC7749E83
Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/w0eseE-i-vOW68LMIAEELKn5eJ8.roa
Signing time: Thu 31 Oct 2024 09:18:01 +0000
ROA not before: Thu 31 Oct 2024 09:18:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51167
IP address blocks: 195.191.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 08:53:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e1:de:18:73:26:1a:06:9d:a2:76:ac:0c:c7:74:9e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486
Validity
Not Before: Oct 31 09:18:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c347ac784fa2faf396ebc2cc2001042ca9f9789f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b3:78:35:bc:2a:af:2b:0d:13:2a:a6:34:0b:
85:32:81:00:02:e6:2a:06:a2:a3:3e:99:d3:fe:7c:
86:b9:41:37:36:0e:1f:b5:41:86:d0:86:3f:c4:90:
f7:ba:4e:89:f9:bf:9e:7e:da:5b:39:77:d8:28:43:
b2:07:4c:d4:db:8b:4a:09:b6:c3:d7:ed:36:37:d7:
62:28:23:20:ee:9a:49:55:1d:32:64:e0:77:c9:9c:
d9:4f:c0:c3:79:81:d0:13:4f:24:84:86:16:be:a0:
d5:82:2b:4b:f1:33:97:a6:96:ea:8e:02:d6:4a:75:
e0:3a:b6:a8:f8:7b:86:f5:8e:6a:6b:43:2a:eb:19:
e6:3e:ca:41:8d:97:a3:0a:52:18:f9:49:6a:7b:79:
40:2a:46:ec:55:6e:90:fe:3b:35:68:74:c1:c8:e4:
77:88:65:df:40:84:05:09:4f:f0:54:7d:ef:41:d9:
ce:98:d1:3f:4b:dc:be:c7:63:48:37:50:47:a1:bf:
6e:5f:f5:da:e4:6f:4f:1e:7d:d9:ae:3d:d1:e7:cf:
38:38:2d:98:07:74:66:e4:cf:3b:9c:8e:00:3e:ee:
d7:b1:56:78:62:7f:98:3e:b7:b1:44:cc:83:3d:f6:
67:78:d0:1f:9b:51:71:ef:f6:3a:01:3b:94:d3:2c:
da:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:47:AC:78:4F:A2:FA:F3:96:EB:C2:CC:20:01:04:2C:A9:F9:78:9F
X509v3 Authority Key Identifier:
keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/w0eseE-i-vOW68LMIAEELKn5eJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.65.0/24
Signature Algorithm: sha256WithRSAEncryption
65:8c:7d:c8:a2:8c:55:2c:f3:2d:0b:f0:ce:9c:fa:d3:9c:9b:
d9:06:fc:84:be:f0:62:1c:13:60:ac:ae:ce:10:e5:fa:6c:60:
25:d9:68:e6:de:ff:27:18:ce:07:45:51:16:a2:4b:aa:86:6e:
c3:20:6c:cc:8e:07:1f:13:58:3c:5e:0c:ce:79:3b:36:56:ac:
52:d9:92:b8:5f:9b:5a:7a:57:16:eb:2e:20:76:9f:f2:e8:38:
2f:1c:0f:ee:fb:3b:0f:0d:af:e5:21:95:13:76:eb:a2:53:06:
db:de:7d:11:17:1b:5a:6e:13:e1:39:58:ac:73:8c:70:a4:01:
36:bd:3a:8a:73:d9:17:f7:a2:75:cf:93:73:46:5d:aa:64:96:
2d:7e:cc:49:d0:bc:f8:c6:9d:80:c7:30:bd:85:ba:c0:0b:c3:
79:3f:09:df:84:d9:fd:39:80:2e:18:46:70:6f:b1:af:d5:55:
81:fa:38:9b:6c:9d:7f:fd:cb:56:fe:8b:39:c0:17:82:e7:6f:
37:ac:0f:7b:fe:77:2f:11:d2:de:1f:5c:c6:dd:86:39:8b:b4:
3c:da:ac:fa:85:49:e9:13:ac:94:dd:6d:9c:5f:bb:0e:96:65:
60:1a:66:f8:72:c6:10:f7:eb:f0:7e:9a:e9:9f:2b:f9:90:c8:
ea:10:ab:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 10:59:35 2024 by rpki-client on console-ams.rpki-client.org