Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/AAHgsjCPqacniDYInrpdIygAjUE.roa
File: AAHgsjCPqacniDYInrpdIygAjUE.roa (raw, json)
Hash identifier: Be37521JkdvUE6CjTvwAYVNCE/LKepKbp1/AGFQOUDE=
Subject key identifier: 00:01:E0:B2:30:8F:A9:A7:27:88:36:08:9E:BA:5D:23:28:00:8D:41
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4E3BB2F3A081DF5E5C5FA82AF21A5
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/AAHgsjCPqacniDYInrpdIygAjUE.roa
Signing time: Sun 01 Jan 2023 19:35:23 +0000
ROA not before: Sun 01 Jan 2023 19:35:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31088
IP address blocks: 195.78.116.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:e3:bb:2f:3a:08:1d:f5:e5:c5:fa:82:af:21:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0001e0b2308fa9a7278836089eba5d2328008d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:64:83:e3:0a:4b:e3:fd:fc:4c:a7:3d:8c:7c:
c7:17:8a:c6:73:44:4a:64:da:86:ee:55:79:c7:db:
01:ad:d6:9a:77:4c:21:fa:3e:23:2e:94:a8:d9:a6:
66:8d:e4:eb:eb:18:ae:75:e1:a7:15:3d:22:53:77:
58:a8:48:38:4c:d3:c2:9f:e5:45:02:7c:bf:38:bb:
97:76:8b:da:b1:c4:07:5f:20:ee:2b:69:50:cf:14:
ad:fc:22:55:a3:6d:54:3b:e3:73:12:f2:b4:00:43:
bb:ce:0c:b6:df:62:d1:bc:81:ab:14:2d:66:ca:d8:
b3:58:be:d1:3d:0b:d1:cf:07:85:1a:f9:ca:d1:31:
37:4a:89:34:1c:e0:77:06:42:88:8f:53:15:cf:34:
8d:04:ce:bd:22:c0:4c:04:65:c7:81:71:58:66:dd:
9d:78:d0:ca:9f:0e:81:9c:63:99:a5:77:4e:b2:4c:
31:7b:45:9c:6f:4f:ae:ed:f5:73:c8:93:97:c9:cf:
b3:1c:3f:69:00:0b:f0:bb:ae:ce:d5:2b:1b:5a:46:
7e:ba:ac:66:e9:42:d9:a4:6d:8c:4e:19:b2:c5:d5:
f0:b0:bb:48:8c:07:d3:29:48:8b:95:c8:4f:98:b5:
8a:76:b5:da:f9:2b:1a:95:f7:77:08:a6:09:0d:e4:
2a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:01:E0:B2:30:8F:A9:A7:27:88:36:08:9E:BA:5D:23:28:00:8D:41
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/AAHgsjCPqacniDYInrpdIygAjUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.78.116.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:bf:01:32:09:3e:d2:41:56:f9:5b:60:7b:69:34:45:8f:13:
a0:46:16:37:84:9f:22:81:00:c8:a9:da:9e:3d:5d:61:99:1a:
ed:24:f8:f4:0a:d6:50:83:0a:49:41:ba:1d:21:2d:60:e3:a0:
07:c3:d6:32:08:88:ef:6e:01:87:57:2b:bb:5a:65:86:03:c2:
6f:7c:c5:ce:c6:fc:b6:b9:19:89:01:d6:24:96:e6:e6:0d:12:
57:e8:dc:14:ba:2e:3d:aa:ab:c3:dd:a3:14:b0:1c:79:3f:bc:
22:fc:50:a7:03:31:f2:6c:0c:c5:a8:29:d9:64:75:71:3d:c7:
d3:e7:29:84:93:2b:82:8b:0c:a7:6a:3d:64:39:cb:77:95:df:
5b:e2:68:6d:9a:2f:64:ad:5f:f3:b8:73:6b:5d:35:12:f7:fb:
2c:e2:1a:ff:fb:cf:b7:a4:45:33:e7:75:39:76:b0:84:17:7f:
82:f8:b0:e6:f9:0e:3e:cd:d5:1c:a7:91:29:95:88:c2:e5:94:
31:30:7a:b1:7f:f0:07:06:0f:13:55:9a:38:f0:90:68:d2:71:
f2:a7:3e:20:f6:63:75:f3:12:dd:f0:da:79:c7:7f:c3:0e:5d:
0f:f3:bb:30:07:a9:95:31:af:98:1d:39:3f:3c:1e:b5:e9:ad:
c4:02:54:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:24 2024 by rpki-client on console-fra.rpki-client.org