Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/7d5d52P_EpuV9Di_PpjwatJqyoU.roa
File: 7d5d52P_EpuV9Di_PpjwatJqyoU.roa (raw, json)
Hash identifier: n9Mop8BCDbPc3BFS9cfESjkYforcUIFxsHg7nVtxbr0=
Subject key identifier: ED:DE:5D:E7:63:FF:12:9B:95:F4:38:BF:3E:98:F0:6A:D2:6A:CA:85
Certificate issuer: /CN=f0e729a54cc76b889c832e0d1395894af7c0e5fe
Certificate serial: 018570706654B3F516C6D6091BF75F0AC01F
Authority key identifier: F0:E7:29:A5:4C:C7:6B:88:9C:83:2E:0D:13:95:89:4A:F7:C0:E5:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OcppUzHa4icgy4NE5WJSvfA5f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/7d5d52P_EpuV9Di_PpjwatJqyoU.roa
Signing time: Mon 02 Jan 2023 03:04:52 +0000
ROA not before: Mon 02 Jan 2023 03:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208046
IP address blocks: 195.54.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:66:54:b3:f5:16:c6:d6:09:1b:f7:5f:0a:c0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e729a54cc76b889c832e0d1395894af7c0e5fe
Validity
Not Before: Jan 2 03:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=edde5de763ff129b95f438bf3e98f06ad26aca85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6d:22:37:5b:bd:58:17:29:36:82:3a:4f:8b:
43:df:0c:d4:55:de:a6:4f:eb:b1:71:52:f6:f8:b5:
ba:e7:f9:f0:61:5f:e1:47:5b:7c:ef:aa:f8:7a:fb:
dc:c7:f7:b3:5f:d2:7c:13:0c:e6:61:05:15:38:ce:
26:1e:b0:1f:db:59:9a:5e:64:9d:ea:18:05:c3:15:
4c:03:8b:38:c9:c9:6b:6c:42:ec:f0:b6:93:0b:18:
bd:ea:15:27:f1:a8:c4:48:ef:cf:bc:d9:36:8e:2e:
45:d9:8d:5b:72:91:cc:30:c5:81:18:fd:3f:fb:03:
21:84:a8:40:cd:8a:67:1c:b3:ad:89:eb:9a:74:87:
84:ad:7c:1c:5c:0b:32:ee:5a:0a:ce:77:c4:7d:b8:
47:25:65:02:ca:09:19:6b:02:a3:01:83:4d:4c:0d:
38:f9:16:d8:45:66:5d:df:3c:c6:49:5f:c1:66:98:
b3:3a:2f:ba:3b:48:ad:77:5c:a5:5d:d1:b6:be:3f:
1a:e8:1a:5f:2a:f9:1e:f8:b0:8e:6e:63:15:77:8c:
01:6e:16:d8:9f:52:62:23:e4:91:4d:26:a8:2a:8b:
4f:f9:0b:20:29:f7:e6:e6:10:c4:3c:c8:a0:68:a8:
6f:ce:6b:42:08:4d:fb:4c:27:19:6a:a8:bb:40:61:
8c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DE:5D:E7:63:FF:12:9B:95:F4:38:BF:3E:98:F0:6A:D2:6A:CA:85
X509v3 Authority Key Identifier:
keyid:F0:E7:29:A5:4C:C7:6B:88:9C:83:2E:0D:13:95:89:4A:F7:C0:E5:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OcppUzHa4icgy4NE5WJSvfA5f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/7d5d52P_EpuV9Di_PpjwatJqyoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/8OcppUzHa4icgy4NE5WJSvfA5f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.54.59.0/24
Signature Algorithm: sha256WithRSAEncryption
94:71:b7:51:fa:bf:e8:ed:0e:9a:d5:87:02:1a:70:dd:50:13:
9c:41:e8:a1:41:28:62:c7:5c:e8:4f:ef:36:d5:0d:20:8e:a9:
ea:ff:70:54:02:58:4d:bf:7e:ef:1d:88:b6:a3:2e:dc:3d:23:
6e:1e:1a:08:66:c7:34:b1:00:6c:d5:bd:03:64:d2:b0:ec:1b:
8d:36:22:0f:d2:e1:2f:8e:cb:a0:e0:35:de:4e:c7:c2:45:e4:
cd:32:a2:ca:0c:2c:f7:80:24:b3:3d:a4:a0:2c:d8:8c:9f:bc:
4d:8d:20:1e:b6:e5:57:c3:f2:32:5a:b4:3e:17:17:cb:72:ec:
b1:2c:9e:b3:be:53:b2:87:6c:77:ee:d2:4a:7a:58:ee:0e:7a:
2d:2c:57:e1:32:fe:ba:8c:d4:3c:60:a5:7b:29:5a:42:20:b6:
48:33:de:ed:27:9e:51:16:e3:b3:57:18:d3:05:bf:e5:a9:df:
80:70:8d:89:3e:6e:a3:6a:11:ab:29:7f:52:81:9b:e3:a7:89:
25:11:b6:95:cd:0e:3b:9e:5c:c1:d6:53:6b:bf:65:df:3c:5b:
1a:df:57:c2:d3:72:5f:b7:e4:43:b6:dc:aa:58:e7:22:de:ec:
06:76:03:b8:e7:ae:7e:37:15:2e:0e:65:ff:63:7b:11:6a:ee:
6b:da:b4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:52 2024 by rpki-client on console-ams.rpki-client.org