Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/V-W8vo8jyGxk5ZsKQGtnNXMOPmM.roa
File: V-W8vo8jyGxk5ZsKQGtnNXMOPmM.roa (raw, json)
Hash identifier: lSRzP0+GtMhsc3JNiSGzIlvGJ1qQfG+wVWL53DGrUq0=
Subject key identifier: 57:E5:BC:BE:8F:23:C8:6C:64:E5:9B:0A:40:6B:67:35:73:0E:3E:63
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 018572BA44A008FFE251A9C7FADA9EEDC6F8
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/V-W8vo8jyGxk5ZsKQGtnNXMOPmM.roa
Signing time: Mon 02 Jan 2023 13:44:47 +0000
ROA not before: Mon 02 Jan 2023 13:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8700
IP address blocks: 195.251.124.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:44:a0:08:ff:e2:51:a9:c7:fa:da:9e:ed:c6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 2 13:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57e5bcbe8f23c86c64e59b0a406b6735730e3e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:88:04:54:49:93:98:64:a0:78:d7:58:98:0b:
cd:96:f8:52:c6:32:e4:df:38:43:05:63:8d:fc:37:
5f:13:61:f2:6e:fe:41:0e:36:84:51:9b:37:ab:2a:
94:89:8c:7c:22:c5:b6:a2:2f:f6:db:b4:07:c3:d9:
29:ce:f8:a8:bd:db:3b:2a:9f:8b:ee:38:bc:89:91:
fc:72:04:a6:99:41:a7:3b:b5:cf:57:8a:12:c9:13:
01:93:b5:93:f1:61:f5:78:28:75:8a:ec:b0:fa:62:
80:47:83:a0:d1:9f:fa:b6:b0:b8:6b:ab:ed:7a:2b:
82:5d:00:a0:3f:8b:da:63:18:19:82:0b:32:07:a1:
60:36:aa:f0:f1:23:4d:4e:44:fc:31:22:57:c6:d5:
86:b1:47:83:c9:6b:0c:99:dd:c0:99:1d:66:09:38:
4e:88:b9:94:be:0b:d1:7a:54:e5:58:db:68:b4:4a:
fa:b8:2b:b6:90:ae:af:9e:95:70:5a:b3:29:fd:fc:
39:bb:bb:d3:08:76:22:3d:b1:69:96:4c:f7:eb:d4:
2e:ff:f1:05:5e:29:2a:29:d0:86:b3:03:db:39:cd:
3a:28:12:5a:4d:35:24:d6:da:67:52:b4:b6:19:9b:
3e:42:c1:4e:40:02:31:23:b6:ba:7a:bc:8d:7f:9e:
1e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E5:BC:BE:8F:23:C8:6C:64:E5:9B:0A:40:6B:67:35:73:0E:3E:63
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/V-W8vo8jyGxk5ZsKQGtnNXMOPmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.251.124.0/22
Signature Algorithm: sha256WithRSAEncryption
56:cc:4a:54:f5:af:e9:e6:58:41:d4:1f:60:e1:31:c1:16:83:
e9:5f:e2:8a:87:77:6e:0f:54:1f:0f:31:f4:a0:2d:8c:b8:89:
b0:ad:b7:8d:93:d4:b3:98:f4:70:42:b0:f6:50:0a:66:22:0b:
14:df:cf:0b:79:08:0c:a6:88:9d:ff:47:58:57:02:21:d8:05:
9b:39:2a:a6:db:89:6b:e5:12:cd:f2:52:59:e1:5f:c9:08:b1:
88:86:6b:e5:09:d4:76:dd:04:b1:ac:a8:28:ab:bb:66:73:8d:
cf:1b:b2:d5:4f:96:2c:b3:b5:8d:9d:65:c1:17:42:d7:31:2e:
e7:40:79:a2:33:d5:34:b1:a8:00:02:06:a9:b5:9c:ae:58:3a:
08:ce:d6:e7:6c:36:53:05:8d:03:2e:c1:ed:b0:27:f6:18:d9:
d2:48:e2:08:67:0f:ac:9c:3a:da:17:a0:d1:80:99:c1:36:50:
38:b1:8e:46:98:98:57:c0:41:fe:d9:c4:7e:10:5e:f0:e8:d1:
59:7c:a3:dd:ee:86:3c:e3:e4:37:05:40:f5:0c:62:49:2e:f0:
e0:7b:e8:ab:2d:3c:27:2e:ac:de:63:5a:bf:b7:3f:72:3d:8e:
90:12:33:83:3d:87:39:4e:26:a1:9c:08:fe:ea:44:e2:ec:48:
15:c5:4f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org