Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/bZ3DJ_sQPh7aBEsup7Ei_7sZM3Q.roa
File: bZ3DJ_sQPh7aBEsup7Ei_7sZM3Q.roa (raw, json)
Hash identifier: YLqW2CzJkMyy5NIHA81mbeZBCzbDyFAcj7Xz99I1mHM=
Subject key identifier: 6D:9D:C3:27:FB:10:3E:1E:DA:04:4B:2E:A7:B1:22:FF:BB:19:33:74
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 018572BA43EFB49DC2570B1E45B3DF7A8BD0
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/bZ3DJ_sQPh7aBEsup7Ei_7sZM3Q.roa
Signing time: Mon 02 Jan 2023 13:44:47 +0000
ROA not before: Mon 02 Jan 2023 13:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8643
IP address blocks: 195.130.123.0/24 maxlen: 24
195.130.64.0/23 maxlen: 23
2001:648:2010::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:43:ef:b4:9d:c2:57:0b:1e:45:b3:df:7a:8b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 2 13:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d9dc327fb103e1eda044b2ea7b122ffbb193374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:ff:49:79:b3:6f:79:b3:51:18:90:2a:fd:
23:99:51:89:8c:00:94:5b:2f:15:df:10:44:7a:91:
be:2f:82:be:ff:a5:2f:58:71:dd:99:cb:01:7c:30:
0d:b0:73:63:7f:ab:0f:dd:27:3d:74:e4:58:ae:b3:
f4:5e:bc:95:05:f7:2e:db:c5:e1:2f:ca:b7:6a:89:
d8:4b:40:54:ed:47:9c:8c:e8:60:e0:7a:ed:1a:ac:
61:08:05:3a:dc:cf:69:12:d3:95:f0:c7:13:30:0a:
68:43:ca:f0:e0:6f:1e:d5:e0:7d:ba:d6:eb:f2:cc:
01:ba:b2:27:a5:57:f9:6c:bf:60:c7:8f:32:f8:b5:
69:61:a3:29:03:53:bc:cb:5a:6e:f3:ad:d0:eb:7d:
a8:7b:1a:e2:0d:b1:0b:a7:c0:0f:53:ac:09:51:ed:
5b:82:01:26:bc:32:e3:e0:c7:19:34:86:c8:ef:27:
fd:2a:02:92:65:e2:55:36:6b:9c:ec:0f:23:01:1a:
02:c3:87:44:f1:e3:7b:90:37:f4:ce:ed:cd:e6:30:
eb:45:cb:7a:a4:fa:29:f8:1c:8f:5d:69:96:38:43:
bf:e0:74:67:de:1c:44:f4:16:e1:d4:ed:bd:50:15:
a2:86:fe:4d:19:f5:2d:02:f3:d3:0a:00:64:bf:fa:
bb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9D:C3:27:FB:10:3E:1E:DA:04:4B:2E:A7:B1:22:FF:BB:19:33:74
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/bZ3DJ_sQPh7aBEsup7Ei_7sZM3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.130.64.0/23
195.130.123.0/24
IPv6:
2001:648:2010::/48
Signature Algorithm: sha256WithRSAEncryption
02:30:9e:c7:05:15:ba:26:df:ea:12:05:c1:75:b5:60:ea:ad:
46:76:5a:fc:26:5b:19:79:c8:94:2b:4d:52:ab:a8:e8:e1:a3:
03:ed:13:4d:e3:12:2c:ff:be:5f:aa:da:a1:9f:c3:1f:bd:37:
4e:4c:b9:ff:00:df:92:af:67:f4:31:6a:72:c4:60:ca:33:11:
ba:3c:4c:c8:95:b0:aa:87:87:63:f9:07:09:14:33:5c:73:cf:
44:b1:15:f1:43:1b:23:34:ef:fb:c4:8b:6b:70:09:44:38:c1:
fb:1b:a2:36:60:0f:5f:9a:b6:31:b8:29:c0:40:20:98:70:de:
e6:1b:31:1e:2c:83:05:a3:74:b9:42:c4:bf:bb:2a:3d:98:db:
f0:3f:94:7b:01:33:13:e0:1f:21:07:e0:f3:76:f2:97:1f:e2:
a4:45:63:a1:5e:c4:68:22:14:28:7d:0a:5f:45:ca:af:31:a1:
c2:78:61:a1:0b:6d:d7:9e:97:74:c0:f3:11:83:26:6b:7e:b6:
a3:25:a0:7d:1c:b2:05:3a:2f:03:a9:95:34:f9:ae:71:1e:f3:
f4:4a:c8:e7:13:ef:a5:e8:75:92:1e:61:39:76:96:81:05:9c:
31:67:11:f8:1e:76:c6:9e:37:70:52:48:eb:07:c5:66:eb:10:
2b:1a:41:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:49 2024 by rpki-client on console-ams.rpki-client.org