Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/fBn066p8_kshVZYne1LSkc5yc4k.roa
File: fBn066p8_kshVZYne1LSkc5yc4k.roa (raw, json)
Hash identifier: Aj7qTHUQM7N+kyrx9pz1XX30Yb7KhFZPEgqFJMkZFCc=
Subject key identifier: 7C:19:F4:EB:AA:7C:FE:4B:21:55:96:27:7B:52:D2:91:CE:72:73:89
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 018572BA491D873DBFF81FE2D7DA4540A702
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/fBn066p8_kshVZYne1LSkc5yc4k.roa
Signing time: Mon 02 Jan 2023 13:44:49 +0000
ROA not before: Mon 02 Jan 2023 13:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31563
IP address blocks: 195.251.244.0/24 maxlen: 24
195.251.244.0/23 maxlen: 23
195.251.245.0/24 maxlen: 24
195.251.246.0/24 maxlen: 24
2001:648:2420::/48 maxlen: 48
2001:648:2421::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:49:1d:87:3d:bf:f8:1f:e2:d7:da:45:40:a7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 2 13:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c19f4ebaa7cfe4b215596277b52d291ce727389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:27:7b:86:12:94:a0:fe:be:f0:0a:ee:8a:63:
f7:2a:6d:39:62:c3:96:f0:df:3e:4c:b9:10:0e:27:
b3:72:38:23:5d:ae:7e:46:5a:5b:4b:3c:4f:7c:b3:
9e:ea:4d:26:95:67:ed:4a:0c:f3:ef:3f:fc:3e:6d:
3b:c7:d4:86:12:25:13:5e:d3:46:9b:fa:e4:5a:87:
07:77:20:ef:b4:b9:17:1e:c9:27:4b:29:dc:70:8b:
3b:ac:cd:93:7d:63:06:84:7c:e0:38:63:6c:aa:c1:
14:72:4f:a1:35:6e:e2:8f:99:a4:6f:a9:ec:bc:9c:
66:e7:43:05:68:e7:05:ed:39:79:62:bb:32:fd:54:
e4:fb:01:3c:f9:4c:88:d4:d6:42:b4:18:61:e8:bd:
4d:af:3d:bf:ad:4a:20:44:a0:e9:2a:54:fe:78:99:
e7:bf:01:6f:89:d4:82:22:81:23:f4:16:6a:c6:85:
24:49:3e:6b:93:7a:e5:bb:08:f5:3e:5f:90:31:f5:
c3:01:71:d9:f5:4c:57:f2:e8:61:20:9b:b1:c4:cc:
3a:e6:cb:bd:c1:01:30:56:87:64:37:9b:9b:df:5b:
18:e6:81:37:2c:98:f9:68:d3:56:26:35:0f:21:cc:
da:e7:36:09:eb:57:fa:b1:aa:dd:23:e2:58:99:ba:
84:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:19:F4:EB:AA:7C:FE:4B:21:55:96:27:7B:52:D2:91:CE:72:73:89
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/fBn066p8_kshVZYne1LSkc5yc4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.251.244.0-195.251.246.255
IPv6:
2001:648:2420::/47
Signature Algorithm: sha256WithRSAEncryption
37:7a:b7:31:c8:3f:a1:83:4f:a0:f6:13:59:f6:7f:70:58:8e:
99:7c:e8:01:c1:70:da:26:d9:64:57:68:96:bf:5d:c2:1d:a2:
3d:4b:d4:e7:83:2f:54:d3:67:cb:f3:9c:0d:88:64:c0:aa:f6:
7d:cd:97:72:5f:d8:41:8f:32:d3:53:d4:0b:91:46:80:09:c9:
a2:ff:6d:73:c4:e2:d9:57:59:b4:6f:53:bf:09:5b:a4:4e:13:
1f:06:ac:28:5f:c7:65:5d:8b:9f:d6:85:29:90:b6:81:3b:0a:
82:b6:a7:31:2f:f1:ad:91:21:28:e1:f8:c7:8c:2d:a5:60:79:
f2:7f:e6:b9:ec:d0:da:ee:12:d1:fa:e4:8f:fe:0a:b9:dc:a0:
83:ed:28:df:2a:09:c2:48:34:83:4e:e5:7e:ff:6c:ab:99:23:
f8:fb:28:1e:09:93:c9:b4:88:da:a2:d6:c7:73:7d:37:3b:76:
04:58:89:dd:fa:dc:fe:b1:a9:7f:a9:1e:70:07:2a:41:41:de:
52:2e:c8:ff:4a:31:3c:3e:fe:1a:e7:1e:cd:2f:b0:31:cd:78:
69:b3:9f:82:41:65:b3:5b:c6:29:0b:2e:b0:8f:81:fe:57:5f:
00:62:aa:7d:6c:bf:ea:4f:97:a0:00:8f:97:12:f3:5c:e2:9a:
e8:1e:0b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:49 2024 by rpki-client on console-ams.rpki-client.org