Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/vb9vkPkyj50OsD79J-OnssdeTwQ.roa
File: vb9vkPkyj50OsD79J-OnssdeTwQ.roa (raw, json)
Hash identifier: Jjv0Zo4UKs9mh0hb/vPviXqR+TSnO+lFUyWVqGCc8ng=
Subject key identifier: BD:BF:6F:90:F9:32:8F:9D:0E:B0:3E:FD:27:E3:A7:B2:C7:5E:4F:04
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 018CC493870A332110E5F2B077881E942136
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/vb9vkPkyj50OsD79J-OnssdeTwQ.roa
Signing time: Mon 01 Jan 2024 10:30:51 +0000
ROA not before: Mon 01 Jan 2024 10:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40676
IP address blocks: 193.148.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 00:36:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:87:0a:33:21:10:e5:f2:b0:77:88:1e:94:21:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 1 10:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdbf6f90f9328f9d0eb03efd27e3a7b2c75e4f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a6:e5:de:f8:20:5e:4c:90:df:cf:12:b1:1b:
21:c3:0c:9d:56:83:1b:5a:ea:9a:7e:c2:7d:c9:1d:
05:4d:ee:bf:24:1d:96:89:b8:a9:2b:f9:9c:54:3c:
78:95:a0:87:a8:d0:6c:3d:ae:a7:c7:1a:30:73:08:
1a:c3:94:97:fc:fa:2c:c5:c7:e9:b7:12:25:63:9f:
9b:aa:43:35:75:d5:ec:36:8d:c5:6e:44:5d:bb:85:
ac:29:1c:94:89:c6:d4:82:18:56:b8:44:ae:a2:4e:
be:49:fe:f2:0e:db:2e:53:ad:a7:3a:27:80:1f:2f:
17:19:a3:0e:9e:f9:42:cd:83:73:43:be:33:f9:a9:
b9:cc:4f:b7:3b:14:b1:87:c4:15:97:a3:8d:83:08:
9f:6d:86:31:5e:15:98:bd:a0:7e:14:4b:82:5f:e2:
5a:51:84:69:93:bc:d5:24:18:bd:bf:ab:b4:ba:cf:
cd:bf:cc:8b:2f:f7:df:b6:d5:cb:08:10:45:1e:52:
c6:9e:79:b4:63:e2:9f:14:7a:28:a6:c7:de:7d:19:
38:4c:14:ee:39:74:6d:5f:78:53:24:b5:48:6c:a1:
6b:1a:72:ea:1c:52:77:9b:5a:0f:e0:7d:bd:58:7a:
4e:f9:d5:e2:66:cc:43:c9:1b:4a:e1:07:cf:6e:5e:
0d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BF:6F:90:F9:32:8F:9D:0E:B0:3E:FD:27:E3:A7:B2:C7:5E:4F:04
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/vb9vkPkyj50OsD79J-OnssdeTwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.95.0/24
Signature Algorithm: sha256WithRSAEncryption
40:42:31:1a:b9:f0:4a:43:00:2a:4b:23:bf:b7:34:b7:27:35:
7d:04:3e:16:98:bc:42:c9:3d:86:fd:54:00:6f:d9:58:00:83:
4c:54:61:3f:f1:51:3e:0d:09:f8:ee:1e:18:28:2c:00:b2:d8:
8e:cb:10:35:11:09:0a:3f:bc:f1:4a:e8:0a:f9:9d:d7:1a:8f:
8e:62:91:70:6e:f9:01:36:19:4e:5a:58:10:d6:6a:a2:75:ab:
a6:3e:9c:d1:d5:4d:3e:7d:4f:74:0f:1b:0b:87:0f:6f:d0:f0:
f3:9a:56:23:60:fd:a9:0d:ec:8b:e0:ca:67:05:cb:b3:18:b7:
be:6e:c8:bd:34:e4:d1:d0:25:57:b8:29:38:4a:cb:8f:b4:6f:
82:9a:6d:d8:57:62:e7:35:2a:2a:0c:8c:64:06:06:5a:f3:ab:
51:81:14:90:e9:6f:a9:f5:c9:15:8f:2c:33:69:fb:ce:06:56:
a0:24:14:dd:58:07:3f:05:b6:1e:13:20:b4:cc:24:6c:e3:70:
23:8a:66:55:fe:f5:48:36:5f:69:6f:de:2a:80:34:37:3b:de:
24:4b:e0:3a:75:5c:eb:4f:40:cf:01:05:da:88:22:2b:e5:03:
73:9e:3c:d1:ff:80:bf:26:c5:e7:94:ab:cb:0b:4c:d6:8d:95:
f4:26:51:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 06:09:45 2024 by rpki-client on console-ams.rpki-client.org