Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/P2OVEBvuKvw_CaYC1e16JVIrzac.roa
File: P2OVEBvuKvw_CaYC1e16JVIrzac.roa (raw, json)
Hash identifier: zdQAV5lK4OwKTN5wyiuhyLlHE4sP4fbDFQsPKcFpoqA=
Subject key identifier: 3F:63:95:10:1B:EE:2A:FC:3F:09:A6:02:D5:ED:7A:25:52:2B:CD:A7
Certificate issuer: /CN=19ce488efa3c184f4acb2fc30eb1a71fa116f9b4
Certificate serial: 018570150388D664A8AA720485478ABE8DDF
Authority key identifier: 19:CE:48:8E:FA:3C:18:4F:4A:CB:2F:C3:0E:B1:A7:1F:A1:16:F9:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/P2OVEBvuKvw_CaYC1e16JVIrzac.roa
Signing time: Mon 02 Jan 2023 01:25:03 +0000
ROA not before: Mon 02 Jan 2023 01:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210877
IP address blocks: 195.225.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:03:88:d6:64:a8:aa:72:04:85:47:8a:be:8d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ce488efa3c184f4acb2fc30eb1a71fa116f9b4
Validity
Not Before: Jan 2 01:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f6395101bee2afc3f09a602d5ed7a25522bcda7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fc:70:79:f5:4d:48:4a:99:4e:61:04:b2:c2:
65:51:99:44:ef:5e:1a:a6:2b:33:77:8b:4c:35:9d:
57:c9:2f:99:c9:3d:be:15:12:6d:00:28:97:63:0b:
e4:d5:cc:84:30:32:13:ca:7c:91:5c:37:a0:08:3f:
a4:95:d4:7c:7f:34:8a:cd:a6:3e:c6:6c:ce:c8:46:
a6:d4:d3:1f:fb:c2:fa:97:1e:86:5c:70:fb:8f:30:
38:de:7a:b1:40:71:c6:6d:c3:72:f0:f6:6b:40:c5:
45:90:25:7c:22:7e:32:4c:1b:ed:72:c0:75:a1:46:
67:36:93:ae:00:25:0c:f9:d5:68:35:d3:26:76:c0:
c9:2d:8d:1c:d6:17:a9:3b:31:b1:10:de:aa:47:84:
0d:f7:1d:2a:01:f0:f3:eb:2c:ee:a4:5c:41:5f:7e:
d3:61:d0:9e:52:3e:58:97:68:82:b7:f6:60:62:44:
cf:00:40:bb:7a:dc:8b:04:46:bb:24:6f:56:db:48:
76:d4:0c:a2:91:10:0a:90:a2:39:98:ed:b8:8e:64:
73:18:9e:9c:db:6b:c2:d6:fe:21:67:c5:e0:7d:b9:
c3:4f:4d:71:6d:a1:a3:60:66:fd:fa:6d:f1:97:4f:
f2:d6:f4:e0:0d:58:71:e8:83:5b:0a:27:8b:94:fb:
9e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:63:95:10:1B:EE:2A:FC:3F:09:A6:02:D5:ED:7A:25:52:2B:CD:A7
X509v3 Authority Key Identifier:
keyid:19:CE:48:8E:FA:3C:18:4F:4A:CB:2F:C3:0E:B1:A7:1F:A1:16:F9:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/P2OVEBvuKvw_CaYC1e16JVIrzac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.232.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:01:d1:43:02:5e:50:36:b5:f1:7d:74:c0:14:ed:4a:f5:a8:
98:95:c5:7a:dc:9d:85:17:b4:88:85:fc:9f:6d:d6:aa:5a:99:
46:d8:29:97:92:1d:a3:de:ab:56:47:65:a0:32:9b:81:4e:15:
47:76:2b:db:7e:27:7b:6c:3f:fb:8c:ab:d1:04:d4:c1:d7:d4:
cb:70:29:b7:7c:90:0d:36:22:18:82:bb:ba:dc:83:cf:7c:9e:
90:2c:4b:7d:59:97:f6:5e:c7:9d:7b:c7:b3:dc:d9:95:49:a8:
4f:45:41:a2:69:24:88:13:72:14:a4:d8:76:32:8c:f6:4c:d9:
4f:26:54:20:c9:7a:5d:90:b1:06:a9:ea:71:ad:2a:fc:9f:60:
cb:2d:a7:e7:d8:1e:c3:bc:f6:c9:28:b0:de:f3:89:c8:f7:14:
4a:67:87:ed:92:cb:e3:5e:cc:52:61:e3:14:21:97:01:90:27:
96:02:29:99:44:87:be:84:ae:8b:0e:f0:6a:04:e1:bd:d2:1f:
ad:84:b3:3e:dc:8c:4a:a3:2e:c6:91:67:0e:bc:51:cc:f9:4f:
0b:3d:ec:9e:7c:34:79:eb:53:7d:8b:44:6b:5b:a2:65:5b:55:
64:93:2b:5a:24:a0:d8:c2:2c:ea:04:71:f9:ac:fc:9c:d4:29:
dc:3c:a1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:59 2024 by rpki-client on console-fra.rpki-client.org