Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/vv5gTyPAJB_GRByPl_xAXBJ07nE.roa
File: vv5gTyPAJB_GRByPl_xAXBJ07nE.roa (raw, json)
Hash identifier: Vu05nW5orNBWrHzPtF+AS4XoazyEKoB/mPL3IaXWG6U=
Subject key identifier: BE:FE:60:4F:23:C0:24:1F:C6:44:1C:8F:97:FC:40:5C:12:74:EE:71
Certificate issuer: /CN=0f91e5b58da326e654e994fef2195276759579be
Certificate serial: 0185701532D15A1BC28FF889F0246C8373A3
Authority key identifier: 0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/vv5gTyPAJB_GRByPl_xAXBJ07nE.roa
Signing time: Mon 02 Jan 2023 01:25:15 +0000
ROA not before: Mon 02 Jan 2023 01:25:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41638
IP address blocks: 195.138.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:32:d1:5a:1b:c2:8f:f8:89:f0:24:6c:83:73:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f91e5b58da326e654e994fef2195276759579be
Validity
Not Before: Jan 2 01:25:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=befe604f23c0241fc6441c8f97fc405c1274ee71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:a6:e1:9f:1d:b7:d4:f4:40:18:e2:37:d4:
b5:ca:7a:25:ac:82:77:df:67:f5:48:f1:47:fe:50:
b2:c1:ea:62:dd:f2:16:4d:b7:25:27:95:95:ea:bb:
86:40:9e:30:f8:28:9f:98:28:e7:61:41:af:d8:3b:
cc:fd:3e:b6:d6:3f:1b:79:50:3f:33:34:2d:66:c4:
40:c5:13:42:2e:e7:c4:f7:a0:58:32:dc:d0:90:a9:
b8:be:bd:4e:84:3b:9b:1a:0f:cc:5c:71:3b:d5:4a:
b0:97:2f:ee:46:cc:e5:13:c5:94:31:64:f9:63:9d:
81:04:4f:fd:86:13:52:54:92:e9:4f:1e:e4:7f:6c:
15:56:35:70:bb:43:ed:80:3b:e7:27:da:7a:8a:2b:
be:18:b9:44:e3:f2:52:c3:a7:78:8a:f1:55:6b:26:
7d:ba:16:72:25:f8:b4:97:ad:54:5f:7f:84:f5:55:
b3:00:29:ba:45:8e:bd:e6:cc:1d:7b:d9:cc:4a:c6:
e4:dc:04:42:9a:1c:9f:d1:f7:b9:81:3b:6b:4d:8b:
88:7b:a8:b7:10:82:c6:55:da:80:2a:f8:63:15:c4:
08:65:40:67:4c:ae:d1:81:54:a3:c0:12:97:70:1e:
43:c3:b3:c1:95:67:c9:31:ae:9d:1b:92:42:86:0d:
e9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FE:60:4F:23:C0:24:1F:C6:44:1C:8F:97:FC:40:5C:12:74:EE:71
X509v3 Authority Key Identifier:
keyid:0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/vv5gTyPAJB_GRByPl_xAXBJ07nE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.138.222.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:19:c6:e8:a7:57:eb:70:e9:1c:99:fd:e2:9a:79:e6:74:32:
e9:f4:b6:91:8a:7b:5f:2b:3b:75:07:05:34:82:80:c9:de:be:
58:d6:58:2e:0f:b6:c1:e5:65:ab:98:4e:4a:05:3b:71:00:86:
28:73:57:dd:04:90:c8:f2:ee:bc:46:5b:92:ee:87:04:cd:23:
a0:45:3d:d5:2c:c9:be:a7:b7:f9:35:b1:31:2d:37:76:3f:a6:
c6:9b:b6:03:47:72:b8:9b:b2:27:2e:48:b7:49:66:f3:e5:b7:
f0:04:a1:25:d9:d6:67:b4:c1:8b:0e:ff:8e:0b:9d:46:33:82:
4d:41:9d:74:fd:e9:73:e2:d7:b9:00:cf:ff:e8:59:83:5c:cc:
b2:ec:5e:b2:8a:ad:50:77:bc:d6:d8:dd:2a:fe:3f:e5:25:f4:
34:13:f9:7e:ea:96:17:e6:18:91:c8:86:9a:1a:91:17:d9:e1:
9f:33:02:f2:be:07:64:4c:2e:52:8a:0a:bb:8e:96:86:21:19:
f7:c5:32:2f:24:79:9f:85:95:20:56:60:57:46:5d:f1:9c:55:
c9:7f:f3:6f:92:44:55:98:fb:b8:40:a6:8d:37:ad:24:54:95:
d5:47:bf:a7:39:bc:11:f8:ff:d1:c6:cc:05:bb:ed:7b:f2:74:
18:ca:31:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:52 2024 by rpki-client on console-ams.rpki-client.org