Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/wVrbOfevC0Ru1Lf2hg0uN_UqgqM.roa
File: wVrbOfevC0Ru1Lf2hg0uN_UqgqM.roa (raw, json)
Hash identifier: NiA3govsILn5/yl25UZHuyag+1o87Z2Y9qFr1Qpi46w=
Subject key identifier: C1:5A:DB:39:F7:AF:0B:44:6E:D4:B7:F6:86:0D:2E:37:F5:2A:82:A3
Certificate issuer: /CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02
Certificate serial: 018571BA261A7CBF2C7F9A573FD24B71CDBF
Authority key identifier: AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/wVrbOfevC0Ru1Lf2hg0uN_UqgqM.roa
Signing time: Mon 02 Jan 2023 09:05:02 +0000
ROA not before: Mon 02 Jan 2023 09:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50772
IP address blocks: 195.78.100.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:ba:26:1a:7c:bf:2c:7f:9a:57:3f:d2:4b:71:cd:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02
Validity
Not Before: Jan 2 09:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c15adb39f7af0b446ed4b7f6860d2e37f52a82a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:de:10:4c:31:46:db:50:86:4b:08:61:3f:b9:
d6:e1:77:be:5c:f4:ef:ca:6e:a7:93:6b:8e:f4:0a:
be:eb:0d:51:74:13:03:76:0a:bb:9b:04:4c:c9:b9:
b0:82:3b:f0:1b:22:ef:db:94:28:4d:3c:6c:0c:b5:
a1:16:89:bb:0d:ac:7b:c8:45:20:7f:aa:74:98:2c:
72:1e:d9:51:12:df:f5:b3:97:16:97:0e:cc:ad:81:
2f:a4:85:17:f5:73:a4:71:2a:9b:75:d7:32:7a:7e:
a0:fa:9f:dc:8f:4d:22:2a:13:5b:24:8e:c2:e7:41:
3f:46:21:d1:a0:13:ec:c3:2e:40:5e:0d:51:37:f3:
c3:33:b0:6d:55:d0:8b:d8:5f:cf:2a:fb:96:9d:43:
3a:4d:29:57:97:4f:ab:a8:fb:4b:f2:3b:13:4d:7b:
2f:2b:57:d5:4f:af:f2:19:66:f7:ff:8f:10:7e:c6:
7d:7e:a2:10:29:0c:55:9a:c9:7c:c5:fe:f5:fc:13:
31:ec:8f:45:06:45:28:93:df:88:28:88:05:46:75:
3f:01:2e:6b:3e:f9:18:1d:5f:a1:b2:2c:6c:e7:b3:
9f:6f:5d:39:4c:f4:02:73:a4:c7:76:29:a7:a9:f6:
fa:72:5f:41:0f:f4:45:53:a3:91:8a:e2:52:dd:55:
58:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5A:DB:39:F7:AF:0B:44:6E:D4:B7:F6:86:0D:2E:37:F5:2A:82:A3
X509v3 Authority Key Identifier:
keyid:AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/wVrbOfevC0Ru1Lf2hg0uN_UqgqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.78.100.0/23
Signature Algorithm: sha256WithRSAEncryption
12:14:6c:6f:01:69:8f:51:41:c9:b9:6b:15:5e:25:80:1b:d5:
8f:c6:7d:b3:15:27:ec:b8:05:97:16:31:b4:82:1b:1e:38:2b:
7e:58:9c:45:b6:43:3a:86:86:92:9e:6f:a4:a8:b2:89:88:46:
4d:9c:28:84:91:b1:fd:66:11:77:05:4a:23:4f:41:68:4a:6e:
90:71:6a:bf:6b:50:a6:1d:8e:27:91:ee:1a:6f:23:98:cc:dd:
ad:40:4c:27:a0:97:5f:87:19:9d:3d:da:d0:8e:cd:27:72:4e:
8d:56:f5:85:ad:e1:1e:f2:2d:35:92:02:3a:f1:af:e6:89:40:
f3:b3:85:fd:b2:ed:65:65:06:26:d0:52:6d:37:27:96:c9:e3:
2f:18:a0:9c:04:76:34:8d:88:c5:7c:26:ec:0f:4c:de:17:92:
72:76:8f:74:16:7e:52:1c:82:4c:7b:d7:b6:37:db:69:38:ed:
c4:f0:47:05:05:89:73:ef:5b:c8:d3:cc:b1:0d:7d:17:99:5f:
a2:db:c8:7e:c8:2a:63:50:c7:95:66:86:33:b4:ff:d1:eb:a5:
2e:4a:c0:b2:61:b3:4a:d0:b9:a4:0e:63:f2:9d:fe:bd:1e:bb:
ba:8c:97:5f:ab:fc:2a:27:e5:f4:ff:76:97:05:16:54:21:73:
6e:b1:24:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:07 2024 by rpki-client on console-fra.rpki-client.org