Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/1-fl_RpOhgPsJKN_JOAiWqO3h7MQ.roa
File: 1-fl_RpOhgPsJKN_JOAiWqO3h7MQ.roa (raw, json)
Hash identifier: E4eiv5SCm3JlKDN1MsqUo5DoXrDn7Js3wUPbMlJfYSg=
Subject key identifier: F9:F9:7F:46:93:A1:80:FB:09:28:DF:C9:38:08:96:A8:ED:E1:EC:C4
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 01856ECB9D77A2BE8B2322354B9E52D731FA
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/1-fl_RpOhgPsJKN_JOAiWqO3h7MQ.roa
Signing time: Sun 01 Jan 2023 19:25:15 +0000
ROA not before: Sun 01 Jan 2023 19:25:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197726
IP address blocks: 195.123.248.0/22 maxlen: 22
195.123.176.0/24 maxlen: 24
195.123.179.0/24 maxlen: 24
195.123.178.0/24 maxlen: 24
195.123.191.0/24 maxlen: 24
195.123.190.0/24 maxlen: 24
195.123.189.0/24 maxlen: 24
195.123.188.0/24 maxlen: 24
195.123.187.0/24 maxlen: 24
195.123.192.0/24 maxlen: 24
195.123.196.0/22 maxlen: 22
195.123.195.0/24 maxlen: 24
195.123.194.0/24 maxlen: 24
195.123.193.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:9d:77:a2:be:8b:23:22:35:4b:9e:52:d7:31:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Jan 1 19:25:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9f97f4693a180fb0928dfc9380896a8ede1ecc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:22:0e:41:93:bf:30:d0:ca:bd:68:aa:85:7f:
11:a1:59:19:95:f9:84:21:59:5b:f4:94:0a:7e:ca:
24:05:e7:9d:f1:09:93:b5:fe:6d:dd:d3:c1:bb:16:
f7:00:76:14:df:34:47:34:79:25:5a:e1:ec:87:fa:
7a:a6:b0:a4:38:35:2b:8c:48:f3:67:5f:3d:20:e9:
e1:81:d1:8d:8a:4e:27:c3:6a:a9:88:e5:4c:ff:1b:
67:08:25:aa:bd:87:91:26:f0:6b:bc:0a:4f:f6:b8:
64:23:a2:c6:cd:74:43:02:67:bb:a6:66:fc:53:2e:
64:12:57:00:6b:12:47:d8:20:18:43:00:a4:41:74:
9e:0b:9a:8b:8f:17:f6:26:21:e8:d6:fa:2a:87:8e:
f6:34:53:9b:34:6e:e4:56:dc:0b:f4:46:9f:e2:5f:
fe:1d:40:e2:e7:5a:44:a8:31:79:ca:ea:23:72:d4:
2e:31:20:07:e3:0a:bb:37:c3:09:80:69:c4:a8:6b:
0a:ae:51:d9:22:26:c3:b6:df:72:af:a5:67:f3:38:
a6:ea:0f:2f:77:8a:11:0a:bb:b8:92:a4:90:52:76:
78:4f:e0:80:56:c3:83:e6:f3:16:fd:f6:6a:9c:d5:
40:0e:df:4d:8e:3d:7f:18:88:11:34:7b:8f:2b:32:
f2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F9:7F:46:93:A1:80:FB:09:28:DF:C9:38:08:96:A8:ED:E1:EC:C4
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/1-fl_RpOhgPsJKN_JOAiWqO3h7MQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.123.176.0/24
195.123.178.0/23
195.123.187.0-195.123.199.255
195.123.248.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:9e:e7:92:4b:83:2b:0e:e2:4e:ee:c2:f4:e0:c7:36:f1:34:
ac:a8:93:fb:59:3c:bb:fe:73:0f:89:8c:11:3b:29:f4:df:2f:
72:08:bf:6a:a4:5a:6e:c0:d6:6f:87:e5:98:29:db:75:9a:77:
25:15:b6:1e:17:ea:55:7d:6b:45:cf:2f:1e:9a:cf:ba:26:be:
5b:c5:67:df:42:21:6f:93:47:79:09:d1:7b:1b:23:89:b8:3e:
bd:84:d0:ee:d9:4d:82:8a:98:ff:f7:b8:c4:dc:fb:f6:c2:ff:
c0:8f:d6:dd:00:a2:b6:ec:9d:29:45:a5:67:4d:30:12:f4:46:
14:41:fa:92:d9:d1:a9:6a:36:6c:db:f5:1d:6b:66:4d:85:ab:
b7:c9:b2:63:c6:53:91:30:da:f7:4c:20:3a:0b:ee:16:f2:72:
ac:09:e6:5e:1f:57:b0:3a:c7:5c:51:d8:d3:fa:e2:ac:83:cd:
55:fe:32:26:0b:c2:ea:51:29:d8:c3:16:94:5a:7b:4e:98:fc:
ce:af:5c:3a:ba:ee:1d:9d:62:d7:b0:b9:f8:bf:f3:b2:09:e0:
fd:6f:5f:66:eb:b1:4b:a2:e5:b1:94:ad:46:ca:e0:22:c9:5c:
8c:10:55:12:42:7b:8e:85:06:9b:73:86:7b:35:4d:5b:73:67:
08:7f:c9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:20 2024 by rpki-client on console-fra.rpki-client.org