Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/0VdaYVphxnS1vl6ZGjeog2Huimo.roa
File: 0VdaYVphxnS1vl6ZGjeog2Huimo.roa (raw, json)
Hash identifier: p5ZMtRdqE2eu9HW2U4HYHt1IOtuTqDwH+OeEQiP91WE=
Subject key identifier: D1:57:5A:61:5A:61:C6:74:B5:BE:5E:99:1A:37:A8:83:61:EE:8A:6A
Certificate issuer: /CN=449b18e3296d795d3a9c959be25c70aaab365200
Certificate serial: 01856F3020594CB8071440FC70C7AA3F9BA0
Authority key identifier: 44:9B:18:E3:29:6D:79:5D:3A:9C:95:9B:E2:5C:70:AA:AB:36:52:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/0VdaYVphxnS1vl6ZGjeog2Huimo.roa
Signing time: Sun 01 Jan 2023 21:15:03 +0000
ROA not before: Sun 01 Jan 2023 21:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56672
IP address blocks: 195.189.198.0/24 maxlen: 24
195.189.199.0/24 maxlen: 24
194.107.140.0/23 maxlen: 23
2a00:4680::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:20:59:4c:b8:07:14:40:fc:70:c7:aa:3f:9b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449b18e3296d795d3a9c959be25c70aaab365200
Validity
Not Before: Jan 1 21:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1575a615a61c674b5be5e991a37a88361ee8a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cf:ef:94:3e:ea:6d:47:9a:41:46:d1:17:fc:
f7:e8:73:7c:4a:8e:e0:ed:2c:8c:95:88:98:4e:f8:
b5:e5:8c:ea:c6:e0:0b:b6:4b:26:db:65:74:97:b6:
f3:a8:17:f9:d6:8b:85:d0:22:98:3b:1f:8c:b8:0a:
56:37:07:d6:2f:b2:90:ea:ab:11:97:09:18:50:68:
22:a8:2d:4a:0e:56:96:a8:e3:0e:d3:82:0c:58:23:
7d:0c:ef:0b:06:5e:f0:bb:ea:de:a9:61:98:ed:8e:
5e:98:16:e0:b2:58:de:53:2c:df:6f:7a:af:4f:c7:
df:db:08:4e:ca:08:55:1c:8d:b4:84:3a:88:86:51:
52:33:27:59:38:10:94:47:80:d0:05:f6:e7:70:6f:
e8:7e:df:01:be:ad:a4:99:46:43:8b:f9:a4:c0:ca:
e1:a6:de:02:3f:e9:e4:13:0e:a7:6b:89:0d:ed:b6:
ec:19:af:4d:42:33:02:e0:5a:4b:90:5a:36:6c:6c:
0a:43:7f:f7:74:8b:54:fa:09:b8:42:e5:28:49:7a:
8b:d8:1f:81:52:c7:a4:c2:5e:97:e2:1a:41:ba:72:
f1:2e:f6:36:44:86:12:9a:8d:45:0d:40:d8:15:37:
ad:0b:9e:ec:82:50:81:04:fa:f5:fb:d1:ec:1b:f9:
86:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:57:5A:61:5A:61:C6:74:B5:BE:5E:99:1A:37:A8:83:61:EE:8A:6A
X509v3 Authority Key Identifier:
keyid:44:9B:18:E3:29:6D:79:5D:3A:9C:95:9B:E2:5C:70:AA:AB:36:52:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/0VdaYVphxnS1vl6ZGjeog2Huimo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.140.0/23
195.189.198.0/23
IPv6:
2a00:4680::/32
Signature Algorithm: sha256WithRSAEncryption
4c:6d:d8:f2:fb:d5:f7:b4:9a:e0:76:4f:25:fc:fb:f9:ba:51:
3c:8a:f3:24:0b:cc:79:ce:02:6e:5f:e4:79:56:64:bd:d9:c4:
96:d8:10:65:6f:3a:f2:a2:5f:e1:4e:c9:02:6b:d3:4a:b4:66:
c5:ed:34:3a:16:de:58:c4:56:21:dc:ec:b9:ca:a2:49:23:e7:
0f:e3:ba:13:bb:b6:cf:a8:9a:99:cd:b9:99:85:91:61:e0:58:
9c:2c:74:35:e5:ec:15:54:1c:8d:64:ea:fd:44:22:d7:c6:46:
76:90:d3:0f:9c:56:af:5d:4c:b9:88:db:80:3c:16:e0:62:b8:
f7:de:89:b4:46:62:54:64:68:28:e0:4b:7d:e9:8a:6b:26:d5:
9e:ca:a9:8c:6a:02:9c:ae:80:83:3d:20:cd:16:43:d0:45:16:
a4:a4:d6:1b:88:a0:3e:59:2b:e5:4b:df:15:91:cc:79:17:54:
01:47:f1:9a:22:ff:49:ef:02:48:f0:c2:87:03:ff:e4:3d:d8:
f9:34:6a:98:2c:1d:4a:be:b1:cd:21:1f:dd:47:88:df:c8:8e:
96:f2:ab:cf:39:2c:19:56:cb:71:e1:3d:d4:e9:32:c7:46:bf:
b0:8c:39:97:84:2d:7e:15:74:ee:26:ef:00:70:e8:0a:58:6f:
e5:3c:47:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:56 2024 by rpki-client on console-fra.rpki-client.org