Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/u9qsiQx9rvUcK984AX2qDA4ttPQ.roa
File: u9qsiQx9rvUcK984AX2qDA4ttPQ.roa (raw, json)
Hash identifier: etvSv+VGJH96i/0vPOddvZ9jh5wHzxSeoKDBnQ1OTws=
Subject key identifier: BB:DA:AC:89:0C:7D:AE:F5:1C:2B:DF:38:01:7D:AA:0C:0E:2D:B4:F4
Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Certificate serial: 018851BCC21D00CE63C1154E5898EA308942
Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/u9qsiQx9rvUcK984AX2qDA4ttPQ.roa
Signing time: Thu 25 May 2023 07:08:24 +0000
ROA not before: Thu 25 May 2023 07:08:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204797
IP address blocks: 195.22.116.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:51:bc:c2:1d:00:ce:63:c1:15:4e:58:98:ea:30:89:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Validity
Not Before: May 25 07:08:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbdaac890c7daef51c2bdf38017daa0c0e2db4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8a:73:26:98:ab:c5:e1:2e:35:f9:a7:3e:81:
0f:a5:89:60:10:46:90:65:ee:ef:c7:76:c7:a4:b5:
84:c0:7b:b1:51:54:b3:79:b3:3f:39:92:2b:45:14:
58:1d:a7:ea:9b:4f:c1:90:6c:b0:e8:0d:6e:de:fc:
25:1a:cc:e6:67:07:1c:04:28:32:2d:88:9c:96:11:
f0:8f:c3:1f:ae:d4:fb:b9:2b:4f:85:d2:f1:e3:68:
13:d6:74:e5:46:90:97:32:28:14:af:a3:3b:d5:27:
21:05:18:5c:73:f4:5d:fb:f3:a6:88:29:97:ec:9f:
a4:f5:2b:dd:ec:d1:fe:ea:98:b8:30:b3:a5:e8:44:
89:6e:96:75:60:83:fc:c3:79:b0:73:49:f8:6b:4d:
a2:89:5c:fa:82:f2:04:9d:42:ab:27:5b:cf:75:bb:
c9:de:08:10:b4:e6:39:07:8d:ef:e6:ce:8b:42:ae:
6e:3a:5a:51:58:15:1b:36:b3:40:da:74:26:a9:aa:
8d:cb:09:d1:14:eb:88:28:75:b5:d5:f1:5e:6a:3a:
e4:a9:49:f0:ae:29:5b:59:ef:49:1b:8d:53:af:65:
88:e0:73:3b:11:d2:65:21:2e:c5:4f:fa:63:ea:63:
26:91:d6:b4:bb:b9:2f:fc:6c:ff:b8:55:f2:ee:9e:
16:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DA:AC:89:0C:7D:AE:F5:1C:2B:DF:38:01:7D:AA:0C:0E:2D:B4:F4
X509v3 Authority Key Identifier:
keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/u9qsiQx9rvUcK984AX2qDA4ttPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.22.116.0/24
Signature Algorithm: sha256WithRSAEncryption
89:43:af:76:3a:c1:94:0d:54:e3:29:a3:47:4a:55:c5:00:4f:
7d:47:1d:33:e0:18:10:30:a7:49:55:c9:f6:46:3b:1f:a4:f3:
0b:88:03:3a:64:73:b1:af:f5:ed:c9:3a:5f:e2:df:ed:5e:c3:
fd:4b:17:24:82:da:af:44:ad:90:3e:e8:9c:80:6f:de:ca:aa:
8c:fb:e3:6b:0d:fc:12:5c:07:14:ce:32:50:21:da:97:fe:15:
79:30:73:3e:7c:82:24:6c:38:b5:bb:6b:c1:5c:b9:5a:94:1e:
fa:29:ba:c9:5e:9b:89:7d:52:d9:7b:31:74:13:d9:88:8f:ea:
34:8b:d5:08:cd:88:59:e2:16:bd:06:8b:dd:bb:a7:9a:03:a9:
1f:a3:d1:39:d9:86:40:63:d3:17:8a:10:66:67:e0:d3:72:66:
a3:44:c9:f5:4e:c4:c4:25:a7:10:99:e9:10:23:d3:93:b4:d1:
74:b1:9c:84:cb:d1:98:f4:06:a7:70:8e:11:6a:95:a0:01:02:
36:40:e7:ba:02:29:3d:d2:f5:f9:9a:7b:e1:78:f0:b4:c6:11:
bc:32:ad:7c:48:bf:83:03:4d:ae:ae:89:cc:d1:a7:4a:71:ed:
56:0f:a2:2e:a3:45:08:52:10:56:db:85:5a:3d:41:e8:b8:37:
a1:41:2c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:49 2024 by rpki-client on console-ams.rpki-client.org