Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/dv7Cv6ZmRak94DhlWdvupLuDp2k.roa
File: dv7Cv6ZmRak94DhlWdvupLuDp2k.roa (raw, json)
Hash identifier: 4zImjZYD96CkvHtdT/b7Bkyke7p7OVMu8jrRVqSiD9I=
Subject key identifier: 76:FE:C2:BF:A6:66:45:A9:3D:E0:38:65:59:DB:EE:A4:BB:83:A7:69
Certificate issuer: /CN=bfca53f0a587f36d89a9cab82bf5a5036c6140a2
Certificate serial: 018571D7C94E3FAE1E2F5BC68BB1C35EC908
Authority key identifier: BF:CA:53:F0:A5:87:F3:6D:89:A9:CA:B8:2B:F5:A5:03:6C:61:40:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/dv7Cv6ZmRak94DhlWdvupLuDp2k.roa
Signing time: Mon 02 Jan 2023 09:37:25 +0000
ROA not before: Mon 02 Jan 2023 09:37:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197751
IP address blocks: 195.149.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:c9:4e:3f:ae:1e:2f:5b:c6:8b:b1:c3:5e:c9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfca53f0a587f36d89a9cab82bf5a5036c6140a2
Validity
Not Before: Jan 2 09:37:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76fec2bfa66645a93de0386559dbeea4bb83a769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:89:16:32:2d:24:f4:4f:f7:d8:0e:81:39:3d:
aa:e2:9f:b2:fe:1c:90:cf:84:01:ed:f0:bd:58:5c:
b5:3b:6f:8b:b0:31:39:e7:f2:ce:2d:46:c6:84:88:
1a:d4:ec:76:7e:93:2f:db:6b:d2:12:0f:31:3b:d8:
49:6e:ef:4c:1d:e4:f3:18:8d:42:52:6c:45:49:25:
4b:31:27:4e:ce:c1:c9:e3:42:ec:57:16:91:e8:9b:
8e:b0:5c:7f:56:18:46:6d:e3:a9:2e:66:c7:26:73:
dc:61:d8:46:b0:21:3b:5a:ec:e8:ba:a2:39:68:2d:
a3:9c:ec:a4:a5:c9:ef:7f:70:fa:8c:f8:f4:f0:8b:
37:ad:d1:53:8a:ac:bc:bd:45:55:88:46:4c:37:bd:
74:45:c7:62:d5:f2:ef:4d:bc:c2:dd:79:77:5b:e6:
bc:3c:0f:bb:cc:1d:df:42:07:17:a5:36:c7:21:8c:
51:29:4c:e5:48:63:30:5e:d6:67:48:77:d3:d9:c9:
f9:26:e3:d9:4f:25:58:75:2a:20:dd:9c:c0:f9:9b:
22:54:ac:81:a5:42:b9:31:3a:e1:0b:b5:db:8d:b7:
f7:c1:8c:8c:ba:73:f4:86:d1:7f:b8:7f:54:f2:03:
05:17:1d:a9:e7:65:93:06:5c:15:d9:2e:b2:9f:5f:
ad:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FE:C2:BF:A6:66:45:A9:3D:E0:38:65:59:DB:EE:A4:BB:83:A7:69
X509v3 Authority Key Identifier:
keyid:BF:CA:53:F0:A5:87:F3:6D:89:A9:CA:B8:2B:F5:A5:03:6C:61:40:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/dv7Cv6ZmRak94DhlWdvupLuDp2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.117.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:80:8d:32:e1:ce:41:35:6d:4d:be:da:6e:5b:8a:06:e6:89:
74:ae:cc:f8:01:9d:9d:00:5c:71:bb:3c:4a:03:80:1e:d5:b3:
31:d6:8e:34:7c:b8:ec:6a:9b:13:7d:7f:37:fa:64:2a:60:c8:
27:71:19:53:09:77:78:74:37:79:33:30:83:12:bc:e7:e0:a4:
45:98:f5:a3:1d:28:42:a2:a9:a3:5b:98:dd:43:09:be:2c:f2:
09:e2:6b:ac:28:6e:b4:23:92:db:d4:d6:5f:de:28:e3:07:aa:
fb:df:7b:96:94:34:fd:1a:58:da:bd:fd:e6:00:df:ae:4c:59:
18:e6:44:21:74:e6:a1:93:21:f5:6f:a9:d7:4a:76:69:8f:b5:
21:80:80:92:d0:3f:8d:85:f5:71:a4:fb:b0:e2:ca:03:5c:b0:
58:e5:5e:c0:b8:07:5d:dc:05:09:6e:af:02:5c:2e:49:e3:92:
ea:83:0f:ae:58:f1:af:ea:f4:9c:20:98:b2:d0:c1:f5:6c:85:
66:5a:ee:de:a9:f2:3f:65:2b:25:24:c7:02:93:15:3a:1a:b1:
06:d1:0b:8e:b6:ac:dc:cb:75:7b:36:41:42:b6:3b:17:32:f1:
69:59:c1:e0:4e:83:73:d7:f7:9f:99:17:09:b7:c3:82:d5:62:
04:b7:ad:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:13 2024 by rpki-client on console-ams.rpki-client.org