Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/FZ1QKBCTO1wFdwy4Z7O_HmiqQTk.roa
File: FZ1QKBCTO1wFdwy4Z7O_HmiqQTk.roa (raw, json)
Hash identifier: naji9UKghOPMTNqjEq1K/P1HcNTePRwMPAvPZFb/2KM=
Subject key identifier: 15:9D:50:28:10:93:3B:5C:05:77:0C:B8:67:B3:BF:1E:68:AA:41:39
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 018DFB6E065CCA54C73F5D7E56F0D150504D
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/FZ1QKBCTO1wFdwy4Z7O_HmiqQTk.roa
Signing time: Fri 01 Mar 2024 19:11:48 +0000
ROA not before: Fri 01 Mar 2024 19:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212150
IP address blocks: 195.114.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Apr 2024 08:10:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fb:6e:06:5c:ca:54:c7:3f:5d:7e:56:f0:d1:50:50:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Mar 1 19:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=159d502810933b5c05770cb867b3bf1e68aa4139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:59:0e:18:52:53:09:5d:e0:00:be:f8:97:df:
e8:9c:8d:86:d2:07:a7:62:7c:9c:c8:ed:bf:2c:d5:
22:91:2b:89:74:44:75:9e:c7:b8:42:d9:87:33:54:
dd:1f:ff:85:18:57:d7:42:ba:64:e1:f9:be:be:85:
95:f0:96:82:47:c1:c4:ec:0f:8e:86:b4:b5:d3:04:
83:be:f7:9d:55:fb:5d:e6:a3:d5:61:ca:2f:0f:e4:
36:8d:ff:57:1a:37:4d:ee:46:61:39:9b:af:8b:ae:
7b:10:b6:10:88:99:3a:f5:07:c5:9f:24:37:14:8b:
1f:6c:5e:1a:d8:d1:cc:85:21:03:dd:51:b3:2a:01:
f1:73:55:05:6f:20:52:05:c6:a5:5d:e7:97:fd:ee:
67:84:a4:f5:dc:35:ce:b8:35:8a:30:02:96:3c:04:
b4:2a:b4:3e:31:29:34:27:7b:ea:94:2f:92:eb:d1:
c8:4b:7e:0a:6a:59:2a:dc:d0:3a:d7:6e:2b:93:41:
e2:2b:2b:0b:97:a3:4b:45:e3:0e:4d:22:3d:23:65:
d8:ba:20:6f:a8:29:b4:61:2b:1b:71:52:33:56:39:
23:2e:1c:aa:85:06:34:1c:35:08:5b:c8:da:d5:07:
10:14:68:bd:b1:46:c8:d2:c6:c5:dc:ef:c7:c8:aa:
c3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9D:50:28:10:93:3B:5C:05:77:0C:B8:67:B3:BF:1E:68:AA:41:39
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/FZ1QKBCTO1wFdwy4Z7O_HmiqQTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.192.0/24
Signature Algorithm: sha256WithRSAEncryption
26:ba:48:80:3b:06:87:17:af:0b:9a:29:3e:cd:fe:f5:b7:41:
e8:39:10:0d:7c:55:d4:43:15:0a:49:a0:1b:1f:ce:64:74:96:
36:f9:d9:35:b4:8c:6d:c4:30:b2:85:c1:16:a0:ba:6c:97:9d:
6e:49:2f:40:2d:83:9a:63:b4:3c:2d:b4:d8:aa:3b:da:0b:2e:
14:cc:21:84:fc:9e:13:4d:5b:7e:ae:65:93:29:01:02:b0:de:
8c:00:f7:4c:c7:f8:2d:95:1d:7e:48:07:15:59:bb:b6:06:2f:
f7:32:19:41:c0:56:9a:75:e2:d6:ed:76:c1:d5:24:07:52:68:
36:64:cf:57:ab:be:81:19:6b:46:28:0e:49:d6:ce:ee:85:7e:
f7:60:e6:8f:c9:7a:06:e5:52:8e:b0:1f:db:b3:18:c6:4c:4a:
cf:2d:eb:97:6d:49:5e:3e:4a:96:03:01:77:d9:c8:55:f2:56:
1e:84:b5:c6:10:5b:c0:83:c1:ae:66:a5:b7:32:a9:62:37:ab:
1d:5f:5e:0e:bf:41:60:8f:11:60:1a:fa:55:49:d3:7c:5c:b9:
6a:c5:9f:d8:d1:ec:87:b6:9e:14:1b:db:22:80:d8:fb:29:cc:
0d:38:83:96:3d:9b:8f:fa:93:65:89:33:55:5c:2a:79:08:ec:
b4:ae:58:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 1 09:07:49 2024 by rpki-client on console-ams.rpki-client.org