Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/sB_jzk5VujTM89r8E8aXDhrG65o.roa
File: sB_jzk5VujTM89r8E8aXDhrG65o.roa (raw, json)
Hash identifier: vCtYjnRNhFFaO2U/+31+Etzhp7SaSRI/6Ph9Q6cjqTQ=
Subject key identifier: B0:1F:E3:CE:4E:55:BA:34:CC:F3:DA:FC:13:C6:97:0E:1A:C6:EB:9A
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0190A0895A4DE866B8EEBDEA46CB6AC10AA6
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/sB_jzk5VujTM89r8E8aXDhrG65o.roa
Signing time: Thu 11 Jul 2024 06:44:34 +0000
ROA not before: Thu 11 Jul 2024 06:44:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59432
IP address blocks: 195.114.206.0/24 maxlen: 24
195.114.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Nov 2024 08:17:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a0:89:5a:4d:e8:66:b8:ee:bd:ea:46:cb:6a:c1:0a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jul 11 06:44:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b01fe3ce4e55ba34ccf3dafc13c6970e1ac6eb9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:68:10:bc:28:bb:64:b1:c9:fc:95:1a:c1:8c:
cb:43:4d:6b:52:2d:f9:66:d1:6c:54:c6:31:09:3a:
9c:b3:e2:38:bd:b9:b4:7c:d2:17:ad:a5:63:d8:05:
56:93:7e:60:f5:39:4b:01:1a:66:59:f8:11:dd:7e:
bf:17:3a:4e:be:10:d3:98:fb:6e:60:7e:ab:ce:39:
b8:7b:06:01:49:ee:51:ca:b5:56:6e:6b:93:a8:63:
78:e7:4a:56:31:d2:44:6f:b8:e5:ec:67:6f:aa:b8:
5a:04:3d:f2:1d:fc:7a:05:be:40:52:52:63:8d:04:
b6:10:c7:29:16:f4:f0:00:04:26:38:19:c0:41:19:
c2:69:90:0c:90:84:36:d6:bc:45:4e:60:29:1a:2c:
cd:20:a9:e9:38:b9:c2:43:7f:b2:7d:15:7f:da:59:
5d:69:b7:32:0b:a3:9c:a3:4a:1d:a8:f1:59:1b:64:
b7:f8:ee:a0:90:2a:2f:76:b5:38:28:39:47:6a:65:
3f:9a:cf:0f:38:c0:83:4b:85:e1:9f:68:85:3a:fc:
75:b5:00:b1:59:69:78:d3:b3:d9:b3:3a:bd:b9:e8:
5d:c7:db:ce:b1:1a:f5:e7:14:71:10:3c:3f:60:dd:
9f:f9:95:2a:22:7c:37:d1:e4:4c:90:f9:7a:0f:46:
1d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1F:E3:CE:4E:55:BA:34:CC:F3:DA:FC:13:C6:97:0E:1A:C6:EB:9A
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/sB_jzk5VujTM89r8E8aXDhrG65o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.206.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:58:0a:2a:2c:1b:17:d9:39:04:25:f6:c5:d5:6b:03:2f:8f:
aa:68:93:c1:2b:8b:9c:32:25:26:31:41:60:90:e5:7d:e4:80:
66:67:b2:88:15:6b:fe:3e:21:d2:f0:de:f3:4f:6d:3b:8d:39:
c8:e7:c2:d1:5b:5f:65:13:12:8e:dd:9e:c7:9e:c3:c9:4d:4e:
28:60:46:de:09:cc:77:66:26:c0:99:56:4c:c8:6d:6a:63:1c:
b5:77:88:fb:a5:d6:06:fe:99:e8:42:e2:03:a9:2e:9b:b1:b1:
cd:78:e2:dd:a1:d8:84:03:40:f1:62:3e:e4:77:d4:ca:3b:31:
63:8d:2b:2f:c9:b2:2f:6b:c0:c9:19:62:06:09:f6:c5:9b:04:
40:18:cd:f4:21:30:05:5b:71:ed:f1:22:4e:8d:59:66:fa:0f:
8f:8f:4b:1a:fc:8b:32:cc:80:32:5a:31:2e:d8:51:9d:3e:fb:
24:ec:28:1a:b3:72:b6:7e:43:cd:a0:a9:d0:c1:3b:41:48:35:
59:3d:12:52:0c:aa:3f:18:c0:17:9b:d2:0e:19:61:69:8f:19:
6b:4b:7d:38:01:7b:35:fd:10:c7:75:aa:00:07:c6:2e:16:af:
ee:44:48:32:f9:87:ec:c5:61:80:dc:7f:d6:33:56:09:3a:af:
3c:b2:e4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 10:09:57 2024 by rpki-client on console-ams.rpki-client.org