Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/1qdQy3kSAedYciOl2xnJXieXRlQ.roa
File: 1qdQy3kSAedYciOl2xnJXieXRlQ.roa (raw, json)
Hash identifier: D3BiGkfXRtpdeqQh+hGvTkvLxTTw2xE77+1D8sD44MY=
Subject key identifier: D6:A7:50:CB:79:12:01:E7:58:72:23:A5:DB:19:C9:5E:27:97:46:54
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 018954FCA6E91B605DBBAE8E6A5DE6C92ED4
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/1qdQy3kSAedYciOl2xnJXieXRlQ.roa
Signing time: Fri 14 Jul 2023 15:19:51 +0000
ROA not before: Fri 14 Jul 2023 15:19:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59584
IP address blocks: 195.128.246.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 14 Jul 2023 15:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:54:fc:a6:e9:1b:60:5d:bb:ae:8e:6a:5d:e6:c9:2e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Jul 14 15:19:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6a750cb791201e7587223a5db19c95e27974654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:78:66:09:f3:a2:94:9b:ca:08:bb:e3:64:b2:
e2:69:fa:ee:25:6f:8f:fd:84:0e:96:64:73:f3:cf:
26:32:a4:59:f6:9f:32:85:2d:7e:50:f9:96:a3:2c:
0c:7c:9e:4f:31:d6:1a:75:d4:26:b8:84:37:74:04:
bd:4d:bc:66:7e:51:91:e3:03:d5:03:61:ab:d7:ce:
2f:6c:7b:22:a5:0b:2a:23:ec:b6:2a:d7:f9:a2:a7:
29:38:f5:c2:85:28:01:b8:83:6e:19:4b:f1:b3:c1:
22:c4:83:13:4b:62:19:79:37:cd:86:87:64:9d:69:
41:0c:e4:e5:71:d6:24:5a:aa:ec:c0:fe:d6:bf:a0:
eb:f6:e8:7d:fb:46:1f:45:73:45:1b:44:cf:80:0d:
0a:79:47:33:00:67:5f:61:8d:9e:61:a1:60:46:27:
be:2f:d3:df:6c:e4:18:5d:ec:11:6e:d8:0f:91:1f:
11:48:b2:0c:06:57:8e:45:d4:cd:88:da:27:29:a8:
53:75:b6:5f:49:fe:0e:cf:24:1a:a3:04:94:52:62:
61:db:ef:dd:28:27:23:93:9f:07:cf:03:c5:a6:44:
2e:e9:b9:9e:ae:e4:ae:85:2f:d7:c7:f2:c3:7f:52:
a1:05:d9:b3:83:13:73:df:d6:4c:84:ad:a9:70:a5:
50:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A7:50:CB:79:12:01:E7:58:72:23:A5:DB:19:C9:5E:27:97:46:54
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/1qdQy3kSAedYciOl2xnJXieXRlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.246.0/23
Signature Algorithm: sha256WithRSAEncryption
62:36:f9:6a:e7:f1:fc:3a:74:c2:72:89:16:d1:6d:98:87:43:
d0:6c:cf:31:a4:4b:66:56:c3:46:0c:af:33:c5:a6:93:fc:55:
54:c2:5a:01:e1:65:f7:ca:9c:f8:3f:6b:6a:25:dc:e6:f1:33:
b7:a8:8c:e5:5c:cd:3d:92:28:dc:b1:a2:60:c5:61:88:23:fd:
ab:cd:d8:1e:dd:e0:14:91:ad:36:eb:1d:10:8f:94:34:de:4b:
b3:c6:7b:0a:99:12:44:21:49:a6:ef:03:1d:a4:e9:c4:de:b1:
61:bf:41:68:72:4f:a5:97:d3:f1:01:1d:3f:5c:81:0f:9e:d1:
cd:20:5a:cb:0d:e4:03:f0:16:23:68:3e:4c:d8:42:ea:11:f1:
47:cc:b1:23:ea:c0:e5:8a:e5:96:0a:b6:12:30:e5:2e:32:e6:
22:ab:32:c9:f7:0e:fd:0e:62:8f:a7:ed:dc:86:db:1f:69:55:
a3:bc:5d:6f:7e:9b:46:dd:28:c3:26:ab:63:42:38:da:07:25:
08:f0:c4:6a:fe:58:6e:44:6b:e8:9e:da:46:19:86:4e:94:ad:
ce:25:95:2b:55:8b:88:7f:36:e8:eb:f5:0d:8c:43:e0:89:46:
8e:5e:20:a8:79:1b:04:e4:cb:0b:d4:c0:64:40:9e:f2:19:be:
65:86:b5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:52 2024 by rpki-client on console-ams.rpki-client.org