Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/c5jdA2x7oZO3wwJMs7vtHPMM5jY.roa
File: c5jdA2x7oZO3wwJMs7vtHPMM5jY.roa (raw, json)
Hash identifier: y7Tg0iZ8Q1HvJ08+3sJsVUTZsc2lwtAWsZCsnkaoTr4=
Subject key identifier: 73:98:DD:03:6C:7B:A1:93:B7:C3:02:4C:B3:BB:ED:1C:F3:0C:E6:36
Certificate issuer: /CN=f9e0257d067ef8b85f620c67220cf977ddde3994
Certificate serial: 01856BCA314A72DA9AB36689EDA55096DE82
Authority key identifier: F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/c5jdA2x7oZO3wwJMs7vtHPMM5jY.roa
Signing time: Sun 01 Jan 2023 05:24:51 +0000
ROA not before: Sun 01 Jan 2023 05:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41884
IP address blocks: 195.200.72.0/23 maxlen: 23
2001:67c:1c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ca:31:4a:72:da:9a:b3:66:89:ed:a5:50:96:de:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e0257d067ef8b85f620c67220cf977ddde3994
Validity
Not Before: Jan 1 05:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7398dd036c7ba193b7c3024cb3bbed1cf30ce636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e6:4a:89:cb:ef:6b:dc:24:19:89:ab:c8:21:
e2:d8:dc:77:a5:86:e9:d6:21:da:23:8e:6b:52:e2:
8e:2c:f1:9e:f4:a5:e9:a9:10:29:fb:40:71:40:6e:
0b:ed:09:e4:18:ce:0d:e8:a2:7a:fc:c1:ca:2f:b8:
a1:ce:bc:4f:4b:ed:8d:0d:33:e3:6a:84:64:89:65:
8a:b4:5e:5d:f4:c6:ee:3a:d0:2b:27:cb:ff:90:88:
fb:10:f1:a6:17:18:0b:79:5c:79:47:c4:af:04:66:
db:f7:35:17:27:1b:2e:2f:0d:bf:c7:02:87:46:85:
d0:06:a1:94:2f:1a:eb:0a:c5:eb:73:d9:4c:0c:c3:
f6:b4:10:4a:33:78:87:ed:a5:1b:57:f2:a4:69:36:
06:d3:bc:b2:2f:d8:15:f6:89:e6:42:6b:81:6b:4c:
ec:43:4c:4b:53:88:8a:57:d8:92:71:9a:e1:82:c6:
16:a4:15:ff:17:9c:9c:3c:35:d6:46:11:2a:62:b9:
7c:93:92:c2:1e:a7:4e:1d:7e:11:9f:46:10:e8:1d:
6d:7b:42:ec:fb:14:41:b0:bc:14:aa:df:ae:d2:b1:
72:f4:74:eb:0e:eb:6c:94:0c:66:92:21:b6:53:df:
4d:13:b3:22:92:78:73:5f:55:c2:ee:29:74:dc:56:
0c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:98:DD:03:6C:7B:A1:93:B7:C3:02:4C:B3:BB:ED:1C:F3:0C:E6:36
X509v3 Authority Key Identifier:
keyid:F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/c5jdA2x7oZO3wwJMs7vtHPMM5jY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.72.0/23
IPv6:
2001:67c:1c::/48
Signature Algorithm: sha256WithRSAEncryption
81:5d:e1:6b:8e:6e:38:f7:9b:ea:75:4a:70:07:1c:60:82:f2:
b7:4d:6a:4c:90:4e:10:3d:91:38:c3:6f:df:ee:0e:9a:1e:24:
3c:3d:f8:da:7b:0d:75:42:ae:64:24:f8:1f:2c:80:09:cf:cc:
79:2c:18:f0:00:b0:13:32:ec:ad:b9:33:bf:98:3b:98:25:dd:
ca:7a:ef:d4:0f:72:fc:5c:b9:6e:e8:e5:11:10:35:30:92:d2:
ba:2e:fc:3b:03:85:a6:79:4b:d3:e6:2e:71:52:c6:4e:52:69:
66:09:0a:19:02:01:b7:12:bf:4b:8d:a8:90:78:90:54:bd:cc:
67:6a:19:09:19:54:e2:de:33:0b:b3:0b:78:40:59:d9:2e:16:
35:71:7a:51:01:21:8e:84:b0:8f:08:39:d5:47:08:17:8d:f2:
e8:20:09:fc:8a:82:75:dc:9b:ba:c4:7b:7d:df:f1:44:fd:23:
3b:e7:1a:6a:13:28:ea:39:0b:a3:41:3d:4e:e2:b0:ea:49:77:
49:46:42:08:99:99:64:e2:e9:57:9a:ef:d5:f9:30:58:58:47:
8a:60:5e:08:d6:7d:de:cb:cb:22:10:27:1c:94:34:9c:61:9a:
43:d3:68:c7:a2:53:e2:12:5a:f3:f0:e0:a6:2a:86:12:18:a7:
31:40:35:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:27 2024 by rpki-client on console-fra.rpki-client.org