Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/x4B--abmXyO4jZW2yzBhg_6Sbnk.roa
File: x4B--abmXyO4jZW2yzBhg_6Sbnk.roa (raw, json)
Hash identifier: NJToH1YN6sTHx48TRbGbIhS1tyP7+wBDH4anzqLAmo8=
Subject key identifier: C7:80:7E:F9:A6:E6:5F:23:B8:8D:95:B6:CB:30:61:83:FE:92:6E:79
Certificate issuer: /CN=7077707f66978826a875eb8d2eb333bed8569667
Certificate serial: 018CC3B717288CBC5C0B156C8BF7C616B0DF
Authority key identifier: 70:77:70:7F:66:97:88:26:A8:75:EB:8D:2E:B3:33:BE:D8:56:96:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/x4B--abmXyO4jZW2yzBhg_6Sbnk.roa
Signing time: Mon 01 Jan 2024 06:30:05 +0000
ROA not before: Mon 01 Jan 2024 06:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 195.191.188.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 28 Mar 2024 15:51:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:17:28:8c:bc:5c:0b:15:6c:8b:f7:c6:16:b0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7077707f66978826a875eb8d2eb333bed8569667
Validity
Not Before: Jan 1 06:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7807ef9a6e65f23b88d95b6cb306183fe926e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f1:0b:04:bc:49:c2:32:a1:c3:fb:b7:b2:1e:
f7:1c:1f:40:04:10:f8:5f:1d:32:f3:78:d7:f6:b5:
0d:03:47:b1:35:4d:e8:ec:2d:0e:2b:e0:d4:45:54:
be:68:2e:fe:9a:ed:0e:ef:ea:1c:d0:61:b3:71:92:
08:16:32:e5:c0:fb:c5:79:cd:09:1a:0e:7f:9c:99:
f1:aa:6f:f9:01:a6:16:1b:a4:65:af:43:48:ea:93:
1f:da:6e:ac:8f:99:78:b0:0c:7e:cf:15:f1:9f:30:
b8:4f:b4:87:8a:d0:61:6b:67:79:09:02:1d:50:1d:
b2:c5:6c:0c:c7:4f:c5:5b:79:f3:99:78:4e:f3:52:
68:85:b0:87:86:32:8d:3d:2c:53:c7:13:03:22:1a:
bd:b6:c9:36:c5:8b:7f:df:39:ce:14:d2:fe:68:e7:
34:70:61:cf:51:c8:5b:7a:ec:8c:3d:f6:cd:53:56:
39:bc:bf:ff:80:b8:4d:7b:3a:fb:18:e6:fd:53:8f:
72:05:32:b1:0c:58:1f:32:a3:12:ea:00:67:7a:fd:
e2:74:06:04:a0:b4:9c:59:07:a7:96:22:6d:e7:92:
df:93:d3:c9:e0:4b:bb:a7:e5:ad:d1:f1:a7:f2:c4:
7d:dc:36:ec:bc:1e:50:42:0a:99:01:cf:89:44:3a:
76:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:80:7E:F9:A6:E6:5F:23:B8:8D:95:B6:CB:30:61:83:FE:92:6E:79
X509v3 Authority Key Identifier:
keyid:70:77:70:7F:66:97:88:26:A8:75:EB:8D:2E:B3:33:BE:D8:56:96:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/x4B--abmXyO4jZW2yzBhg_6Sbnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.188.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:98:06:28:b6:8f:ac:a0:3f:ac:14:8f:ab:52:f0:99:91:58:
eb:6c:36:e9:4d:94:49:e4:af:78:e3:3f:3c:5b:e9:a0:dc:d9:
0f:a2:91:8e:bb:41:38:75:29:4c:e9:e9:89:b0:32:eb:0a:d7:
d4:b3:2f:e4:24:16:da:ee:94:f2:4e:a4:07:80:28:56:8f:1a:
9a:84:4e:fc:30:21:e9:bb:3e:2b:74:bd:0a:f9:9e:ec:23:ff:
eb:ac:42:37:b4:9d:97:a9:fc:04:9e:23:4b:fa:ac:01:52:28:
b7:86:d5:58:08:82:8a:a5:71:b5:23:ac:d1:69:f3:15:7a:71:
02:4a:d4:42:93:86:9a:d6:ac:e6:fc:6d:99:b4:ce:9c:c4:06:
5a:7f:ff:60:da:6d:25:82:82:15:06:8d:93:de:9d:c0:de:e5:
5a:3a:8a:d6:0b:2a:7d:c7:3c:72:13:11:bc:71:47:05:19:d2:
76:94:a4:4a:ea:cc:d9:27:82:81:34:28:56:22:93:28:23:bf:
b0:7a:3a:b0:1c:f5:96:59:13:91:9f:ba:9e:89:9d:70:c4:26:
8d:63:a0:84:84:21:ef:36:fd:8b:65:34:93:8e:2c:54:69:8d:
35:93:6c:e9:5a:1e:fb:e6:60:83:91:04:3a:a1:0c:9d:20:d1:
11:33:89:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-fra.rpki-client.org