Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/448453-3285-4fb7-ac8a-69b52244d90a/1/7u5J7c5g7MkifyTK9TzeArzRfyY.roa
File: 7u5J7c5g7MkifyTK9TzeArzRfyY.roa (raw, json)
Hash identifier: 2f6r7+eF8AdZJZn8pTM2WYJ0CDLDz8a2xhKFYAoD//o=
Subject key identifier: EE:EE:49:ED:CE:60:EC:C9:22:7F:24:CA:F5:3C:DE:02:BC:D1:7F:26
Certificate issuer: /CN=f92c47f54075a373d8e0c11697aec90244376de3
Certificate serial: 018572837EE5B37E81CADF2D4A0CA47EA1F5
Authority key identifier: F9:2C:47:F5:40:75:A3:73:D8:E0:C1:16:97:AE:C9:02:44:37:6D:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-SxH9UB1o3PY4MEWl67JAkQ3beM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/448453-3285-4fb7-ac8a-69b52244d90a/1/7u5J7c5g7MkifyTK9TzeArzRfyY.roa
Signing time: Mon 02 Jan 2023 12:44:58 +0000
ROA not before: Mon 02 Jan 2023 12:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42295
IP address blocks: 195.191.34.0/23 maxlen: 23
2001:67c:530::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:7e:e5:b3:7e:81:ca:df:2d:4a:0c:a4:7e:a1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f92c47f54075a373d8e0c11697aec90244376de3
Validity
Not Before: Jan 2 12:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eeee49edce60ecc9227f24caf53cde02bcd17f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f4:cf:5b:1c:05:aa:ed:f9:6a:cf:e2:b5:5a:
e9:cb:34:e4:0c:36:f4:9e:a4:b8:40:27:69:b7:54:
cb:d1:39:af:40:9e:d1:de:47:37:3a:85:c6:9d:fe:
6a:df:40:c7:27:d9:e9:73:87:3f:23:66:4f:51:e1:
ce:dc:eb:e0:94:1a:bf:a3:fd:56:ce:b7:d8:c0:65:
e2:a5:4d:d5:19:33:e9:29:4f:02:09:2a:2e:ad:7c:
6a:48:52:c3:f4:7d:78:f1:ff:2e:aa:aa:32:3f:3e:
9a:3a:42:a3:3e:86:76:ff:66:73:5c:55:09:12:68:
a6:86:f4:db:7a:02:35:a0:c9:6d:7b:c1:3c:be:ef:
3c:d8:d0:7f:86:41:4c:ca:1d:fa:f2:43:c8:72:d8:
89:ce:65:5d:bb:78:cd:b8:42:d3:79:7a:19:93:6d:
a4:83:d6:6e:82:07:ca:27:28:c3:b2:0d:f7:83:4d:
95:f0:03:07:51:15:d9:2c:4a:77:02:63:1d:cb:a4:
99:14:5d:7f:82:98:77:f6:58:55:ba:37:1a:b1:9d:
7c:74:3a:70:aa:76:51:f2:e7:fd:30:37:85:16:cb:
23:1e:35:fd:ae:a2:79:11:ac:64:06:84:a5:9d:4c:
a3:02:dd:78:04:bb:93:cb:3a:eb:36:c9:64:57:4d:
ff:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EE:49:ED:CE:60:EC:C9:22:7F:24:CA:F5:3C:DE:02:BC:D1:7F:26
X509v3 Authority Key Identifier:
keyid:F9:2C:47:F5:40:75:A3:73:D8:E0:C1:16:97:AE:C9:02:44:37:6D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-SxH9UB1o3PY4MEWl67JAkQ3beM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/448453-3285-4fb7-ac8a-69b52244d90a/1/7u5J7c5g7MkifyTK9TzeArzRfyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/448453-3285-4fb7-ac8a-69b52244d90a/1/1-SxH9UB1o3PY4MEWl67JAkQ3beM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.34.0/23
IPv6:
2001:67c:530::/48
Signature Algorithm: sha256WithRSAEncryption
8e:21:a0:ac:50:fb:e9:66:7f:13:61:84:2e:71:48:b7:a8:43:
86:0d:82:53:05:5a:6f:9e:5c:b6:f3:87:8b:b9:06:e4:a6:9e:
52:09:d4:82:ad:f1:43:05:2c:aa:5a:3f:4c:b9:0d:75:9f:bd:
21:b0:53:6d:05:d1:aa:84:b3:d0:d4:96:85:f1:b4:f2:37:bf:
24:d5:6c:87:a6:5f:d0:c1:11:02:95:4d:0e:4f:f9:65:43:5d:
74:af:4b:98:c7:a9:cb:11:ee:d6:8b:cc:1f:9a:be:92:0d:86:
89:8c:52:1e:db:12:5f:01:eb:f8:89:9a:62:97:b5:c4:22:6e:
68:30:a1:17:4d:26:e1:61:11:ba:b7:fd:44:60:4d:b7:10:1f:
80:9f:7a:61:d8:3a:fb:63:d1:ad:94:da:74:65:db:54:70:79:
3f:1c:26:b6:39:32:8e:a2:64:ad:c7:9b:17:c6:95:b5:5d:94:
9f:77:cb:cd:e0:f4:8b:ef:a7:bd:d2:2a:eb:2d:e8:4f:39:65:
34:6b:bd:43:9f:89:55:f6:64:60:ef:a4:ed:92:af:77:e0:e3:
9f:75:f5:60:e3:53:19:5e:d4:2d:79:9e:5f:aa:93:99:68:d1:
23:49:9d:7e:27:e8:1d:39:e4:39:81:47:4a:0f:1f:37:20:0b:
5a:78:8c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:05 2024 by rpki-client on console-ams.rpki-client.org