Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6aec6a-3683-405a-9e61-db2368271913/1/bPs4WAAgaeJ_eUzrWKWFcJm1PSQ.roa
File: bPs4WAAgaeJ_eUzrWKWFcJm1PSQ.roa (raw, json)
Hash identifier: hVotrDTzXo/d61z2oZfp9E90RwpigsWfAPPwm4xGGXM=
Subject key identifier: 6C:FB:38:58:00:20:69:E2:7F:79:4C:EB:58:A5:85:70:99:B5:3D:24
Certificate issuer: /CN=ca434d399d93a19d8a8108456c5575096c2ae588
Certificate serial: 018C7D0C69CB4E2214A25921217D7848EDF6
Authority key identifier: CA:43:4D:39:9D:93:A1:9D:8A:81:08:45:6C:55:75:09:6C:2A:E5:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykNNOZ2ToZ2KgQhFbFV1CWwq5Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/6aec6a-3683-405a-9e61-db2368271913/1/bPs4WAAgaeJ_eUzrWKWFcJm1PSQ.roa
Signing time: Mon 18 Dec 2023 13:10:14 +0000
ROA not before: Mon 18 Dec 2023 13:10:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196970
IP address blocks: 195.191.228.0/24 maxlen: 24
195.191.228.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 28 Dec 2023 11:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7d:0c:69:cb:4e:22:14:a2:59:21:21:7d:78:48:ed:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca434d399d93a19d8a8108456c5575096c2ae588
Validity
Not Before: Dec 18 13:10:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6cfb3858002069e27f794ceb58a5857099b53d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cd:5e:cb:ba:d2:1d:33:9f:97:6e:e5:30:53:
76:39:ca:29:36:f5:2f:94:8f:4f:3b:13:8a:7c:43:
46:36:cc:59:5c:88:e5:67:2b:c2:c7:f7:fa:8e:f1:
75:62:ef:6e:3a:dd:ea:76:99:5c:91:57:cf:28:89:
89:f6:93:fe:68:f5:28:64:d7:9c:d1:68:14:49:17:
c5:ed:b5:cc:79:ba:b2:4c:45:8b:90:f5:20:f5:ea:
1b:96:39:79:96:2f:4b:52:d2:05:60:25:23:14:90:
9f:b7:22:86:45:73:11:3c:5d:bc:a7:85:99:d8:24:
75:eb:16:ee:a7:3c:ab:b1:39:b4:d4:1a:ff:6b:95:
96:3d:36:28:46:95:20:d6:6b:6b:81:b7:52:d4:87:
84:0c:d2:98:45:9d:0b:28:2c:3a:d6:24:05:ba:69:
53:4a:95:f9:50:21:5c:9e:9c:22:ec:33:1f:d2:31:
74:f5:fd:dc:8f:54:57:d5:48:cc:a9:0f:9d:a1:20:
d8:6a:4a:89:a2:3e:62:01:d8:db:0c:57:0f:70:4f:
be:6f:22:77:68:d5:9f:b0:d5:3c:d6:b8:03:55:94:
46:62:fc:a7:a3:35:54:04:0c:bd:56:a3:4c:8c:64:
97:51:bc:bc:db:db:53:34:06:0b:49:ae:db:c3:d5:
8c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FB:38:58:00:20:69:E2:7F:79:4C:EB:58:A5:85:70:99:B5:3D:24
X509v3 Authority Key Identifier:
keyid:CA:43:4D:39:9D:93:A1:9D:8A:81:08:45:6C:55:75:09:6C:2A:E5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykNNOZ2ToZ2KgQhFbFV1CWwq5Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6aec6a-3683-405a-9e61-db2368271913/1/bPs4WAAgaeJ_eUzrWKWFcJm1PSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6aec6a-3683-405a-9e61-db2368271913/1/ykNNOZ2ToZ2KgQhFbFV1CWwq5Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.228.0/23
Signature Algorithm: sha256WithRSAEncryption
14:ec:fc:c5:e6:db:d3:c8:d0:07:5b:a4:fc:40:a7:f7:8f:2a:
54:e7:3f:17:ec:76:0e:72:e1:11:8a:2a:1a:e8:af:3f:73:cc:
49:07:b1:66:09:a0:38:c5:38:d7:15:2e:a9:d1:16:38:f4:25:
80:78:0b:2c:65:f3:6b:df:34:c8:94:0f:59:f7:32:b6:c1:25:
f2:71:ad:a5:ea:4e:85:fc:7d:61:e0:4d:ca:da:01:23:31:6d:
ef:ed:3e:ef:c2:36:19:8e:5a:cd:c7:e1:33:a4:e0:2f:3f:41:
2c:84:e4:92:d0:08:dc:ab:ca:01:71:48:e8:dc:c0:ca:7e:e0:
da:37:27:88:97:28:5a:be:85:db:6c:7d:cb:6f:33:44:5f:68:
4d:bf:5a:cb:79:3c:fa:9f:97:5e:cf:13:b3:27:05:b3:83:8d:
44:97:e0:e0:ac:37:fd:0b:c0:14:87:22:00:7c:51:4e:84:c1:
65:fa:2b:2e:46:89:f1:7d:9b:0f:17:f4:98:4e:44:43:dd:d3:
a0:9c:22:57:8b:80:2b:1a:d3:ae:a3:01:dd:9c:f3:f1:2d:96:
fe:e2:b3:07:bd:33:fb:2e:76:44:08:c7:56:f5:a8:86:8e:5d:
79:bf:85:32:41:82:39:b6:3b:d5:18:6e:db:ad:d9:28:9a:5e:
c1:82:85:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:45 2024 by rpki-client on console-fra.rpki-client.org