Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/DZosAoW-OzNKyAo0C5L8az-FPPs.roa
File: DZosAoW-OzNKyAo0C5L8az-FPPs.roa (raw, json)
Hash identifier: ZM9d75Eyhq7JamXdU56fIWNRkLr6sdcakbdkdoLS5WI=
Subject key identifier: 0D:9A:2C:02:85:BE:3B:33:4A:C8:0A:34:0B:92:FC:6B:3F:85:3C:FB
Certificate issuer: /CN=0648a991805f93d24bbe1edb3e961f5a1d25b248
Certificate serial: 01856D53EE409F1E4CC3F2B18AA9ACDE65E2
Authority key identifier: 06:48:A9:91:80:5F:93:D2:4B:BE:1E:DB:3E:96:1F:5A:1D:25:B2:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkipkYBfk9JLvh7bPpYfWh0lskg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/DZosAoW-OzNKyAo0C5L8az-FPPs.roa
Signing time: Sun 01 Jan 2023 12:34:55 +0000
ROA not before: Sun 01 Jan 2023 12:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210644
IP address blocks: 195.20.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Sep 2023 20:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:ee:40:9f:1e:4c:c3:f2:b1:8a:a9:ac:de:65:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0648a991805f93d24bbe1edb3e961f5a1d25b248
Validity
Not Before: Jan 1 12:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d9a2c0285be3b334ac80a340b92fc6b3f853cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:da:03:bb:11:bd:bb:de:da:70:e0:59:4d:e5:
d1:58:5f:99:02:4f:5c:33:fd:bd:90:f1:14:f9:e0:
e6:2b:9b:fe:93:b7:d4:c2:38:24:d2:84:17:2e:a6:
40:d4:c6:05:38:5c:f7:55:43:8d:91:0b:3b:23:3d:
5b:14:9e:00:1d:aa:46:12:7e:65:46:74:d0:16:0f:
8f:26:4d:5a:82:92:ad:3b:2d:be:8a:0c:c4:e1:59:
37:5f:bb:0b:57:dc:bd:93:14:53:17:49:03:64:85:
4a:08:c5:49:b0:da:33:de:fc:11:c1:1d:17:84:9c:
e9:ab:d7:74:8f:36:67:92:cc:d8:08:9d:ad:c5:43:
6a:a8:3a:e1:10:1b:9d:77:3d:ec:14:38:ff:ad:12:
1f:59:40:ef:e5:87:9d:fa:12:90:06:b1:d5:c1:f7:
85:c1:3b:f9:d9:ea:07:38:a3:f0:f7:e7:3a:da:b5:
73:d5:e3:44:e7:39:07:28:bf:ae:81:37:bc:26:1a:
1e:5c:b2:32:49:8a:79:8a:f1:88:15:e0:0c:d8:e6:
c8:d1:a0:0a:f8:f0:2f:1f:7a:70:63:29:f9:6d:46:
09:6a:6c:05:bd:9d:63:e5:02:28:ab:51:25:9c:d7:
d4:7b:2b:1b:3a:2f:80:02:5e:c7:3f:d9:89:7b:2b:
04:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9A:2C:02:85:BE:3B:33:4A:C8:0A:34:0B:92:FC:6B:3F:85:3C:FB
X509v3 Authority Key Identifier:
keyid:06:48:A9:91:80:5F:93:D2:4B:BE:1E:DB:3E:96:1F:5A:1D:25:B2:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkipkYBfk9JLvh7bPpYfWh0lskg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/DZosAoW-OzNKyAo0C5L8az-FPPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/BkipkYBfk9JLvh7bPpYfWh0lskg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.16.0/24
Signature Algorithm: sha256WithRSAEncryption
06:d4:20:af:da:f2:bc:c4:a1:cd:28:fd:ed:2c:a9:2a:b7:85:
55:7b:9f:4d:dd:04:91:e0:72:a8:55:9d:7e:38:3c:33:32:17:
d5:b6:bd:94:6c:8e:d2:76:8b:e8:9b:07:f3:c7:43:32:09:1b:
c9:9a:88:41:ba:d3:a7:e0:89:a6:94:47:55:72:29:c3:bd:40:
fd:fc:fb:6f:e8:e1:7b:dc:37:78:de:6c:17:4b:da:44:3c:b2:
0c:1d:c2:d8:c4:de:20:ff:8e:4f:fe:48:c6:47:4a:ce:95:a3:
fc:c2:27:93:21:0e:62:21:19:8f:0f:8e:a3:46:b0:16:40:c2:
15:ed:96:1a:42:0f:cf:8b:30:86:f2:8d:36:8d:3f:cf:2c:c5:
5b:16:82:ab:a4:19:66:45:5e:30:10:7f:fa:3e:db:36:92:23:
39:27:86:35:7b:31:fc:63:e5:26:3e:59:02:ec:65:1f:16:ca:
1e:ea:62:75:62:a2:bd:a9:1b:4d:75:6e:28:8f:9a:7f:43:f9:
13:51:16:8a:68:2d:66:48:b0:7d:0d:0d:e2:d6:33:71:53:e2:
d8:85:e9:9d:55:9c:c3:a3:71:b1:67:a7:69:76:99:f6:8e:33:
4d:16:9f:4b:0a:67:24:48:ee:fb:fd:bc:7a:50:97:bc:c0:48:
b5:b4:92:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:53 2024 by rpki-client on console-ams.rpki-client.org