Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/U38MsvVdWtzO0laOaj9cTu4ySTY.roa
File: U38MsvVdWtzO0laOaj9cTu4ySTY.roa (raw, json)
Hash identifier: KutIpulWJwb/7Ji7gu89nfukRast13SJ7ShLFn6hEu8=
Subject key identifier: 53:7F:0C:B2:F5:5D:5A:DC:CE:D2:56:8E:6A:3F:5C:4E:EE:32:49:36
Certificate issuer: /CN=0648a991805f93d24bbe1edb3e961f5a1d25b248
Certificate serial: 018BB8567B614359AA16005A745AAB5A3152
Authority key identifier: 06:48:A9:91:80:5F:93:D2:4B:BE:1E:DB:3E:96:1F:5A:1D:25:B2:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkipkYBfk9JLvh7bPpYfWh0lskg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/U38MsvVdWtzO0laOaj9cTu4ySTY.roa
Signing time: Fri 10 Nov 2023 08:25:57 +0000
ROA not before: Fri 10 Nov 2023 08:25:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211409
IP address blocks: 195.20.16.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b8:56:7b:61:43:59:aa:16:00:5a:74:5a:ab:5a:31:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0648a991805f93d24bbe1edb3e961f5a1d25b248
Validity
Not Before: Nov 10 08:25:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=537f0cb2f55d5adcced2568e6a3f5c4eee324936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8d:33:c9:d5:e7:e7:dd:05:b6:22:02:b3:4b:
b3:98:a1:d4:2a:7e:e8:f4:e6:be:8d:e1:98:53:a9:
ba:71:a8:80:d0:64:c0:a5:c4:a5:c9:14:3d:b3:13:
23:88:29:53:f9:fe:1a:e0:2c:48:8f:ed:ac:0b:f5:
fa:74:7e:75:a6:bc:a8:78:79:4a:d5:c0:59:0e:7c:
0c:b6:45:b2:df:25:3e:2d:f7:89:b5:4f:ad:e2:32:
59:ea:38:86:46:61:08:02:7f:ad:97:10:58:32:50:
0e:6e:13:95:14:12:8f:32:fd:80:94:73:5d:8e:4d:
d6:92:ab:4a:91:23:9b:71:66:93:02:a9:4b:99:68:
28:34:68:09:9d:0f:89:8a:4a:cf:5e:06:99:3d:3a:
d2:cb:9b:63:61:31:7f:be:ba:10:d5:91:d3:4c:50:
14:c1:5d:cf:1f:b4:bb:09:8b:4d:af:4d:ec:f1:4f:
ca:e1:7c:45:99:ee:f2:94:a5:a4:05:19:c9:5a:a7:
29:e0:97:01:dd:50:3a:1d:c8:af:96:f3:88:0e:fb:
1b:4b:2c:12:92:e4:a5:bc:b2:e3:8e:14:69:3a:f0:
ae:1c:30:21:77:40:8f:2a:bd:08:78:ff:0e:90:d0:
f9:de:59:9e:64:bd:6f:18:88:1f:a5:89:0d:9d:3b:
b8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7F:0C:B2:F5:5D:5A:DC:CE:D2:56:8E:6A:3F:5C:4E:EE:32:49:36
X509v3 Authority Key Identifier:
keyid:06:48:A9:91:80:5F:93:D2:4B:BE:1E:DB:3E:96:1F:5A:1D:25:B2:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkipkYBfk9JLvh7bPpYfWh0lskg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/U38MsvVdWtzO0laOaj9cTu4ySTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/BkipkYBfk9JLvh7bPpYfWh0lskg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.16.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:0c:90:de:c3:5a:bd:03:ac:b7:bf:59:8c:a0:ba:7c:48:1b:
c1:a8:b9:96:4e:3b:6d:f5:c0:d2:6e:5b:fc:29:47:92:b8:26:
51:7a:4d:06:25:96:23:91:eb:ac:08:40:a3:40:7e:8a:b9:f2:
c4:30:e9:35:3b:a5:f7:0f:52:35:c9:e9:d1:a4:61:b9:1b:3c:
e9:d8:3b:21:e5:03:b8:ad:d7:23:32:81:ba:71:3b:e9:fa:a3:
3e:6d:96:10:17:23:5e:4f:18:15:5b:69:24:33:4b:e9:64:e9:
57:13:47:87:f9:ec:49:a7:48:e5:b7:3b:f3:00:62:61:54:d4:
4d:89:6c:89:33:e6:49:09:a9:74:48:9e:dd:36:2c:5d:40:da:
92:76:93:70:31:8f:13:ed:b2:9d:bf:e7:e3:d7:30:99:42:3d:
ed:7f:f5:b3:c7:37:fb:44:7d:06:08:ea:92:5d:ec:80:bf:6e:
2a:86:3a:32:2a:41:f1:b2:72:4b:15:6c:18:99:71:89:4e:e9:
c4:7c:e4:21:65:24:dd:1a:f6:b2:57:5e:48:5e:1e:6d:7c:27:
07:28:16:13:f8:d9:d6:3d:10:3b:57:63:6f:fe:57:92:ce:fc:
82:77:e4:e2:7b:fe:33:3a:0f:06:0e:5d:3a:e3:54:39:62:70:
cc:de:6e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 21 16:57:59 2023 by rpki-client on console-fra.rpki-client.org