Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/rGV1BjAydNudgU-PXGxIK5ys_M8.roa
File: rGV1BjAydNudgU-PXGxIK5ys_M8.roa (raw, json)
Hash identifier: CrYxLuj0mUpjQR6T4WjJb7K9eoP6dcHeAtZ235dABXc=
Subject key identifier: AC:65:75:06:30:32:74:DB:9D:81:4F:8F:5C:6C:48:2B:9C:AC:FC:CF
Certificate issuer: /CN=49f2702d1a0726175e39af16974e5375dcaefc31
Certificate serial: 01856E0AFF2117B24FB6560F9AC2DE3B4CB8
Authority key identifier: 49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/rGV1BjAydNudgU-PXGxIK5ys_M8.roa
Signing time: Sun 01 Jan 2023 15:54:52 +0000
ROA not before: Sun 01 Jan 2023 15:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51305
IP address blocks: 195.226.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0a:ff:21:17:b2:4f:b6:56:0f:9a:c2:de:3b:4c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f2702d1a0726175e39af16974e5375dcaefc31
Validity
Not Before: Jan 1 15:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac657506303274db9d814f8f5c6c482b9cacfccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9c:40:6e:ca:b3:f5:3e:71:81:d4:27:21:0f:
98:06:38:b7:65:bd:9d:b5:0e:16:5a:b6:44:de:18:
da:a3:e9:1e:87:c4:36:d3:2b:ee:40:05:a4:70:40:
0e:65:d6:ca:8e:13:0f:ae:3d:cb:73:d7:74:08:2d:
88:78:7f:dd:ce:ad:fb:c6:2c:f9:66:a6:14:1c:c3:
f8:31:de:f3:c6:77:a9:f1:fb:3f:df:99:87:03:d1:
5f:98:09:71:ce:5a:87:a1:fd:1b:dc:52:5d:d6:e1:
c2:81:4a:38:8c:d3:fc:3d:07:1d:4a:e6:ff:fd:48:
d6:70:e3:78:99:05:dc:06:6b:76:8f:a7:47:43:b2:
10:3b:15:0a:05:a6:d3:41:0c:3e:9f:e5:6a:43:2c:
7d:f3:5f:88:68:9c:db:13:cc:af:9a:3e:6c:e7:0c:
74:07:a3:c0:d1:6f:ca:e7:6b:22:ea:69:0b:2f:1d:
33:35:14:63:c1:f8:0e:b0:99:14:45:42:44:e2:4b:
6f:e0:42:e1:5c:2f:80:fc:dc:4e:11:44:6c:e0:87:
0a:08:98:79:b4:c0:24:e5:58:02:23:86:eb:ec:6e:
27:9b:c5:5a:41:a6:2e:d5:e0:ff:2e:84:07:ad:1b:
b9:90:9f:99:f8:f1:c9:3f:b7:14:db:df:51:25:c1:
ed:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:65:75:06:30:32:74:DB:9D:81:4F:8F:5C:6C:48:2B:9C:AC:FC:CF
X509v3 Authority Key Identifier:
keyid:49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/rGV1BjAydNudgU-PXGxIK5ys_M8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.198.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:43:25:5c:d9:fe:df:27:29:2c:7d:2a:6d:07:02:81:6e:0a:
75:77:f8:2d:3a:18:13:da:a0:68:ae:03:b1:96:21:00:9d:3b:
e3:2c:84:c7:cd:24:8f:a6:f6:d5:21:66:80:50:b6:6b:27:c7:
2e:ce:43:08:b6:d6:f5:11:49:18:e6:fa:04:03:8a:85:3f:fa:
40:f2:af:a3:14:eb:e5:7a:8d:13:50:56:ca:0d:f9:43:27:4d:
d9:54:ed:e8:19:c3:66:08:c8:53:2e:7e:55:78:82:d6:3a:2f:
cd:da:1a:d9:8c:6d:6a:d0:cf:e3:fa:36:dc:07:7b:a8:ac:14:
5c:3f:fe:42:74:4f:c6:c5:ae:c3:e8:97:3f:4e:4a:1f:4b:04:
8c:fe:41:fe:b9:ae:e4:25:56:3c:ac:09:a5:62:07:29:97:de:
75:4c:84:7e:b0:16:03:74:c9:88:78:52:87:1b:93:76:36:55:
92:e4:46:06:11:55:33:f8:62:31:50:62:a7:d8:24:a7:64:57:
b2:a2:55:4f:17:91:23:1b:47:a7:0a:8b:d1:92:e5:2d:cc:5a:
5c:63:4a:d2:c2:15:32:5f:87:0e:ef:da:ce:1a:dd:9d:b7:6c:
e9:65:1a:d0:9d:17:15:f3:11:b2:09:7c:10:16:1d:f0:aa:c6:
a2:12:6f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:09 2024 by rpki-client on console-ams.rpki-client.org