Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/h0ee0IGRr1n3VLjZfupcSCGDcm8.roa
File: h0ee0IGRr1n3VLjZfupcSCGDcm8.roa (raw, json)
Hash identifier: IVmrCk4BZAEEmJi3EmSucLtA/mVSOk4o93e/ujjdG5s=
Subject key identifier: 87:47:9E:D0:81:91:AF:59:F7:54:B8:D9:7E:EA:5C:48:21:83:72:6F
Certificate issuer: /CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e
Certificate serial: 01860497E0B72E376DDF4FF6FDCEEB9562B6
Authority key identifier: 29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/h0ee0IGRr1n3VLjZfupcSCGDcm8.roa
Signing time: Mon 30 Jan 2023 21:31:47 +0000
ROA not before: Mon 30 Jan 2023 21:31:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12658
IP address blocks: 195.60.86.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:04:97:e0:b7:2e:37:6d:df:4f:f6:fd:ce:eb:95:62:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e
Validity
Not Before: Jan 30 21:31:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87479ed08191af59f754b8d97eea5c482183726f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:94:71:d0:9d:d7:b8:fa:18:2e:7f:48:be:17:
28:b9:c5:aa:dc:e3:0d:7c:04:8e:5d:db:f6:64:f7:
7e:e1:2d:62:c5:d4:8f:fd:19:ae:71:90:06:76:6d:
8f:27:56:cf:87:1c:23:fc:e1:79:0a:86:04:48:f4:
4f:ec:4d:a7:fe:71:c9:40:49:4f:44:e5:70:33:1e:
10:28:4a:e1:0c:5a:d0:ec:5b:af:c1:66:70:6b:69:
45:7d:66:88:e1:8b:d9:e0:7e:cc:8f:f4:dc:b7:91:
1a:e0:92:10:7c:b0:d2:0c:a4:5a:de:60:2f:ab:df:
59:54:c9:26:38:2b:b7:29:86:69:de:92:1e:ef:9b:
a9:f7:ad:80:19:45:23:51:c1:4b:a9:af:15:23:d0:
50:92:03:b0:60:a3:2b:d0:9e:cf:a6:22:df:7d:a9:
6f:65:99:90:e2:62:ce:f3:98:b7:04:78:5b:fa:64:
1e:8e:9e:28:8d:6b:ec:58:9a:d9:e2:a2:10:29:b8:
a8:17:97:d0:dd:1c:8b:ff:6d:a7:b6:7d:dc:d6:79:
da:82:7e:40:09:45:c1:9f:1d:a3:ac:25:71:77:54:
11:15:be:df:a1:5e:e9:f9:3d:39:fb:25:83:20:75:
18:ec:a8:b8:0f:d6:86:50:da:3b:9e:8f:74:4c:c0:
a0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:47:9E:D0:81:91:AF:59:F7:54:B8:D9:7E:EA:5C:48:21:83:72:6F
X509v3 Authority Key Identifier:
keyid:29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/h0ee0IGRr1n3VLjZfupcSCGDcm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.86.0/24
Signature Algorithm: sha256WithRSAEncryption
71:dc:ab:8e:e2:7a:2e:5a:db:b4:c4:3e:d7:50:4a:41:d1:4c:
bf:a1:ee:80:8d:5f:56:e8:2a:61:e1:f5:85:76:4e:db:b5:fc:
c2:eb:c9:69:49:3f:27:2f:cf:d5:e1:6d:00:b2:0d:b0:5f:66:
20:8c:30:86:14:b9:30:60:7b:1e:40:e2:6f:7d:7a:59:51:12:
0d:71:43:78:3f:8b:0f:d2:7b:d4:1c:fb:41:ad:fb:91:d3:b6:
ca:46:8b:50:f8:ac:32:1c:d4:98:3f:57:bc:15:ef:14:81:13:
5a:8b:fa:bb:0b:eb:ef:d7:30:ec:93:10:e1:88:af:04:9f:1a:
ea:22:ce:8b:31:2c:09:d8:89:7b:99:0c:b9:1b:cd:3e:0a:22:
d9:b0:b7:ef:bc:2f:68:a6:e0:4d:b9:cb:d9:b3:88:05:60:fd:
75:d7:c7:55:a0:27:d6:cf:dc:ee:62:b7:0f:a2:d6:b7:17:0f:
d1:ed:5a:e7:3f:53:f4:d0:bb:6e:28:0f:71:8c:98:c4:f2:4c:
aa:0f:cb:57:72:f4:4a:8c:a7:43:d2:9e:6d:f6:79:25:d6:14:
a5:39:4e:b8:a1:41:ca:da:52:9b:ac:e6:77:ba:8e:9c:90:20:
a8:54:77:76:00:c6:19:87:b4:4e:ef:aa:d2:78:9f:1f:80:31:
9a:83:e5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:48 2024 by rpki-client on console-fra.rpki-client.org