Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/L3QhzXBiVfJZB1vFYU88TpxAb9g.roa
File: L3QhzXBiVfJZB1vFYU88TpxAb9g.roa (raw, json)
Hash identifier: 8J06aFpaX9R2vPNbDC4gP639u3gMsMhYjeVOpDB7n+o=
Subject key identifier: 2F:74:21:CD:70:62:55:F2:59:07:5B:C5:61:4F:3C:4E:9C:40:6F:D8
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01856DE674C32708BA4B891AC7D8EF2A18BF
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/L3QhzXBiVfJZB1vFYU88TpxAb9g.roa
Signing time: Sun 01 Jan 2023 15:14:57 +0000
ROA not before: Sun 01 Jan 2023 15:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3257
IP address blocks: 185.95.159.0/24 maxlen: 24
185.95.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Aug 2023 17:27:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:74:c3:27:08:ba:4b:89:1a:c7:d8:ef:2a:18:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Jan 1 15:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f7421cd706255f259075bc5614f3c4e9c406fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:93:f0:37:43:61:24:9e:52:e1:b1:50:ae:64:
e7:6d:9e:59:6f:3c:ca:57:92:f4:72:0b:d9:59:2c:
71:84:1d:eb:f0:64:bc:54:f4:fb:25:7e:41:d2:4d:
d9:d4:72:d3:36:b6:5b:7b:b1:16:6b:2b:f2:7a:db:
49:0b:37:b0:18:be:c1:35:a7:fd:04:3b:cc:aa:68:
70:38:84:5d:84:00:70:49:67:c3:62:65:b9:d8:18:
cf:6d:30:8c:f9:7c:2f:23:e9:b5:c1:bf:02:c5:e3:
25:cc:e0:68:26:75:12:4f:3b:49:9d:2f:a6:1c:94:
c7:94:7c:31:f1:9f:8f:d2:db:74:37:12:7a:31:0f:
44:d0:78:ee:7f:fe:29:73:b6:c6:2e:4b:08:f3:75:
84:4b:19:f6:66:9c:f0:9d:4a:c6:f5:37:64:10:e3:
a8:be:d7:22:4f:0c:67:01:df:c3:84:48:b8:6d:ab:
50:61:f4:f7:b1:4c:15:3c:33:4e:78:9f:cc:20:68:
5f:0c:14:93:dc:57:26:40:5f:3e:aa:71:6c:43:95:
07:72:0c:78:93:bd:ec:12:c9:94:ea:58:fa:b1:bf:
68:46:4e:cd:b5:ab:c0:72:44:63:4d:9e:ae:ee:9b:
3e:38:79:a9:4e:dd:fd:1d:a7:58:0a:50:87:16:02:
4c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:74:21:CD:70:62:55:F2:59:07:5B:C5:61:4F:3C:4E:9C:40:6F:D8
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/L3QhzXBiVfJZB1vFYU88TpxAb9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.157.0/24
185.95.159.0/24
Signature Algorithm: sha256WithRSAEncryption
60:48:54:a8:45:77:16:e7:0a:65:4d:0c:3b:ba:50:0c:89:50:
ea:6f:d9:ba:0e:4d:66:e5:d9:84:6c:ce:5a:46:ad:13:be:f1:
a7:c2:13:30:5f:dd:3d:89:c8:e1:3d:dd:85:5a:2f:41:26:16:
b0:4b:50:96:5f:64:6b:06:b7:ce:ab:94:43:46:ca:40:cf:f8:
0b:9c:37:68:2f:56:30:2e:38:7f:c3:9e:91:51:e4:5f:66:2b:
99:ca:da:dd:31:26:2b:8b:aa:82:36:67:08:3c:77:be:c3:c3:
7e:ad:1f:0b:ae:10:5a:e3:fa:27:d6:a9:5d:cf:e0:e5:b6:b7:
b0:f5:97:8c:b8:94:7c:40:7b:5f:88:3b:9d:0d:85:b2:a7:d9:
56:a5:4d:c0:85:27:5f:a2:36:b2:e7:29:86:2b:08:ba:de:a6:
46:0b:04:3f:df:51:43:c0:15:dd:87:c2:dd:20:e2:21:32:3d:
ba:9c:25:f4:31:25:30:de:1c:0f:00:0b:b5:d9:37:9e:d8:8d:
69:24:56:fc:46:4d:94:31:a8:e8:60:5b:56:98:ad:e9:ee:32:
3d:5a:ba:22:cd:66:53:08:e0:3c:62:f1:9a:6a:67:04:c8:7c:
e6:e6:de:ae:1c:af:84:a5:8b:44:38:52:d7:bf:4e:ad:83:3a:
7b:01:ca:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:33 2024 by rpki-client on console-ams.rpki-client.org