Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/jfRh_aQBv80n7LoQsHfS9oIT0ig.roa
File: jfRh_aQBv80n7LoQsHfS9oIT0ig.roa (raw, json)
Hash identifier: UTmdVkXlKgeDywn253UYgoSNPD4ZdVHzn9L2MoccomQ=
Subject key identifier: 8D:F4:61:FD:A4:01:BF:CD:27:EC:BA:10:B0:77:D2:F6:82:13:D2:28
Certificate issuer: /CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Certificate serial: 01880712238C544F36908BCF9885BDA7FF8A
Authority key identifier: D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/jfRh_aQBv80n7LoQsHfS9oIT0ig.roa
Signing time: Wed 10 May 2023 19:10:09 +0000
ROA not before: Wed 10 May 2023 19:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20661
IP address blocks: 95.85.98.0/24 maxlen: 24
95.85.99.0/24 maxlen: 24
95.85.104.0/24 maxlen: 24
2a05:2180::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 11 May 2023 19:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:07:12:23:8c:54:4f:36:90:8b:cf:98:85:bd:a7:ff:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Validity
Not Before: May 10 19:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8df461fda401bfcd27ecba10b077d2f68213d228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:49:bc:74:e7:8a:cc:b6:5a:13:4e:b6:62:
73:9a:ec:19:1f:b0:05:3a:17:ef:5a:c6:9d:a8:1e:
d2:b1:63:c8:4b:ef:8b:8c:91:90:04:43:3c:80:bc:
82:5b:5f:e3:b9:1b:fb:df:f4:cc:af:e3:5d:8b:a4:
2c:6c:8a:2f:a9:af:7d:ec:25:39:c1:26:e0:fa:3a:
6a:b4:f2:ed:61:c8:10:34:8d:bc:c1:9f:1e:25:ff:
fb:1c:64:41:2e:20:44:fc:af:e8:23:82:2e:e8:7e:
b9:d9:84:5d:8d:63:94:5a:a0:3d:ea:9d:ca:dc:3c:
0c:df:0d:f7:79:9c:ac:07:4c:a1:46:69:4a:58:ee:
c2:17:93:9d:32:79:67:7f:25:00:b8:0f:c7:f3:c9:
bf:34:d0:7d:c6:86:6f:8c:13:b7:0f:3e:75:75:f1:
c9:30:d4:73:db:9b:c6:0e:5e:9a:77:99:34:e5:e0:
a1:83:74:cf:df:be:0f:c5:e9:73:1f:fe:84:17:a5:
16:ad:68:6d:03:a9:29:bf:52:97:72:d9:84:4a:a7:
c5:76:a3:65:c1:3c:e8:d5:c0:e9:d6:c3:e4:96:bb:
1b:12:a0:6c:0c:ee:c3:fa:e3:04:43:8b:2b:ff:87:
9b:03:20:39:f2:6f:ad:5c:f3:30:c1:b1:6b:45:f3:
e6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F4:61:FD:A4:01:BF:CD:27:EC:BA:10:B0:77:D2:F6:82:13:D2:28
X509v3 Authority Key Identifier:
keyid:D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/jfRh_aQBv80n7LoQsHfS9oIT0ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.98.0/23
95.85.104.0/24
IPv6:
2a05:2180::/29
Signature Algorithm: sha256WithRSAEncryption
79:ac:ad:ae:6d:b0:36:ff:35:13:42:48:0b:35:12:e7:d4:59:
5e:00:f6:29:ac:3b:1f:8d:c0:4d:99:00:73:30:cd:5d:c6:7c:
74:f8:de:81:64:32:13:ef:3c:8a:c2:a4:25:96:47:86:54:3a:
0e:7a:4c:34:ff:37:5f:13:a3:97:7d:80:60:1d:cc:b4:47:ab:
b4:d9:6a:a4:af:8a:a6:9e:cf:d5:eb:50:0d:81:bd:bb:19:50:
15:bc:8d:ea:da:2d:39:57:d2:12:32:21:58:a2:e4:21:0b:5c:
c2:c9:18:9f:74:26:b3:8c:7d:c2:40:66:8f:19:90:17:26:e3:
8b:87:0a:09:8a:6c:c8:1f:8a:5d:4d:ce:2d:74:7b:ab:25:54:
3c:95:9e:d5:72:0f:94:76:34:d6:26:2a:d9:25:a3:85:79:24:
56:04:b9:5d:d4:85:e6:a4:86:c7:d2:92:a9:42:54:82:c4:48:
f8:f0:7e:07:08:8a:3e:d4:bf:7b:f4:bd:9a:cc:0b:3b:3b:12:
4f:bd:6d:42:01:40:3b:88:41:d7:bf:04:d9:b4:9b:7b:00:62:
0b:d3:88:ea:06:8b:55:56:3c:f0:a2:dc:c3:f2:6c:b2:57:5c:
a2:94:6e:4a:3d:1a:61:55:bf:af:d5:f1:41:3c:9c:0e:f9:96:
7d:41:46:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:00 2024 by rpki-client on console-fra.rpki-client.org