Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/URdwwLEn5w-wc5AhGZtKqebmLsc.roa
File: URdwwLEn5w-wc5AhGZtKqebmLsc.roa (raw, json)
Hash identifier: bCy3hx3iddSUue5MZbvlMlKg0JPkZmKGb+d+opCM0wM=
Subject key identifier: 51:17:70:C0:B1:27:E7:0F:B0:73:90:21:19:9B:4A:A9:E6:E6:2E:C7
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01863FF99B80969699D05E4622F5AAC32D9F
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/URdwwLEn5w-wc5AhGZtKqebmLsc.roa
Signing time: Sat 11 Feb 2023 10:16:08 +0000
ROA not before: Sat 11 Feb 2023 10:16:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24961
IP address blocks: 37.221.95.0/24 maxlen: 24
45.145.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3f:f9:9b:80:96:96:99:d0:5e:46:22:f5:aa:c3:2d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Feb 11 10:16:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=511770c0b127e70fb0739021199b4aa9e6e62ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7b:89:bb:48:65:e3:f0:80:69:66:e4:9c:3d:
f1:21:9d:b2:b0:77:9f:50:77:60:31:5a:e6:98:83:
0b:0b:ab:05:42:a7:4d:bc:3a:24:99:cd:2b:31:d4:
5f:9f:02:20:b6:1f:83:be:cd:31:32:c6:0e:f8:9e:
07:a6:35:b8:29:4a:0e:0d:08:fb:76:d9:15:1b:11:
12:7c:e6:9e:06:69:92:32:1e:d8:9f:72:7c:38:a4:
f5:7f:79:1a:19:3d:96:c2:5a:68:c2:11:e1:c6:49:
f6:15:f7:4a:63:43:0e:f6:44:72:cc:d5:b1:18:ca:
84:2e:d6:c3:ab:96:1b:31:09:73:0c:65:f7:a9:6d:
95:a1:d3:16:12:43:f0:95:74:73:78:8b:b0:b7:2c:
b4:70:9f:c8:4d:d3:7b:57:54:76:03:99:0f:2e:2b:
a6:4d:23:cf:9d:a4:a8:3b:fd:07:bc:28:95:10:3f:
97:c4:81:55:8c:61:34:c6:46:3a:f1:cc:36:a0:d2:
71:ed:d3:38:07:bd:25:d1:6d:b5:06:28:4b:41:07:
fc:96:3c:76:52:6a:7e:4f:61:99:88:bb:0e:23:ea:
16:c2:83:21:17:9c:36:61:54:4b:ef:e2:88:a4:35:
43:c9:d7:37:20:b0:88:bd:78:4a:88:d5:63:3a:8a:
31:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:17:70:C0:B1:27:E7:0F:B0:73:90:21:19:9B:4A:A9:E6:E6:2E:C7
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/URdwwLEn5w-wc5AhGZtKqebmLsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.95.0/24
45.145.226.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:fc:ff:4e:b0:cf:20:e8:d2:03:e1:81:7e:6c:bf:e2:ea:ff:
0c:30:1e:6d:f5:e3:ea:b5:46:45:e0:6b:ad:36:94:93:da:f3:
ec:b6:ea:70:c0:7b:dc:76:74:6e:49:8a:ce:83:0c:31:45:0a:
5b:72:b1:c7:ac:02:9f:40:c8:b3:30:08:42:4b:c7:c4:dc:54:
a5:48:c9:99:e8:36:e6:93:82:24:ad:ac:67:d4:c2:47:0f:0b:
7c:25:bc:53:36:c6:34:46:b9:17:37:0b:bc:a6:eb:ed:da:89:
21:6f:73:54:19:e3:1a:53:98:97:f6:ee:7b:bd:88:c6:e9:c6:
b8:d4:59:dd:46:96:4d:dd:e9:3f:be:10:2b:b8:fd:de:da:97:
b1:8b:10:4c:0d:11:b6:d5:e8:4b:bf:07:f3:49:09:6b:0e:c9:
8c:cd:3f:3d:41:9f:cb:7b:a6:d4:69:b4:ad:9b:4c:40:33:ae:
7c:10:b0:5b:40:d1:40:73:be:43:54:a3:6f:d8:49:bc:2a:f2:
f3:56:c9:24:04:88:fd:7d:68:bf:28:80:03:0f:61:e5:cb:97:
d1:b6:da:fd:c9:49:a7:dd:5a:73:00:d5:d1:b7:29:2f:2a:f8:
d0:d6:97:52:36:0f:81:4b:d6:fa:4e:b3:87:e5:12:95:a4:a1:
b8:79:2c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 11:00:54 2023 by rpki-client on console-fra.rpki-client.org