Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/Q7Tss1chqFqEU4lKtpp6YKkEnRQ.roa
File: Q7Tss1chqFqEU4lKtpp6YKkEnRQ.roa (raw, json)
Hash identifier: sRaX1Hk5ZkaYYbr+9zvupUx7FhZRPHEnIwmcqzlzS+E=
Subject key identifier: 43:B4:EC:B3:57:21:A8:5A:84:53:89:4A:B6:9A:7A:60:A9:04:9D:14
Certificate issuer: /CN=6954e90899ff25644520724cde8c211613600bef
Certificate serial: 018CC56ED7144BCE5EA10BDC9B2E1CB6C7F2
Authority key identifier: 69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/Q7Tss1chqFqEU4lKtpp6YKkEnRQ.roa
Signing time: Mon 01 Jan 2024 14:30:24 +0000
ROA not before: Mon 01 Jan 2024 14:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51569
IP address blocks: 185.95.136.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 04 Jan 2024 10:27:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:d7:14:4b:ce:5e:a1:0b:dc:9b:2e:1c:b6:c7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6954e90899ff25644520724cde8c211613600bef
Validity
Not Before: Jan 1 14:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43b4ecb35721a85a8453894ab69a7a60a9049d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:14:0f:e3:04:06:fc:74:13:ea:c0:31:72:26:
85:b1:ad:6b:f6:0d:c4:13:3b:7d:62:34:5b:7c:e8:
d4:f4:a1:d4:b6:0a:40:84:c3:47:68:51:f7:34:44:
fd:1c:ee:47:f4:a6:6d:50:2d:6b:7d:f1:4d:89:70:
20:6d:1a:b8:06:ef:7b:3f:80:c3:fe:68:4c:f7:cf:
66:6f:f0:55:c9:c5:ca:3a:b2:09:6b:6d:98:e6:70:
0c:c7:cb:9c:89:f7:3c:51:a8:51:4a:98:6f:ae:cb:
ad:95:74:bc:96:5d:c0:e7:21:31:27:04:27:5c:cf:
af:bd:33:a9:6e:66:6c:6b:02:22:bf:81:2a:11:1d:
9b:64:4e:81:4f:27:2a:89:74:77:ed:c5:1c:ff:02:
02:26:31:52:1b:2d:f7:39:43:fd:36:05:0f:38:da:
5b:3e:89:41:f5:10:54:c9:4b:76:c2:f6:7e:ca:7b:
3f:76:a4:ee:74:b8:06:8d:18:7b:d6:f9:45:99:7d:
7b:40:bc:69:71:16:cf:60:bc:64:78:5b:d6:33:23:
38:c3:79:c8:12:74:1f:e9:1d:8c:67:b0:6c:7d:9b:
a8:18:08:2c:19:00:91:b9:22:af:7e:da:b0:b4:fd:
e6:e6:c1:ab:69:73:32:06:a4:23:e6:53:dd:d2:e1:
64:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B4:EC:B3:57:21:A8:5A:84:53:89:4A:B6:9A:7A:60:A9:04:9D:14
X509v3 Authority Key Identifier:
keyid:69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/Q7Tss1chqFqEU4lKtpp6YKkEnRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.136.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:a4:79:cf:6a:7b:d5:af:d0:8b:73:62:b6:25:e3:74:23:1b:
92:d8:a4:b6:f5:fb:82:a6:80:0f:1c:a6:84:08:7d:ec:74:35:
f1:87:34:2b:69:bd:37:1b:e7:ac:8e:22:cb:16:50:d5:5f:06:
80:67:f7:00:c9:da:31:37:44:4e:2c:57:2a:c2:b4:b8:d6:9f:
f1:5b:cd:e8:22:69:e6:e9:d8:ed:37:c4:6b:e8:c5:2e:45:69:
7f:64:13:b8:ed:c8:d7:83:f9:c3:13:80:f2:d1:aa:5d:ad:33:
6f:11:57:75:df:ba:d4:a5:5f:51:03:02:1e:17:27:b4:80:d3:
7d:0d:ae:b8:af:d1:0d:c1:de:ed:0f:f9:f0:e7:bf:04:97:48:
10:84:b5:81:82:fc:a9:44:91:18:3b:39:6f:bb:37:16:34:67:
85:94:c7:cc:d6:42:85:12:cf:0e:ba:de:71:a0:9b:b8:c1:db:
0c:b3:7f:0f:89:a9:96:c9:c8:0b:70:28:d5:17:70:5c:0b:e1:
7f:85:90:20:11:b7:ba:97:e9:2b:05:fd:23:8c:47:8b:9c:33:
fc:1c:c9:0f:d6:fa:9b:d4:44:b2:b3:ba:48:09:2d:c1:af:d8:
68:79:5d:55:86:50:ef:12:a6:b6:c7:13:a0:7b:63:01:61:1a:
03:65:c5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:10 2024 by rpki-client on console-ams.rpki-client.org