Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/vqZw84Jjqne2_wDoGxaVSt_WY1E.roa
File: vqZw84Jjqne2_wDoGxaVSt_WY1E.roa (raw, json)
Hash identifier: 0tv1GKGAViIkHnIr1Oy3Xo+czlNSlVlg8WQucZkilUw=
Subject key identifier: BE:A6:70:F3:82:63:AA:77:B6:FF:00:E8:1B:16:95:4A:DF:D6:63:51
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01856D0AD31274CD6FAC0C2661A6E62547A1
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/vqZw84Jjqne2_wDoGxaVSt_WY1E.roa
Signing time: Sun 01 Jan 2023 11:15:03 +0000
ROA not before: Sun 01 Jan 2023 11:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39005
IP address blocks: 95.157.192.0/18 maxlen: 18
88.219.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:d3:12:74:cd:6f:ac:0c:26:61:a6:e6:25:47:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 1 11:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bea670f38263aa77b6ff00e81b16954adfd66351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0f:70:3f:4a:82:c5:89:0a:ad:6c:4f:01:e7:
50:e0:4c:1d:e7:2c:14:84:48:63:e1:e1:c9:fd:ad:
37:3b:9b:56:0f:fb:c2:50:fb:98:e3:60:b7:58:b6:
bf:d9:14:1a:bc:2e:da:90:65:0a:ac:55:c7:4f:27:
57:42:d3:45:64:b7:b3:7c:db:15:22:1d:75:6d:10:
ac:0d:e3:a5:10:5b:76:af:ec:52:96:b1:1b:16:db:
6b:4d:5d:79:84:9f:93:4c:00:29:ed:2b:a8:de:ca:
e4:57:80:85:05:96:58:3b:09:2e:07:61:87:0a:66:
03:50:b7:f2:e3:5b:1f:c4:cf:82:75:bf:c2:8a:a2:
19:dd:3a:c3:70:b6:8f:06:af:c6:b4:52:e2:0b:c3:
a7:b6:3d:d1:4e:a1:aa:f6:ac:2f:dc:96:fa:c1:7e:
4c:54:2c:ba:fe:94:76:8a:a7:8e:c9:ed:2a:c1:91:
94:c6:dc:f8:c0:8f:9f:7e:7a:20:18:5d:fc:2a:da:
78:d1:a2:e1:9f:d0:c7:dd:ef:c4:1a:79:55:72:aa:
2a:31:c2:46:20:f2:2d:11:69:ff:ee:ac:47:43:96:
84:90:bb:1c:75:cb:96:25:cf:f7:ca:a6:e1:d3:c1:
6c:24:08:d5:67:8d:b0:7a:39:d7:f1:c7:f0:48:d8:
07:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A6:70:F3:82:63:AA:77:B6:FF:00:E8:1B:16:95:4A:DF:D6:63:51
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/vqZw84Jjqne2_wDoGxaVSt_WY1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.219.0.0/16
95.157.192.0/18
Signature Algorithm: sha256WithRSAEncryption
82:1d:2e:c1:ee:1c:c2:0a:a7:84:e4:46:0c:7f:d3:63:c9:77:
22:6f:b3:ea:53:4d:0b:2f:94:24:aa:03:06:78:d0:e7:51:a7:
d5:65:e0:7d:ee:24:ff:65:c1:04:64:6b:cf:d0:6b:a2:ca:b4:
fa:dd:e2:2e:d5:cc:7b:d1:cb:c7:f3:88:16:51:d9:11:70:8c:
f6:ce:3d:27:5b:b0:20:fa:a9:c5:16:68:b0:03:65:aa:68:a5:
8f:86:b2:d1:ae:8b:cb:4c:f5:2c:72:5e:74:11:46:3d:5f:d9:
3b:0c:57:0c:8f:39:f1:8a:27:4c:0e:98:0b:3b:c9:08:88:32:
1c:ef:65:55:21:61:90:4b:3a:d5:7c:a3:26:56:a3:f8:0d:3a:
8f:36:b2:e1:c8:a9:be:6c:62:6c:2e:35:e6:16:d1:ae:65:61:
56:d7:00:05:1b:83:96:7f:78:89:09:8e:fb:d4:ab:16:6b:1c:
9f:34:3a:4f:e9:2b:62:77:7e:a5:ea:d1:17:da:e4:40:12:92:
db:f6:75:58:d0:ee:25:ad:1c:ca:44:e1:5d:ea:77:03:77:02:
a0:5f:1a:ff:2f:0a:a6:1f:92:cf:3d:d6:28:df:05:3e:e5:94:
ab:e8:fe:de:42:1c:62:8e:ef:a0:10:20:67:a5:06:ff:02:b6:
a3:50:6d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:51 2024 by rpki-client on console-ams.rpki-client.org