Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/Tp73vVtv39YGd7e5lnlO1krZCng.roa
File: Tp73vVtv39YGd7e5lnlO1krZCng.roa (raw, json)
Hash identifier: XGU4Q/JnlvdLN1NyGsOvdWd8ezgPQ+4VHf8WTUqQxe0=
Subject key identifier: 4E:9E:F7:BD:5B:6F:DF:D6:06:77:B7:B9:96:79:4E:D6:4A:D9:0A:78
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 01856D0AA6B99A3ECC8FFA99E53B9F3D6E10
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/Tp73vVtv39YGd7e5lnlO1krZCng.roa
Signing time: Sun 01 Jan 2023 11:14:52 +0000
ROA not before: Sun 01 Jan 2023 11:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206887
IP address blocks: 95.183.220.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:a6:b9:9a:3e:cc:8f:fa:99:e5:3b:9f:3d:6e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 1 11:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e9ef7bd5b6fdfd60677b7b996794ed64ad90a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4a:8f:6d:0c:78:10:78:bd:51:de:25:8f:88:
ae:6b:6c:c1:97:ab:51:18:d3:ea:b7:86:69:c1:b4:
b9:74:5f:e9:c5:b1:a0:be:25:a4:e9:ef:af:aa:3b:
b1:58:04:13:6e:ed:e1:3d:ce:62:b0:e1:78:51:42:
4f:53:8c:26:06:97:78:04:18:67:df:e4:d5:1a:8f:
28:aa:bd:62:79:13:87:86:2a:e3:21:ba:4f:b9:b9:
de:ef:b2:d6:a0:bb:07:fe:b3:79:00:6a:7a:e3:fe:
de:24:6d:9c:6c:95:c2:81:9e:7b:94:51:53:ca:fd:
33:0b:f3:b6:b6:de:11:88:b3:29:00:55:bf:5f:25:
5e:15:2f:e3:94:b1:46:21:f1:be:5b:e1:e0:d3:f2:
fc:39:e1:27:e0:c6:cb:58:22:d0:3b:03:d2:72:c4:
99:f8:9f:16:91:d6:39:66:15:22:25:f0:09:58:bc:
98:ca:ba:e7:1f:3e:dd:38:e1:20:20:87:f6:5f:53:
71:01:e1:13:4e:46:71:17:12:91:9f:ab:fa:0c:fc:
db:88:59:ee:f4:c5:a0:fe:a4:a6:4c:ce:d8:33:bb:
ba:3b:49:39:47:0e:60:c8:08:e3:3c:08:4b:0b:fb:
6e:37:e1:ef:bb:26:8b:ae:34:6a:d5:52:53:97:6e:
ec:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9E:F7:BD:5B:6F:DF:D6:06:77:B7:B9:96:79:4E:D6:4A:D9:0A:78
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/Tp73vVtv39YGd7e5lnlO1krZCng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.183.220.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:fe:f9:d4:b8:5f:b4:c2:a1:46:00:08:b7:c1:25:2f:d2:ec:
65:24:36:b6:ca:76:d8:0a:1f:e8:e4:f0:48:a1:be:6d:ac:a7:
a1:1d:6b:51:9f:ab:fc:4f:67:1d:1a:08:5b:73:f7:67:f4:fb:
46:04:11:15:0f:64:75:6a:5c:63:f3:cf:d4:2c:c0:aa:98:1e:
39:f1:c9:b9:71:bf:55:b2:8d:67:19:78:2a:2f:18:6e:ca:0f:
96:9b:e5:f1:16:f6:3c:57:4e:b7:30:28:2a:1b:a0:36:c1:24:
af:aa:1a:5c:e9:18:17:5c:c9:22:b1:c7:a5:11:9f:88:e2:77:
21:ed:a2:a2:1e:13:04:6e:f4:7b:59:f3:c2:c0:98:63:08:7f:
00:c8:8f:00:04:09:f2:00:28:4b:dd:9f:42:7d:06:6a:9c:fb:
aa:0a:d2:a4:8c:b6:90:ae:09:b6:ae:0a:0c:c4:ee:2d:09:e2:
3f:d9:f8:cc:38:59:d4:3f:f2:76:54:59:81:8c:d4:95:86:a2:
fb:b4:4a:52:0d:4e:8c:4b:20:ab:a6:70:6c:a8:af:1f:53:22:
20:78:cd:5b:80:03:1d:ed:9b:d0:08:b0:77:62:75:82:0a:8e:
7d:7c:0c:73:61:ce:ac:01:54:33:61:e1:a0:b6:d0:a3:69:3e:
97:f1:62:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:39 2024 by rpki-client on console-fra.rpki-client.org