Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/rvY4poY1AhVtQd9j1XMdRrLAl38.roa
File: rvY4poY1AhVtQd9j1XMdRrLAl38.roa (raw, json)
Hash identifier: MgC28cGkqPc2Z+9RXBhHfyeOFTJreYRjKX+HjVpN6rI=
Subject key identifier: AE:F6:38:A6:86:35:02:15:6D:41:DF:63:D5:73:1D:46:B2:C0:97:7F
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 018F4E357B0989375A41379DEC77961C6168
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/rvY4poY1AhVtQd9j1XMdRrLAl38.roa
Signing time: Mon 06 May 2024 14:01:18 +0000
ROA not before: Mon 06 May 2024 14:01:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 95.128.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 May 2024 15:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4e:35:7b:09:89:37:5a:41:37:9d:ec:77:96:1c:61:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: May 6 14:01:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aef638a6863502156d41df63d5731d46b2c0977f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:44:e7:f6:3a:f2:60:ca:55:31:33:fa:7d:3a:
e1:a4:11:ff:2a:1b:f7:c4:85:8e:90:5f:a1:80:39:
ec:fb:33:a9:93:79:05:74:1e:7b:ce:87:9a:01:9f:
34:a3:80:c3:bb:26:af:ef:b3:0f:2e:da:a0:2d:80:
c9:1f:6b:1b:75:fd:50:b6:7c:17:02:7f:67:58:c4:
1a:3a:73:d9:e3:88:96:d5:02:fa:2e:81:b9:2d:88:
23:90:f9:17:2d:18:22:61:3e:a6:68:62:2c:bf:79:
13:59:74:48:07:d6:12:28:cc:c5:80:de:c0:b9:e1:
ae:8f:1b:f4:a1:6a:95:bb:5a:8a:ec:eb:4f:8a:97:
69:85:4d:35:41:b0:23:73:15:b7:71:55:0e:e9:12:
30:ea:6a:af:4d:ba:7a:95:90:ab:91:bc:8e:94:83:
cf:e7:d1:d5:23:ef:76:7c:f3:68:20:f7:81:c3:39:
42:e4:2b:70:f4:23:4e:ad:a6:01:22:18:9f:17:3d:
76:50:a9:d2:7a:5f:fb:8e:4e:f6:db:66:0f:10:06:
4c:38:04:2c:fc:bb:bc:25:76:3e:1a:87:83:82:12:
86:fc:95:7c:fb:87:fd:19:04:4a:5c:64:1b:56:95:
ba:5c:2a:ad:84:20:82:42:56:57:9f:80:a9:09:5e:
1b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F6:38:A6:86:35:02:15:6D:41:DF:63:D5:73:1D:46:B2:C0:97:7F
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/rvY4poY1AhVtQd9j1XMdRrLAl38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.156.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:66:bc:a6:fe:3f:4c:4d:bd:f1:11:4a:f7:90:af:5c:ed:71:
41:15:90:91:23:e7:92:cb:db:25:11:29:2d:d9:4b:cf:86:7f:
db:b9:41:77:76:e6:60:32:ce:47:12:2f:c7:1b:30:92:cb:6d:
7d:34:91:3a:ed:e0:df:03:17:b3:de:3f:bb:ce:57:a6:03:d2:
5c:4c:bc:31:57:91:1d:84:ff:8b:6c:5a:09:29:5a:21:24:4c:
4f:dc:ae:4b:b7:32:95:eb:c9:41:0a:03:dc:08:96:15:cf:fc:
50:70:38:96:27:65:1e:7e:68:7e:54:3d:f8:75:f5:49:5c:15:
a1:de:6a:08:dc:dc:5d:b2:14:02:1f:f7:14:ed:e0:e5:c6:fd:
35:52:a7:a5:18:0d:46:7a:4d:27:6c:19:8c:17:77:81:44:15:
3c:4b:8d:95:55:06:65:4c:9f:4e:33:ee:2c:1b:24:34:e6:14:
c5:7f:03:0d:e7:2c:bf:d9:ff:1a:3a:c4:9f:06:1c:86:6e:6c:
1e:ac:f0:27:7f:4c:aa:05:7a:fc:25:47:3a:40:4f:c0:81:48:
66:a8:a7:8e:e5:86:b0:51:0a:04:03:af:ef:71:ff:6a:b4:09:
74:06:0c:ec:1f:98:6f:cc:6c:fc:58:d4:85:0b:3b:6b:5f:c2:
5f:31:58:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 17:52:13 2024 by rpki-client on console-fra.rpki-client.org