Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/xib2yhyyB3MPGMUAJcLW-vKOnsQ.roa
File: xib2yhyyB3MPGMUAJcLW-vKOnsQ.roa (raw, json)
Hash identifier: lmN3BAlxss6W1MM0RxXvN+h8zYK/CJ8o3YhVRp940G0=
Subject key identifier: C6:26:F6:CA:1C:B2:07:73:0F:18:C5:00:25:C2:D6:FA:F2:8E:9E:C4
Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial: 018CC94CBE90A985C740DABE2004B481B343
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/xib2yhyyB3MPGMUAJcLW-vKOnsQ.roa
Signing time: Tue 02 Jan 2024 08:31:39 +0000
ROA not before: Tue 02 Jan 2024 08:31:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42864
IP address blocks: 45.95.168.0/22 maxlen: 22
2a0e:bfc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 May 2024 11:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:be:90:a9:85:c7:40:da:be:20:04:b4:81:b3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Validity
Not Before: Jan 2 08:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c626f6ca1cb207730f18c50025c2d6faf28e9ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6c:f8:e4:f4:7b:1f:97:b8:4d:c6:e2:e3:66:
31:8d:d1:d7:24:5e:9a:21:45:e0:2c:73:b1:75:21:
df:e8:fc:6c:55:ec:87:7c:a4:0a:b2:7f:c8:42:5f:
8c:3e:fc:d8:fb:c6:fe:ed:92:53:70:72:b8:f8:8a:
0f:70:b2:c6:f3:49:3c:1b:15:66:11:10:d7:f3:9e:
dc:8e:81:5d:c2:6d:b5:c9:d2:aa:56:dc:2c:27:fd:
f3:53:4a:7c:da:81:3f:8b:b4:cb:0e:50:50:3e:9c:
08:16:97:12:3a:71:50:3b:de:12:30:04:6d:24:1d:
7c:0b:0d:03:0b:20:6d:87:6c:1f:38:92:e4:5f:94:
a1:43:9b:1e:09:cf:b6:ac:61:8a:cc:e7:b5:0a:43:
4f:4c:fa:a2:bd:4a:8d:a6:ca:8f:24:5c:b1:b5:3f:
87:1e:00:a7:24:c1:ac:3d:19:68:41:48:ad:65:58:
70:77:fb:fe:05:8e:d8:85:d7:6f:40:5b:2d:a3:8f:
d1:5e:9d:a0:a2:cb:94:99:ed:37:37:b6:34:70:cc:
f8:91:52:cd:b6:cf:40:16:df:69:70:f6:b2:16:43:
db:75:95:dd:0d:91:f6:8f:e9:f2:3c:cb:46:b4:37:
c9:cf:d7:56:66:fa:21:e8:d6:ec:7b:d5:d3:d5:39:
fa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:26:F6:CA:1C:B2:07:73:0F:18:C5:00:25:C2:D6:FA:F2:8E:9E:C4
X509v3 Authority Key Identifier:
keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/xib2yhyyB3MPGMUAJcLW-vKOnsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.168.0/22
IPv6:
2a0e:bfc0::/29
Signature Algorithm: sha256WithRSAEncryption
85:f6:bd:ea:47:12:80:67:81:6e:fe:35:ce:c3:fc:5d:08:6c:
b5:a7:ab:87:9b:19:94:32:13:89:a5:a8:6c:31:0a:5a:5c:f4:
92:60:5c:c3:d7:0c:2d:74:3a:73:3d:ba:45:8a:08:2f:88:cc:
6e:b8:95:1f:73:b6:34:72:0a:7e:72:ae:42:1f:91:6e:59:35:
23:f2:01:44:9f:36:50:c6:6f:f4:64:b6:8e:9b:3f:f8:e5:35:
ad:d5:bc:a4:08:b5:93:04:33:82:4f:02:a0:58:a8:70:b9:93:
1c:b6:5c:5f:bb:5e:ec:ce:31:3c:58:c2:04:e4:8c:b2:f6:7a:
86:22:be:1b:92:43:9e:17:a2:53:07:cf:5e:10:50:7f:c4:18:
90:ea:6c:7b:36:fd:d8:4d:22:52:ef:fd:18:5e:8d:1f:c5:09:
a6:c9:9e:13:f9:76:23:b1:7f:08:f8:47:49:17:92:94:ab:c0:
3e:fb:f6:fd:4c:0c:7e:fe:f3:00:86:b7:7e:a2:4a:12:81:8c:
b5:5d:30:44:53:b2:d7:da:c9:59:e8:00:a6:f4:f4:6e:a6:d1:
27:ce:a4:07:ed:0c:30:20:72:a4:f0:cc:8c:13:3d:8c:e1:15:
28:28:81:bc:2a:56:5d:56:f5:a4:3b:d5:51:20:c1:b0:af:d8:
b9:83:7b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 13:56:33 2024 by rpki-client on console-ams.rpki-client.org