Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/lRuGHVeAsrKPQfI0LYazY2TkMgQ.roa
File: lRuGHVeAsrKPQfI0LYazY2TkMgQ.roa (raw, json)
Hash identifier: AX8wvQjYf7TB+y9rY10pjBmMRH9+Bba2yeg2DetL6B0=
Subject key identifier: 95:1B:86:1D:57:80:B2:B2:8F:41:F2:34:2D:86:B3:63:64:E4:32:04
Certificate issuer: /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Certificate serial: 018589067C70F0B870A6A6A7ED83F17EBC2C
Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/lRuGHVeAsrKPQfI0LYazY2TkMgQ.roa
Signing time: Fri 06 Jan 2023 21:39:41 +0000
ROA not before: Fri 06 Jan 2023 21:39:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47823
IP address blocks: 45.95.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:89:06:7c:70:f0:b8:70:a6:a6:a7:ed:83:f1:7e:bc:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Validity
Not Before: Jan 6 21:39:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=951b861d5780b2b28f41f2342d86b36364e43204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d6:00:73:45:a1:d2:23:a5:e6:03:91:22:be:
39:de:3f:df:e7:0b:75:40:1b:cc:53:25:07:0b:f4:
34:cc:eb:a7:28:be:bc:80:22:2a:ee:46:17:a4:43:
25:5f:6a:f0:e0:eb:bf:9d:db:9c:86:8b:bd:07:d7:
8a:16:95:1e:a6:5c:05:83:c7:b7:e2:c4:52:93:9a:
32:ec:c2:a3:1f:aa:f7:bd:0d:32:46:d7:43:6b:ad:
e4:2f:21:67:1a:00:f6:60:d0:e1:65:8c:e6:b1:0b:
d8:0b:5c:32:57:34:18:48:55:84:14:43:84:46:a3:
5e:3f:dd:ac:c8:41:c4:74:c5:96:b7:2f:58:e3:fb:
bf:77:25:ff:1e:58:b7:d2:1d:dd:8a:3f:05:e5:bb:
58:77:01:a0:85:14:fc:f1:23:26:b6:4b:3f:1f:5b:
36:b9:f0:d3:cc:52:db:76:83:bf:c4:a5:8e:49:01:
56:44:2d:bd:fe:b0:86:52:8e:18:15:e7:50:eb:01:
20:fc:16:e8:e0:05:0a:3a:c1:13:97:26:18:e4:fa:
39:ec:52:a7:b4:7e:9a:e6:f4:8b:5b:d1:90:b2:e4:
00:db:a4:b7:db:84:ad:1a:85:50:87:91:a4:0b:38:
8b:85:db:5d:28:02:66:5c:7c:c5:d3:cc:a6:51:b0:
e6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1B:86:1D:57:80:B2:B2:8F:41:F2:34:2D:86:B3:63:64:E4:32:04
X509v3 Authority Key Identifier:
keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/lRuGHVeAsrKPQfI0LYazY2TkMgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.207.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:99:ac:d5:cb:fa:c8:dc:f4:40:6b:99:46:53:52:ee:a1:6a:
3b:64:7c:b3:62:38:c2:40:62:58:35:f9:9b:04:07:26:16:30:
89:35:b1:0a:8b:51:3d:a1:42:ab:81:2b:49:89:3d:b8:cb:9f:
83:81:ac:9f:35:93:b4:f3:33:b7:63:9e:8a:50:3b:00:c8:11:
d3:e9:f5:70:a6:71:3f:38:88:39:3d:49:dd:ed:69:c0:c1:7f:
8d:89:40:6a:21:fb:94:8c:dd:bf:da:f3:30:16:5d:a0:bd:be:
c8:0b:b6:c4:66:63:c6:ba:59:a5:af:28:98:79:60:3c:47:ba:
db:4a:29:bf:26:1a:e7:52:30:62:be:a4:d8:79:8f:bd:12:c6:
db:f5:cb:0a:f5:12:1d:4a:80:6b:11:78:51:fc:53:f4:f4:90:
70:1a:89:c2:4a:46:d6:72:04:fd:fe:35:23:6e:8e:39:65:15:
15:d1:c3:8c:fc:96:a9:1d:c7:9e:ce:7a:1e:0f:24:70:00:b5:
eb:01:90:00:9d:55:af:43:f5:4d:03:65:95:6c:39:d6:71:32:
0b:d3:5e:6a:5d:dd:71:bc:09:6d:23:6e:ac:35:30:97:40:37:
d7:5b:4f:86:ca:e7:84:08:5d:67:17:33:09:95:70:94:ea:93:
be:0a:b0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 11 10:35:09 2023 by rpki-client on console-ams.rpki-client.org