Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/rxrLaAoB1F9MMrv39QOOG8korZQ.roa
File: rxrLaAoB1F9MMrv39QOOG8korZQ.roa (raw, json)
Hash identifier: DTY1zfB+KrZ9feNkmJAzgzsDEJsThzxhdYVkCLXFd2o=
Subject key identifier: AF:1A:CB:68:0A:01:D4:5F:4C:32:BB:F7:F5:03:8E:1B:C9:28:AD:94
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 018571309F20DE81B817E6EBA5607176D615
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/rxrLaAoB1F9MMrv39QOOG8korZQ.roa
Signing time: Mon 02 Jan 2023 06:34:49 +0000
ROA not before: Mon 02 Jan 2023 06:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212566
IP address blocks: 95.161.83.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:9f:20:de:81:b8:17:e6:eb:a5:60:71:76:d6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Jan 2 06:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af1acb680a01d45f4c32bbf7f5038e1bc928ad94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:aa:d0:6f:8a:3e:3b:aa:12:6d:00:69:c4:01:
d9:44:3b:1b:9f:6c:a3:ab:56:95:06:ac:b8:d4:45:
4c:8f:57:b1:53:6a:3e:d7:13:43:ff:00:cf:9a:f8:
80:67:8d:c6:a2:ee:05:e6:c4:fd:80:c3:c2:42:b6:
78:3c:c1:87:92:3e:69:6e:7f:ef:22:fe:43:03:e1:
88:5f:ea:39:a1:6d:eb:e5:39:82:f2:a6:53:e9:f6:
f6:17:3f:50:39:9d:2b:e4:f3:94:74:ce:84:02:7d:
45:b7:b3:96:ed:76:67:1f:3f:44:01:ea:91:16:8c:
df:a9:31:dc:c2:7a:5e:3c:fa:42:a2:b2:82:e3:55:
dd:27:71:b2:00:6f:a0:b1:6d:43:68:bb:eb:45:ac:
fd:58:bc:5a:4f:23:9f:df:0e:75:bd:de:26:c0:e3:
10:7d:5c:92:4d:40:a0:59:f2:4d:0c:a4:fb:4f:64:
57:7a:ad:09:62:d1:78:7b:fe:77:13:42:91:0a:2d:
83:e9:65:02:31:0a:f7:6a:1a:d3:eb:15:ec:10:c7:
4e:6f:ce:67:b2:ef:9c:c1:89:e3:d0:de:09:b7:68:
b8:fb:7b:16:00:bd:c5:8c:2c:e7:4f:a8:f4:c2:e7:
d7:ff:8d:9d:b2:b5:f4:5a:ac:99:16:a7:f8:70:a6:
73:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1A:CB:68:0A:01:D4:5F:4C:32:BB:F7:F5:03:8E:1B:C9:28:AD:94
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/rxrLaAoB1F9MMrv39QOOG8korZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.161.83.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:b6:2e:56:ec:fa:2f:63:ed:61:6e:6f:a1:d3:24:60:11:b5:
42:6f:5d:37:5d:16:ff:22:db:2f:71:f7:25:b3:eb:e9:dd:95:
81:99:0a:9c:76:a7:71:e4:ab:f0:8b:e6:cd:bd:97:23:f3:2f:
d6:96:9e:b1:14:bd:a6:d8:83:23:5c:7b:89:8f:7d:1c:0b:aa:
c9:1d:a1:bf:b8:96:40:fa:e8:80:d3:d1:c8:4f:d4:9f:ed:9f:
8e:da:01:7c:b7:7d:60:fc:95:da:a4:4a:9c:cb:c3:35:dc:8a:
9c:0d:f7:53:3b:67:4d:0a:03:33:3d:65:fb:39:d0:d9:2c:7b:
d1:72:80:d3:1a:d6:bd:a9:c8:4c:7e:28:a7:fb:4d:30:fe:e3:
d6:18:f1:44:bd:05:38:90:1b:4d:0a:b5:c6:65:aa:01:99:b8:
0d:30:07:a3:78:e0:aa:98:e5:a1:e9:41:47:a1:2f:eb:02:8a:
de:32:b4:69:76:6f:ce:a7:ab:dd:9b:97:0f:02:bd:e7:57:db:
7a:45:af:a7:96:6d:2d:23:ca:b9:10:78:ea:cc:aa:b0:89:e6:
f4:ed:92:b6:d3:3c:db:e2:f8:c5:49:5b:e0:0c:44:f3:21:d8:
e5:56:e1:ec:30:58:48:0b:9d:ec:ce:12:f4:51:05:12:8f:8b:
6b:2e:34:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:29 2024 by rpki-client on console-ams.rpki-client.org