Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/1-WVhG51iSHCyZTFgRYQ80kxamIA.roa
File: 1-WVhG51iSHCyZTFgRYQ80kxamIA.roa (raw, json)
Hash identifier: zRUXk1S0+jjmy1Kg+beK7wRbCVfBR4AQNyMQqVjwqM4=
Subject key identifier: F9:65:61:1B:9D:62:48:70:B2:65:31:60:45:84:3C:D2:4C:5A:98:80
Certificate issuer: /CN=5ee004befa553ddb35564fb7762b05eb222ecf93
Certificate serial: 01856DC1B06243BC53EC0AE8D9E411E7F5D9
Authority key identifier: 5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/1-WVhG51iSHCyZTFgRYQ80kxamIA.roa
Signing time: Sun 01 Jan 2023 14:34:48 +0000
ROA not before: Sun 01 Jan 2023 14:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8561
IP address blocks: 185.95.96.0/23 maxlen: 24
185.95.98.0/23 maxlen: 24
2a00:1c3e:96::/47 maxlen: 48
2a00:1c3e:98::/47 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:b0:62:43:bc:53:ec:0a:e8:d9:e4:11:e7:f5:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee004befa553ddb35564fb7762b05eb222ecf93
Validity
Not Before: Jan 1 14:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f965611b9d624870b265316045843cd24c5a9880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:b8:60:0e:7c:02:76:12:1a:71:07:06:86:
7a:21:d7:5e:02:4c:31:66:e2:e1:98:fe:93:d5:94:
aa:12:c9:3b:b6:3c:f5:ad:20:60:34:d2:0e:77:00:
3c:c2:be:f9:a2:cb:25:39:aa:41:17:f5:35:cf:55:
bb:b3:0f:c4:99:d7:d5:47:19:49:80:21:8c:18:45:
09:22:9c:80:a2:68:ca:c6:7d:ed:4a:a7:91:61:37:
bb:39:08:60:8a:13:a1:5e:1f:4e:a1:37:e8:20:a1:
4e:42:da:97:6c:0f:3c:a2:f9:c6:a6:02:af:1f:e7:
52:35:75:78:ef:dd:c2:dd:66:6d:02:38:c4:5c:f1:
e8:ef:23:cf:48:e8:4f:c6:04:74:a0:97:71:02:71:
ef:8c:a3:b1:34:6c:ee:e0:c3:33:0f:aa:05:b8:a8:
ca:ee:86:90:63:7e:76:30:f5:7b:07:3f:0b:96:1d:
b6:41:9d:8f:a0:5d:2c:55:7c:c0:5e:d2:66:e9:5f:
91:46:c3:ab:bf:1e:97:42:23:44:03:7b:0d:f2:d8:
2c:ec:10:0b:a3:bf:c7:ab:61:69:51:a1:88:47:93:
80:59:c1:40:02:b8:d6:37:2c:f8:fb:a4:af:4b:47:
2f:30:eb:c7:2c:f5:61:c7:df:a1:89:2f:14:30:69:
a5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:65:61:1B:9D:62:48:70:B2:65:31:60:45:84:3C:D2:4C:5A:98:80
X509v3 Authority Key Identifier:
keyid:5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/1-WVhG51iSHCyZTFgRYQ80kxamIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.96.0/22
IPv6:
2a00:1c3e:96::-2a00:1c3e:99:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
65:98:3a:45:fd:45:3e:36:b0:ba:88:09:e0:2d:a8:0e:44:a9:
a3:c2:e6:c4:89:6f:e1:07:95:03:8a:9a:ef:8f:49:c1:62:cb:
d1:6f:08:2b:90:70:6e:fb:80:53:bd:4a:08:6b:c4:39:bf:e8:
58:23:b2:e3:a7:14:b6:51:56:2f:08:2c:91:9f:ab:ae:d3:be:
79:37:fe:d0:90:06:84:12:df:d4:60:3c:c6:3f:04:49:fa:0a:
2b:a8:46:af:31:e1:39:77:80:aa:26:e8:7a:8f:40:0c:88:e7:
3f:0e:fd:a3:f1:cf:ba:c3:a3:33:5f:66:25:e3:ad:d7:5e:3d:
c4:62:81:3b:ae:44:82:89:bf:64:a6:ee:17:e9:34:f6:61:68:
c2:e8:a3:5f:f3:c8:a1:ed:92:87:e7:7a:f7:bc:46:c5:11:a4:
f5:ef:da:70:2b:d9:1c:74:78:91:5c:b1:56:84:c5:c1:de:6f:
15:72:0d:31:67:98:cb:e5:a9:d1:06:85:9f:84:b6:f2:0f:bf:
47:32:de:4f:a6:41:d9:7b:b2:af:d2:ba:81:94:5d:37:d5:3f:
36:b3:2b:f8:36:a1:e0:84:13:5d:57:06:54:71:15:69:5a:ea:
db:e7:f6:84:33:55:75:5e:fa:bb:b4:d6:cf:dd:94:b4:cb:3c:
55:33:91:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:00 2024 by rpki-client on console-fra.rpki-client.org