Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/r2tnZo5M0-0DezuKRry_SCNULlg.roa
File: r2tnZo5M0-0DezuKRry_SCNULlg.roa (raw, json)
Hash identifier: HqVNPd7SXJa1v+s61XvoAE6eEav18snAWVtq5UA7kSo=
Subject key identifier: AF:6B:67:66:8E:4C:D3:ED:03:7B:3B:8A:46:BC:BF:48:23:54:2E:58
Certificate issuer: /CN=5ee004befa553ddb35564fb7762b05eb222ecf93
Certificate serial: 01856DC1B225E3B0D2949DA3438ACAA6C746
Authority key identifier: 5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/r2tnZo5M0-0DezuKRry_SCNULlg.roa
Signing time: Sun 01 Jan 2023 14:34:48 +0000
ROA not before: Sun 01 Jan 2023 14:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50611
IP address blocks: 185.95.96.0/23 maxlen: 24
185.95.98.0/23 maxlen: 24
2a00:1c3e:96::/47 maxlen: 48
2a00:1c3e:98::/47 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:b2:25:e3:b0:d2:94:9d:a3:43:8a:ca:a6:c7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee004befa553ddb35564fb7762b05eb222ecf93
Validity
Not Before: Jan 1 14:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af6b67668e4cd3ed037b3b8a46bcbf4823542e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fe:df:1e:f0:ff:b4:09:e0:13:a9:bd:55:f4:
a3:94:e3:5a:e3:8f:e8:b4:d8:63:a9:e4:1b:c5:7c:
bc:ef:34:50:76:8c:65:2a:67:fe:1d:a7:1b:ce:e8:
0f:43:80:0e:e6:38:e8:72:9f:2a:a4:bf:1f:ed:40:
6e:c9:c0:9e:c6:7c:c3:34:d6:98:57:a6:9e:cb:39:
a4:60:ee:72:3b:74:db:2b:68:82:66:bb:0f:33:0d:
80:0c:e6:0a:72:b8:9d:2f:b2:ed:72:96:08:41:fa:
b8:f4:8d:79:7c:6c:ec:1b:f6:96:d1:89:ac:f4:30:
93:f0:e3:ef:31:4e:df:4e:b9:e9:e2:f9:1c:cd:a5:
c8:b2:48:63:1f:7f:fe:dc:d3:cd:cb:49:1f:0f:8e:
69:ba:ee:73:24:d3:83:84:22:47:f2:bb:09:5a:fe:
ba:e4:84:2c:8e:c4:4a:78:e8:34:c2:7e:ae:65:56:
97:fe:d7:00:d1:d2:40:6c:38:88:8a:44:c2:6d:7d:
4b:b7:9b:af:d7:2a:d5:95:00:0a:96:9a:72:eb:0e:
5d:4b:32:1f:0d:8e:2d:d8:30:2c:db:0b:e9:0b:b2:
7d:3f:93:36:f4:f8:3d:40:ae:5e:48:14:f2:59:d9:
dc:d9:b7:32:4b:ef:37:7a:f3:e1:cb:d8:c8:bd:49:
72:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6B:67:66:8E:4C:D3:ED:03:7B:3B:8A:46:BC:BF:48:23:54:2E:58
X509v3 Authority Key Identifier:
keyid:5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/r2tnZo5M0-0DezuKRry_SCNULlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.96.0/22
IPv6:
2a00:1c3e:96::-2a00:1c3e:99:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3c:72:48:5e:50:4a:33:49:6b:e6:24:68:8f:9c:af:1b:58:4a:
7a:a1:c1:1e:5b:57:a4:d0:df:4f:9b:fa:84:f8:8e:91:e4:af:
d1:f3:65:51:f9:55:42:cb:db:26:7b:f9:f6:21:f2:db:3b:18:
49:6c:c2:32:cc:cd:91:1e:0e:c2:cd:8e:b4:c4:65:87:12:ae:
67:92:96:d6:9f:db:9f:e1:7f:cd:bf:51:66:70:9c:e8:84:fd:
97:4b:cc:98:81:b5:77:de:ea:6d:c5:fc:9e:8f:67:e8:3c:94:
e9:68:db:6f:2d:6f:9a:02:58:2a:95:c9:4a:25:bf:d3:ee:f6:
e7:e8:ad:7a:31:25:b0:b2:f6:8d:02:cb:13:a7:87:09:d8:2e:
2e:4e:41:65:1b:bb:f9:dd:cc:55:7e:10:81:ff:30:74:bf:4f:
9d:69:90:4f:5f:fb:81:c2:71:3b:ae:de:11:cd:88:96:f8:db:
ad:45:f2:b5:4f:c3:2b:1d:b3:aa:37:1f:57:47:eb:03:7f:91:
84:31:f6:6a:97:fe:15:a0:c1:5f:15:c5:bf:dc:77:9a:a7:98:
91:1b:0a:48:af:87:f2:9e:62:02:ea:5d:c4:c3:48:4e:d3:c1:
fa:9e:39:21:39:05:6e:a7:2d:38:f4:92:14:ff:ed:4a:2a:70:
04:b4:dc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:14 2024 by rpki-client on console-ams.rpki-client.org