Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/OsHw8q2Qv7CksUS_Tk-UdjOG8ys.roa
File: OsHw8q2Qv7CksUS_Tk-UdjOG8ys.roa (raw, json)
Hash identifier: Dfh8P28vdnWsY0ZVSresRhcZxij1NAH4p3A/f46a4NM=
Subject key identifier: 3A:C1:F0:F2:AD:90:BF:B0:A4:B1:44:BF:4E:4F:94:76:33:86:F3:2B
Certificate issuer: /CN=bda96d02a822f46253c2aee680441d5ac27c3df5
Certificate serial: 0185710C0748DB637ACF6A0C2A95B7BD0487
Authority key identifier: BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/OsHw8q2Qv7CksUS_Tk-UdjOG8ys.roa
Signing time: Mon 02 Jan 2023 05:54:51 +0000
ROA not before: Mon 02 Jan 2023 05:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5413
IP address blocks: 95.172.224.0/19 maxlen: 24
212.105.160.0/19 maxlen: 24
2a00:10ef::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:07:48:db:63:7a:cf:6a:0c:2a:95:b7:bd:04:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda96d02a822f46253c2aee680441d5ac27c3df5
Validity
Not Before: Jan 2 05:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ac1f0f2ad90bfb0a4b144bf4e4f94763386f32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:46:cd:9a:ae:90:36:ba:00:e5:d7:b7:ad:66:
33:24:3b:d8:6a:51:e9:d7:be:64:bf:5a:94:e7:84:
04:5b:9c:cb:34:29:71:92:c5:bf:ab:39:a0:20:44:
8d:8d:05:02:dc:4b:71:11:f9:2a:d5:0b:d0:91:d8:
b6:c8:20:39:e0:86:5a:84:e8:f5:26:9b:f1:eb:46:
41:8a:29:57:9e:3c:4c:10:50:18:db:7f:81:e5:fd:
00:72:27:a3:52:62:94:71:92:61:3f:f5:c3:8b:e9:
b8:a9:bb:92:e1:c8:5c:c2:f9:8b:d9:6d:33:48:49:
a2:61:f4:40:be:88:9f:5b:fb:33:59:65:16:1b:60:
71:3e:65:7e:c6:e3:26:3a:fa:be:b5:a0:75:f7:68:
1f:10:99:ab:7a:72:af:a2:24:c1:69:b1:90:7a:34:
77:9f:9d:42:20:4e:fb:6c:cb:5f:32:5a:c7:7b:6f:
36:56:89:bd:a0:04:9d:e2:95:96:c6:5b:8c:1f:72:
a9:d3:39:85:93:52:24:f7:84:12:f3:32:6c:0c:0a:
df:23:f7:e1:a7:1f:67:b6:5a:3f:6b:94:68:d8:cb:
dc:25:54:5f:aa:d2:de:41:02:4e:7b:01:0d:15:a4:
4e:60:91:be:b9:a2:de:e6:02:d0:5f:c0:b0:bd:45:
14:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C1:F0:F2:AD:90:BF:B0:A4:B1:44:BF:4E:4F:94:76:33:86:F3:2B
X509v3 Authority Key Identifier:
keyid:BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/OsHw8q2Qv7CksUS_Tk-UdjOG8ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.172.224.0/19
212.105.160.0/19
IPv6:
2a00:10ef::/32
Signature Algorithm: sha256WithRSAEncryption
5d:5c:48:20:17:09:b7:82:c5:e3:fd:ed:a0:8c:88:b3:a8:16:
b5:f2:7c:c7:b0:ce:c7:1a:a7:5d:50:67:a1:fd:87:f2:0f:cb:
92:ac:3f:ce:1c:2e:7e:14:cf:2b:46:b6:da:4f:72:9b:6f:39:
c9:9a:cd:6e:c5:26:88:9a:5b:96:7c:bb:82:f3:7f:f8:97:9e:
c9:a7:9d:ce:95:93:14:1f:43:1c:d3:1d:1e:c4:a3:4c:a3:de:
62:76:1d:62:72:63:27:45:7f:7e:80:d4:11:e4:5a:90:6d:31:
f2:94:b6:5f:f0:d9:3a:48:64:d7:2b:69:0e:32:c7:59:c7:08:
ab:fe:1b:df:69:0f:2d:48:ba:f6:64:f3:89:6f:af:f2:bb:39:
5c:95:ca:c9:0c:4e:bb:e4:b5:d7:e2:16:a0:f2:e6:43:a2:3d:
b7:67:cb:77:d3:7c:76:27:5e:91:36:65:e8:91:d4:23:c2:06:
36:33:b4:43:21:cb:de:e7:89:b8:4e:0a:f5:15:49:30:35:74:
6c:54:ea:89:e4:40:c9:6e:aa:44:64:20:a3:96:77:56:8d:cf:
3a:2a:a4:e5:2e:f6:72:a1:66:c5:4b:d0:59:bf:d0:ff:e8:3f:
47:b4:9e:96:95:0b:3a:05:94:23:fa:38:05:7a:4d:d5:19:66:
51:e8:2a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:11 2024 by rpki-client on console-fra.rpki-client.org