Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/rodHxnFfJxVrx6K-d8HDFussc8A.roa
File: rodHxnFfJxVrx6K-d8HDFussc8A.roa (raw, json)
Hash identifier: A9QBW+RJw6++0jBcQnQAeW4kkM2Bhgqn04UvyyBHEW4=
Subject key identifier: AE:87:47:C6:71:5F:27:15:6B:C7:A2:BE:77:C1:C3:16:EB:2C:73:C0
Certificate issuer: /CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Certificate serial: 018D8AC83EAD121C29AE964C76F6BE98A2B1
Authority key identifier: C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/rodHxnFfJxVrx6K-d8HDFussc8A.roa
Signing time: Thu 08 Feb 2024 22:13:15 +0000
ROA not before: Thu 08 Feb 2024 22:13:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58007
IP address blocks: 95.141.249.0/24 maxlen: 24
194.8.28.0/24 maxlen: 24
2a13:4380::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Sep 2024 12:48:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8a:c8:3e:ad:12:1c:29:ae:96:4c:76:f6:be:98:a2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Validity
Not Before: Feb 8 22:13:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae8747c6715f27156bc7a2be77c1c316eb2c73c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:de:63:7b:45:fa:b8:5c:ad:ba:52:3b:20:ba:
2b:63:9f:f6:4b:0a:69:19:ef:14:bc:e0:05:c7:2a:
90:47:0a:74:94:30:9c:6b:9e:24:51:9e:7d:0a:aa:
7c:ec:54:3a:f0:d7:83:73:00:ef:54:30:22:ba:e6:
45:b4:c7:3f:fc:f5:8a:47:60:ab:cc:f5:4a:e8:32:
5d:c3:bc:a8:2b:06:de:c7:6a:8c:02:da:37:df:14:
5a:23:91:e9:26:f9:c3:99:1f:16:7c:bb:d0:d6:65:
65:78:4f:09:54:f7:7f:2d:c8:98:aa:d2:f2:8e:b6:
42:46:0d:95:33:df:01:91:6c:4b:c8:3f:cf:10:50:
32:ca:ce:e8:6c:08:03:3d:41:6d:aa:66:24:4a:08:
e3:26:9d:ce:9a:5e:07:cd:3e:1f:68:e7:fa:0d:58:
30:da:17:07:eb:a6:d6:b2:f3:dd:18:e7:ee:43:84:
1d:53:45:90:ce:b7:ee:4e:0b:43:5e:59:82:7b:17:
83:64:f7:28:00:e7:26:7d:a8:83:24:e7:cc:4c:cb:
d8:74:a6:87:ad:b1:c7:cf:f4:97:0f:c1:3b:18:33:
6e:f5:f8:83:90:74:8e:2b:60:ec:c0:e7:6b:7e:0f:
5a:94:cc:71:35:ec:9a:6e:64:fd:a3:bf:8a:c7:de:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:87:47:C6:71:5F:27:15:6B:C7:A2:BE:77:C1:C3:16:EB:2C:73:C0
X509v3 Authority Key Identifier:
keyid:C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/rodHxnFfJxVrx6K-d8HDFussc8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.141.249.0/24
194.8.28.0/24
IPv6:
2a13:4380::/32
Signature Algorithm: sha256WithRSAEncryption
8f:e9:89:43:9e:54:81:3b:e2:cd:2f:e4:29:b2:7a:fb:e6:92:
7b:a5:79:64:bf:8b:5a:7a:01:e0:1b:cb:cd:3f:ff:cb:90:e6:
f5:d5:87:e2:cd:c7:ad:0d:d1:89:32:a5:7a:fa:f9:7d:ce:bc:
95:13:c8:78:e6:d1:9b:fa:8e:e2:4a:be:b3:c4:14:eb:e6:5f:
46:e4:d2:30:72:9e:8b:39:75:0d:8d:ad:e1:c9:18:a9:4e:f9:
b5:81:64:ca:9f:50:5a:83:c2:02:e3:07:e3:b7:0b:77:d6:37:
59:4e:85:8e:01:79:5b:40:b9:e6:15:89:25:71:7e:67:68:dc:
3f:6d:a9:34:42:4d:dd:9b:e5:31:19:fe:38:9e:99:fb:ad:3e:
f4:5c:b5:73:db:3c:58:2e:c7:27:73:fa:64:45:31:2f:05:19:
b7:4f:4c:ac:d7:a8:86:2c:be:ea:78:7e:61:00:c8:3d:7c:ff:
dc:87:5d:24:0a:b3:ce:7b:f2:74:23:a3:ae:b8:fa:e5:14:6c:
37:bb:e0:f9:7a:b3:9f:ad:43:ac:35:14:b0:ca:b0:26:e9:31:
90:ba:28:38:dc:c0:4b:7e:a7:3a:9e:33:36:92:1a:74:0b:46:
c4:be:4d:f2:7f:30:0d:dd:53:08:a3:aa:75:30:b6:88:32:42:
cd:ba:d5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:41 2025 by rpki-client