Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/3Z4McOcAvtK8GfXcB6xa1N87_qA.roa
File: 3Z4McOcAvtK8GfXcB6xa1N87_qA.roa (raw, json)
Hash identifier: ycR78EJKpB90ACcxGzG2nlL3ZcfCkUe35Ls+UStbf6o=
Subject key identifier: DD:9E:0C:70:E7:00:BE:D2:BC:19:F5:DC:07:AC:5A:D4:DF:3B:FE:A0
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 0188959D474F5AA6F9A089AE8365C8812390
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/3Z4McOcAvtK8GfXcB6xa1N87_qA.roa
Signing time: Wed 07 Jun 2023 11:28:12 +0000
ROA not before: Wed 07 Jun 2023 11:28:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57207
IP address blocks: 95.140.122.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:95:9d:47:4f:5a:a6:f9:a0:89:ae:83:65:c8:81:23:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jun 7 11:28:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd9e0c70e700bed2bc19f5dc07ac5ad4df3bfea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ab:36:44:8d:24:16:b3:32:b6:f9:55:a5:45:
6b:b9:a5:f6:64:25:b4:5d:9b:cc:a2:5f:45:7b:6e:
7d:dd:de:e2:22:b4:01:f2:1d:ab:1b:2d:1a:4f:79:
69:91:a3:33:2b:d8:31:e8:08:2a:f5:34:22:d0:72:
00:31:27:69:7e:6d:0f:fa:9f:05:45:a5:ac:cb:99:
8c:6c:a4:fa:d9:08:54:31:87:65:a8:7e:54:b1:ac:
78:ef:c8:18:04:b4:1b:f3:f8:d6:f8:b0:81:12:d1:
a4:3c:21:95:3e:81:3a:ac:43:98:f5:2c:59:93:8d:
78:fb:37:5a:38:08:18:59:fb:f0:db:d1:9c:cd:e3:
f6:f6:70:66:4c:46:be:16:88:2b:83:e5:af:e1:18:
a8:65:9f:58:a8:6b:80:44:58:bf:9f:80:56:c5:cf:
c4:30:52:2e:ad:99:1a:9d:37:a8:6a:51:ce:7c:af:
0f:6b:66:98:67:d8:c1:9f:0b:b1:44:96:64:00:07:
e1:94:f9:b5:62:3f:19:1e:2c:a6:f1:94:cd:87:de:
a6:9b:08:36:3c:e0:7e:95:97:8f:d4:1c:3d:0e:26:
e0:fb:dd:9d:e0:e4:6b:db:60:d7:ef:c7:f4:fc:2a:
8f:0e:53:ba:9a:5d:5f:cd:6d:d4:eb:49:59:33:c6:
66:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9E:0C:70:E7:00:BE:D2:BC:19:F5:DC:07:AC:5A:D4:DF:3B:FE:A0
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/3Z4McOcAvtK8GfXcB6xa1N87_qA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.140.122.0/24
Signature Algorithm: sha256WithRSAEncryption
72:c1:f0:cd:08:dc:b5:40:dc:7f:4b:02:a1:74:71:59:94:1e:
33:03:76:e3:3d:66:d3:ad:1a:af:11:11:4b:65:3f:ec:62:5e:
af:e2:60:6f:bd:91:58:fc:6d:2d:76:a8:5e:8b:d0:39:ca:ba:
fa:f3:74:6a:47:69:1d:05:d4:c6:5d:98:6e:4c:b6:ad:ca:a2:
83:fe:ac:b0:01:73:7e:f1:28:19:ae:36:8f:84:1e:f6:e2:92:
20:9b:ca:fc:4d:1a:10:8f:13:38:f9:a8:be:20:f7:9f:1a:cd:
c4:0e:57:db:cf:53:35:ce:dc:a2:ce:46:1d:81:98:14:20:40:
01:8a:33:72:94:df:26:65:e7:ef:0f:9b:f3:cf:ba:24:31:a9:
d4:17:b2:44:24:08:01:04:5b:b5:b0:95:42:94:a3:80:c7:bb:
a0:2a:8c:f8:89:63:28:5a:ee:19:02:66:7d:84:cb:7b:56:b1:
97:88:34:12:af:fd:19:81:29:88:77:40:5d:b9:19:e2:71:e5:
83:69:b4:c5:7e:e7:18:c8:51:82:e1:61:e1:cc:f5:cf:8b:df:
3d:07:5f:de:32:e2:17:62:26:36:d5:29:58:07:8b:b8:93:5c:
d2:eb:4e:45:16:2d:49:fb:3b:3e:b4:72:a4:3e:ec:b3:d2:3b:
9d:20:fa:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:38 2024 by rpki-client on console-ams.rpki-client.org