Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/11lLX1VCspwv4dr7yTOWuA5-9AU.roa
File: 11lLX1VCspwv4dr7yTOWuA5-9AU.roa (raw, json)
Hash identifier: QEy1+johLzlmVXMAhHcEa1l3YtWPVUKyKbbS7xQ/ZK4=
Subject key identifier: D7:59:4B:5F:55:42:B2:9C:2F:E1:DA:FB:C9:33:96:B8:0E:7E:F4:05
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 01886B895E61F935BAFC63F2E894556115D5
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/11lLX1VCspwv4dr7yTOWuA5-9AU.roa
Signing time: Tue 30 May 2023 07:22:24 +0000
ROA not before: Tue 30 May 2023 07:22:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 394814
IP address blocks: 95.164.112.0/20 maxlen: 24
95.164.144.0/20 maxlen: 24
94.131.80.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Oct 2023 17:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6b:89:5e:61:f9:35:ba:fc:63:f2:e8:94:55:61:15:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: May 30 07:22:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7594b5f5542b29c2fe1dafbc93396b80e7ef405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fb:e8:14:a1:5c:75:76:23:68:ae:dd:81:73:
f7:b3:42:aa:82:57:a7:88:20:a9:eb:51:0c:f6:ae:
2e:a2:7c:df:5b:c6:1e:f3:68:30:98:ac:a6:6e:1d:
d7:f8:48:c2:dc:62:c4:26:16:92:29:60:4f:7f:8d:
a2:2b:20:fd:26:45:31:86:8c:fb:eb:88:f2:9d:0c:
f6:e0:b6:e9:98:c5:79:75:cf:69:64:25:91:ce:30:
2d:d3:52:68:f2:18:e2:4a:e2:4b:2b:ec:00:15:c6:
e4:64:4b:ce:82:8d:3d:c6:d8:fe:f4:4a:3b:b4:25:
93:31:c0:9b:a7:bc:e4:ee:0a:34:9b:e4:9e:2f:9e:
22:65:89:eb:4d:6a:40:8c:8a:4f:9f:f9:ca:5a:70:
c1:ca:a7:fd:7a:3d:74:9b:5d:55:49:09:06:8f:ba:
f5:e7:da:96:db:18:32:fa:0f:22:2e:86:d6:b7:6b:
db:f8:5e:01:54:04:ae:0f:20:23:03:91:1e:38:46:
dc:f0:74:2a:15:9f:3d:0a:96:0d:fb:3b:5d:ed:11:
49:00:05:47:fa:26:87:a8:7a:da:0d:8b:d9:54:b1:
c1:a3:f0:16:be:5f:6d:d6:8c:32:79:1f:79:aa:a2:
b1:f4:34:99:c6:99:aa:b2:5f:51:76:61:df:24:94:
cd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:59:4B:5F:55:42:B2:9C:2F:E1:DA:FB:C9:33:96:B8:0E:7E:F4:05
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/11lLX1VCspwv4dr7yTOWuA5-9AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.80.0/20
95.164.112.0/20
95.164.144.0/20
Signature Algorithm: sha256WithRSAEncryption
95:8c:31:0d:4c:a8:3e:9c:68:68:28:d2:37:85:8f:58:4c:ec:
48:cb:c9:ed:5f:a7:58:27:9e:22:8c:b2:e0:c3:a2:56:13:32:
53:49:b1:b5:8e:7c:f5:08:a4:93:d0:ec:64:64:f3:3c:f0:24:
11:99:0f:51:5f:9e:4b:18:0f:45:2d:e8:f6:b9:c9:dc:2b:af:
19:0a:29:b2:c6:d5:3b:d1:d7:3f:aa:93:ef:3c:4b:f5:eb:4e:
30:7b:5e:c8:f3:1c:19:71:dc:c5:68:0a:a8:be:a4:29:13:ef:
33:a9:af:c9:9c:3a:fa:43:57:e4:e2:82:40:6a:6e:d3:4c:4c:
9f:86:80:54:f8:93:e6:fb:96:e8:9c:b6:8f:4f:7d:0f:cc:59:
fc:00:76:df:bc:e0:35:68:3e:a5:8a:98:dc:e1:c7:e1:05:6e:
b9:33:b9:8e:28:73:ac:51:93:75:73:3f:59:30:7d:34:af:86:
fe:23:b0:2a:3d:c2:de:7a:75:7e:5a:53:2a:8e:63:8e:63:33:
55:a9:94:3d:7c:35:39:db:1f:62:4c:0a:c4:62:f2:d3:79:ff:
c2:60:5f:0e:dc:95:4e:4f:6a:ef:c3:e2:86:0c:77:d7:d6:2c:
a2:0e:c4:80:9d:60:9d:94:9e:e4:b8:54:90:65:ed:fb:94:8c:
09:a2:46:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:57 2024 by rpki-client on console-fra.rpki-client.org