Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/12_4OcM6Cpzu3gGYTRNRwUkjjTs.roa
File: 12_4OcM6Cpzu3gGYTRNRwUkjjTs.roa (raw, json)
Hash identifier: Se8c/r69OSY0i61DoyPDbkmKxpHoiAh3rorb2q0jWqI=
Subject key identifier: D7:6F:F8:39:C3:3A:0A:9C:EE:DE:01:98:4D:13:51:C1:49:23:8D:3B
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 019424B3B0CC62A7A369364E73C7FF202EF2
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/12_4OcM6Cpzu3gGYTRNRwUkjjTs.roa
Signing time: Thu 02 Jan 2025 01:49:03 +0000
ROA not before: Thu 02 Jan 2025 01:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54903
IP address blocks: 95.164.140.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Feb 2025 21:11:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b0:cc:62:a7:a3:69:36:4e:73:c7:ff:20:2e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 2 01:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d76ff839c33a0a9ceede01984d1351c149238d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:af:48:ee:42:52:e5:93:d1:fd:b4:de:20:96:
4c:55:8a:cd:32:15:c4:62:76:7e:a7:96:35:04:87:
9a:6c:4f:88:ec:79:60:69:02:bf:dc:a0:ea:b8:81:
33:e2:43:6a:76:3a:bb:02:17:2f:28:99:00:59:b9:
9f:80:63:c0:cb:11:9e:f3:5d:a8:68:87:bf:0a:cf:
88:fa:59:b1:72:fe:89:20:17:c1:a0:23:13:a8:70:
d8:b6:90:57:b7:8f:2e:fa:2f:7c:a9:0c:f5:60:64:
d5:d2:ad:b0:af:df:7f:06:3c:dc:4e:a9:38:b6:ec:
40:5d:1d:f0:21:21:98:64:f9:9b:1b:5f:3d:21:0d:
d4:82:d2:a0:a2:1f:0f:0b:ac:8f:12:c0:66:a9:53:
c8:33:d7:b5:eb:7d:03:ef:d5:ce:68:b0:c2:d6:75:
00:80:7f:f1:69:7b:0f:52:09:e4:f6:ac:49:fc:2b:
43:12:0b:64:b2:8d:1c:c3:93:c5:f3:6c:16:08:ac:
1c:36:e9:82:09:a4:09:9d:a2:c5:a7:95:67:f3:fc:
b7:42:0d:25:a9:ea:c5:56:49:6f:67:f6:b3:02:c0:
5b:16:f7:a1:fd:1c:1e:77:b9:2c:90:cf:27:f0:0f:
b7:8f:a7:44:e8:39:9d:ea:8c:ee:ee:f4:8a:af:cd:
58:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6F:F8:39:C3:3A:0A:9C:EE:DE:01:98:4D:13:51:C1:49:23:8D:3B
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/12_4OcM6Cpzu3gGYTRNRwUkjjTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.140.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:fa:b2:49:f7:ce:c0:65:a5:57:ec:85:0a:f9:fb:cc:63:ab:
c5:c3:af:c3:0e:ab:d1:3c:e0:91:2a:bd:59:74:d0:93:1d:66:
8a:7d:16:a7:f7:cd:53:bd:cd:58:8f:3d:25:4e:84:04:40:bd:
04:2a:5d:4c:da:25:e9:80:64:a1:45:03:75:ad:88:2c:f7:04:
44:ec:21:66:3a:0e:60:b0:3a:34:02:54:60:3d:99:e7:5d:84:
31:69:ec:88:51:76:b0:ec:6b:c3:9c:9d:13:28:20:76:46:d4:
36:17:68:2a:c3:4a:c3:fe:6a:9a:03:c4:b9:7d:7d:ca:d4:83:
74:09:8c:7b:22:a7:f1:4e:3d:09:c1:eb:76:0c:ac:c4:c7:bf:
4c:45:59:ff:66:e1:6c:1b:0d:a6:13:f1:a6:af:33:04:45:0b:
b7:e4:9d:6e:e1:43:4a:f9:56:61:26:fa:61:8b:85:cb:2a:55:
62:2f:47:ac:41:35:6e:2e:5d:4a:3f:8f:53:fa:04:1e:c3:cf:
21:7c:d3:03:ce:89:11:ee:44:69:77:d0:45:e0:e0:37:a5:24:
aa:29:04:c1:b2:ea:c9:2c:8b:8b:b7:ce:c2:e6:66:17:a0:df:
b2:43:d6:08:7d:d7:0d:d3:4c:67:2b:69:ec:08:5f:09:83:2a:
00:08:31:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:29:22 2025 by rpki-client