Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/_yS_R-vgyImjmrRgpAxpRCjUxsk.roa
File: _yS_R-vgyImjmrRgpAxpRCjUxsk.roa (raw, json)
Hash identifier: /tuI6Dcg5JDqFmC+KWdEJg8vxLgHqieHmAyHrn4tdss=
Subject key identifier: FF:24:BF:47:EB:E0:C8:89:A3:9A:B4:60:A4:0C:69:44:28:D4:C6:C9
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 0189935857FA3E9036931012BB8A2C91215C
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/_yS_R-vgyImjmrRgpAxpRCjUxsk.roa
Signing time: Wed 26 Jul 2023 17:56:27 +0000
ROA not before: Wed 26 Jul 2023 17:56:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399150
IP address blocks: 95.164.224.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:93:58:57:fa:3e:90:36:93:10:12:bb:8a:2c:91:21:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jul 26 17:56:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff24bf47ebe0c889a39ab460a40c694428d4c6c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:62:02:9b:d4:62:ff:0f:6a:78:70:61:d5:52:
fa:1b:6e:fb:7f:dc:6b:a0:22:b7:29:d7:54:84:29:
25:1b:91:53:9f:b0:71:84:f4:4a:8b:42:bd:7c:5d:
0f:6c:a3:6d:24:9a:fb:f0:05:1a:00:57:31:8b:a2:
30:74:75:00:85:06:e1:af:d8:b4:db:82:fd:5e:ad:
ed:14:75:b8:22:42:43:a2:4e:74:70:1e:7a:68:98:
ed:77:75:39:b4:da:a6:aa:51:98:54:ad:e3:56:f9:
47:49:d7:05:be:a1:69:7d:bb:51:62:4c:38:1f:6e:
3c:ba:26:ad:bb:3c:76:43:6f:17:15:80:61:b0:15:
96:a1:7d:92:e6:05:16:bb:10:39:0b:5e:f0:84:ff:
3b:47:bb:4a:8b:0a:e9:2f:a0:29:22:77:f4:f7:48:
f8:68:a3:6a:91:f6:eb:a0:0d:88:55:56:2e:06:f3:
5c:1e:45:62:45:60:4f:76:82:4f:a5:d5:01:32:5a:
a0:b1:65:d3:e5:9b:08:79:d2:7d:a9:7e:f7:c2:2e:
05:16:d4:5b:fa:58:43:4b:b5:fe:c1:33:43:59:89:
b5:93:f9:29:f1:1e:97:f9:ee:74:b1:5a:85:f3:b8:
3d:59:a4:a2:69:10:13:2b:2d:2a:bf:3d:d2:2e:77:
bf:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:24:BF:47:EB:E0:C8:89:A3:9A:B4:60:A4:0C:69:44:28:D4:C6:C9
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/_yS_R-vgyImjmrRgpAxpRCjUxsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.224.0/22
Signature Algorithm: sha256WithRSAEncryption
04:a8:c3:79:2f:b7:6c:8d:d1:79:62:1d:fa:1f:e2:8c:0f:dd:
17:87:d6:b1:8a:83:de:78:6f:d2:97:05:28:b4:6a:8d:26:28:
b0:36:9e:86:07:6e:ea:b5:3f:a4:0d:a5:20:b5:5d:6b:ee:e6:
2b:53:48:c8:95:9a:58:01:08:58:62:46:75:54:d0:16:f5:33:
ad:d2:fe:e0:b2:a4:74:a2:90:1a:a0:89:68:aa:4c:cd:b3:88:
78:a1:62:b8:51:4c:78:56:0e:bd:0e:a0:21:1c:94:bc:50:aa:
e2:d3:44:a3:ba:49:25:57:2f:70:16:5f:d8:cc:2b:13:c9:98:
5a:c1:a8:79:1a:81:a8:e3:a2:50:33:e4:e4:a7:25:89:44:64:
13:8a:c7:bd:76:1e:45:e2:39:fc:82:fc:00:2b:a6:37:46:41:
09:79:49:9c:8d:d1:d0:6e:80:d0:38:31:85:97:48:9d:d3:0f:
35:e5:ab:bf:0e:b1:cf:67:27:d3:0c:fd:5e:5d:9f:04:f6:ed:
85:63:cb:f3:5a:da:be:9b:dd:fa:1b:a1:72:dd:7e:4d:4d:54:
65:c2:01:29:a6:98:58:c6:06:db:7c:de:a9:2e:ec:0d:8c:21:
c3:6d:4b:cf:8f:8d:f8:cb:17:34:53:a3:91:c6:e8:3d:7e:2e:
0d:f9:a4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:49 2024 by rpki-client on console-ams.rpki-client.org