Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bNFmk6CwatetUkkosRh8U6LD0m8.roa
File: bNFmk6CwatetUkkosRh8U6LD0m8.roa (raw, json)
Hash identifier: zge8tsHB0JZ8cBLTkMMm7V0yq780jYQdvQUqcclzb68=
Subject key identifier: 6C:D1:66:93:A0:B0:6A:D7:AD:52:49:28:B1:18:7C:53:A2:C3:D2:6F
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 019424B3BA97906C26CFC51B62D41319D261
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bNFmk6CwatetUkkosRh8U6LD0m8.roa
Signing time: Thu 02 Jan 2025 01:49:06 +0000
ROA not before: Thu 02 Jan 2025 01:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397044
IP address blocks: 95.164.228.0/22 maxlen: 24
95.164.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Feb 2025 21:11:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ba:97:90:6c:26:cf:c5:1b:62:d4:13:19:d2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 2 01:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cd16693a0b06ad7ad524928b1187c53a2c3d26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c0:69:48:16:0d:12:d2:84:56:6a:63:32:29:
a0:99:62:b7:c2:98:2b:9e:6c:8a:0b:15:3f:c0:97:
82:a4:5b:b0:b0:13:69:15:ec:21:2a:72:3a:ea:09:
51:08:94:69:27:45:a3:1f:31:12:7c:b8:f1:b3:3f:
32:27:e9:e2:7d:af:08:ed:e4:29:2d:fa:36:a9:b1:
ca:da:37:db:b3:f5:26:76:81:ae:90:eb:68:03:87:
d8:e6:1a:c5:40:bd:dd:46:ca:19:2c:a1:35:5f:93:
c7:b6:a3:9f:74:28:bc:a7:cb:ce:27:a7:1b:44:f3:
53:b7:7a:bf:dc:25:ed:4c:9a:88:5f:5d:4e:a2:85:
b7:d9:bf:c5:08:6e:1c:b2:2a:2e:81:e0:0a:cb:24:
d9:61:7b:9b:35:a4:e5:bd:60:dd:98:37:69:67:88:
67:89:75:b9:9b:07:47:4d:08:8a:e8:e5:07:a4:2e:
17:68:6b:72:98:1c:44:47:e4:32:60:7d:ac:fa:dc:
cf:87:b6:d3:68:55:fd:61:79:6d:dd:d8:22:8f:c7:
3b:85:0d:94:47:1c:12:3b:73:7a:b6:1a:43:68:02:
3f:b4:15:41:ae:da:57:a8:fe:d0:6e:d2:f3:d3:ba:
2f:45:91:31:b6:11:78:1e:95:f7:eb:1c:78:98:45:
66:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D1:66:93:A0:B0:6A:D7:AD:52:49:28:B1:18:7C:53:A2:C3:D2:6F
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bNFmk6CwatetUkkosRh8U6LD0m8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.228.0-95.164.235.255
Signature Algorithm: sha256WithRSAEncryption
39:d3:0e:68:0b:d5:f3:0d:b4:08:2c:54:12:6a:d0:fd:17:e5:
a1:59:21:d7:59:e7:2f:61:43:91:74:57:51:da:99:11:61:eb:
55:99:a9:7d:cf:fb:5b:b4:d1:3d:c3:f1:9c:0c:83:37:86:83:
dc:53:0b:4d:45:eb:8b:be:08:db:2a:ba:74:86:e1:72:33:7f:
83:2e:05:e0:0d:48:c4:ed:81:ec:e4:a9:ef:d6:d2:df:47:a2:
f2:b1:84:2b:92:f0:17:b6:a1:4d:d0:9d:bf:91:76:c4:90:46:
8c:f1:19:2d:6d:5b:e1:f7:53:e0:f8:9d:69:a9:5e:c8:82:f1:
a8:c3:78:64:70:55:3f:7f:79:df:5e:aa:a4:f3:85:26:6c:f9:
b5:89:21:29:bf:8e:e7:a0:f8:c0:cd:93:e0:95:e8:cf:5a:bb:
75:f4:d4:b6:80:a5:8f:ee:a2:51:c6:ea:c9:14:4d:04:75:d7:
4e:82:fa:33:c8:ed:7b:1b:99:49:b0:54:83:4c:cb:05:1d:5e:
8e:b3:a2:99:7a:e9:33:b6:d7:36:a4:21:14:c5:05:0d:4e:b8:
5d:5d:ee:39:e5:a1:84:f5:f0:ff:52:bc:0f:05:19:68:ed:d0:
32:2f:1f:11:ec:1d:64:01:bc:26:41:ef:6a:e3:76:49:ab:a1:
01:d4:0d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:52:38 2025 by rpki-client