Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/g6fUmqbVsHk0N2YOJW6h0gQ5r3U.roa
File: g6fUmqbVsHk0N2YOJW6h0gQ5r3U.roa (raw, json)
Hash identifier: nQwGSZ5DzKixTRWFwRUoMaZ1CLFK44ekxCAxxLIFqN4=
Subject key identifier: 83:A7:D4:9A:A6:D5:B0:79:34:37:66:0E:25:6E:A1:D2:04:39:AF:75
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 019243D4BF455BA27B77B6D9A059101BCA3D
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/g6fUmqbVsHk0N2YOJW6h0gQ5r3U.roa
Signing time: Mon 30 Sep 2024 16:47:49 +0000
ROA not before: Mon 30 Sep 2024 16:47:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 95.164.196.0/22 maxlen: 24
95.164.224.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Nov 2024 13:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:43:d4:bf:45:5b:a2:7b:77:b6:d9:a0:59:10:1b:ca:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Sep 30 16:47:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83a7d49aa6d5b0793437660e256ea1d20439af75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e9:e1:1f:1e:7c:6e:98:1e:a4:6a:47:92:bf:
32:f9:94:05:92:37:ff:76:81:8c:14:20:6f:d9:bb:
af:8d:3c:60:dc:f5:44:b6:53:85:40:7e:0f:5e:5d:
9c:d8:d7:7d:a3:7d:f1:4f:93:34:3a:12:1c:51:79:
bf:af:4c:9c:60:05:d8:f3:cf:2a:94:af:28:56:16:
99:93:75:98:f3:1e:59:88:65:11:f4:c8:18:f3:44:
3e:95:ea:b8:a4:96:02:93:fa:e3:2c:71:ea:30:fe:
05:ce:23:f8:b2:17:eb:17:48:e9:e5:c9:80:65:20:
df:dd:af:47:be:ca:45:3f:3e:be:a8:30:3f:24:46:
51:90:1a:b3:d2:94:e8:b3:2b:e2:97:91:56:06:b8:
ad:66:ae:8e:1f:91:fe:13:69:9f:11:14:33:48:74:
3f:3e:af:80:c5:ab:84:14:a3:bc:eb:00:a2:fc:4a:
66:de:6c:b8:ae:8b:38:9e:2f:42:d5:e5:ad:ef:00:
92:af:cc:6f:fc:34:2b:21:58:4f:ad:ff:99:0b:c2:
bc:92:38:a9:1a:5b:95:e0:3b:ab:02:98:9d:e9:72:
fe:97:49:d9:51:05:f2:19:0c:22:e9:bd:fa:85:0c:
36:56:80:94:ae:c6:8c:b8:fe:f7:44:06:e5:f6:c0:
d1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A7:D4:9A:A6:D5:B0:79:34:37:66:0E:25:6E:A1:D2:04:39:AF:75
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/g6fUmqbVsHk0N2YOJW6h0gQ5r3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.196.0/22
95.164.224.0/22
Signature Algorithm: sha256WithRSAEncryption
87:0a:1e:11:cc:a5:de:64:0c:08:a4:f8:a4:8a:b0:31:9b:8a:
40:13:91:1c:51:8c:af:63:94:f7:97:ca:1a:ee:0d:9c:c0:ce:
7f:d9:d4:32:9b:01:11:82:00:ab:cc:a1:ec:22:8f:26:c8:ff:
b8:0f:20:ed:ee:dc:68:3a:f9:5f:46:a1:77:17:c6:b1:81:2a:
46:49:40:36:7c:da:76:75:82:2e:1a:4b:e4:54:32:52:a6:a8:
6a:5c:b5:67:37:7b:0e:13:8f:69:a9:3f:4e:ea:b2:c6:a7:8d:
06:7c:a3:76:9d:af:03:d2:21:48:b3:9f:95:8a:67:02:24:b2:
e8:69:f6:b5:3e:b7:e4:1e:10:62:c8:5c:cc:65:d2:f1:5c:76:
05:d5:d0:b8:ed:51:d2:74:26:bc:d7:08:9a:46:53:73:ef:3e:
e4:11:b3:82:3f:b6:f9:c2:54:c8:d7:cb:29:56:cf:49:2d:31:
66:ff:2e:10:63:b6:5e:08:ec:f3:3a:dd:cf:c9:00:ec:04:8d:
59:d4:b5:60:d7:b5:5f:68:3d:56:c9:f7:6d:4c:30:c7:56:59:
07:ab:89:93:82:ba:83:fb:74:e8:a8:e6:32:cd:00:45:f2:cf:
7c:78:f0:ff:86:83:56:b6:1d:01:aa:64:0c:8a:b5:d2:bb:9e:
b7:5a:96:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:04 2025 by rpki-client