Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/v8MY4F-df271PxG1f_ak-ut7gZE.roa
File: v8MY4F-df271PxG1f_ak-ut7gZE.roa (raw, json)
Hash identifier: 44MtdM92mbu7piXcwfQ71KTESRs15PnFv2+ghGcAZro=
Subject key identifier: BF:C3:18:E0:5F:9D:7F:6E:F5:3F:11:B5:7F:F6:A4:FA:EB:7B:81:91
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 018CC64AE038758D01DF5027A9FD17EEC9EB
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/v8MY4F-df271PxG1f_ak-ut7gZE.roa
Signing time: Mon 01 Jan 2024 18:30:45 +0000
ROA not before: Mon 01 Jan 2024 18:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 394814
IP address blocks: 95.164.144.0/20 maxlen: 24
94.131.80.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Sep 2024 14:08:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:e0:38:75:8d:01:df:50:27:a9:fd:17:ee:c9:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 1 18:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfc318e05f9d7f6ef53f11b57ff6a4faeb7b8191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:34:e5:06:ca:70:d4:0d:8e:ff:43:c4:5e:71:
1e:bd:b3:eb:ff:27:cc:eb:a7:bd:54:2e:4b:14:4d:
40:36:95:95:60:71:04:9e:0e:c7:ac:66:b1:df:57:
50:4b:ed:a3:b8:5b:35:59:da:43:f8:3c:be:bd:1d:
42:23:67:aa:72:d4:ee:10:e9:d8:5e:31:ec:e9:18:
b4:c9:92:41:71:6e:1d:5f:e8:d9:c4:9c:fd:b8:e7:
59:02:e6:85:1e:c9:c2:27:ae:f1:fc:bb:6b:a9:4c:
08:54:1c:26:6c:44:12:78:33:ef:c8:f0:f7:9c:f3:
2a:31:36:6f:5c:5c:f1:0b:b6:37:6a:6a:dc:9d:32:
86:9f:d7:93:45:de:22:3f:f8:96:9b:fa:13:4c:90:
36:4c:2c:b9:49:0e:ec:bc:de:5f:df:c3:d0:35:b6:
da:2a:fe:9d:38:ae:e5:51:6c:f5:8b:8e:d5:8f:75:
48:d7:ec:45:23:48:1d:dc:73:c9:93:66:a1:2b:b2:
b0:be:00:bc:49:5d:f4:c9:35:90:65:be:5a:14:3e:
bd:dc:ba:4a:bb:22:29:49:6b:65:61:fc:ce:b7:d3:
c5:10:0d:33:df:88:fb:f6:9c:7c:43:6b:92:17:1c:
30:ef:c8:f4:8e:44:e3:f5:cf:5a:b9:81:7f:09:cf:
84:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C3:18:E0:5F:9D:7F:6E:F5:3F:11:B5:7F:F6:A4:FA:EB:7B:81:91
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/v8MY4F-df271PxG1f_ak-ut7gZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.80.0/20
95.164.144.0/20
Signature Algorithm: sha256WithRSAEncryption
1f:0c:51:8e:72:9a:de:b8:4c:0d:c9:df:de:06:20:35:90:38:
a8:03:18:7c:81:83:00:b9:8d:b8:a4:34:3d:b1:4b:63:db:d3:
43:3d:93:5d:33:1e:f2:ce:5c:e5:53:1d:b7:63:05:c4:91:41:
53:d6:95:aa:3c:a9:4c:7c:6e:8c:93:b6:af:e5:bc:68:aa:02:
72:64:0d:ff:27:b3:ff:d2:43:9d:3e:0d:25:0b:5a:74:5f:ac:
cb:4a:22:db:81:ad:51:16:b8:31:d3:ca:8d:95:f4:bc:69:c0:
8e:d6:ad:00:fe:22:c9:29:f8:d5:cb:fb:ed:91:2e:38:8d:52:
55:c0:6a:ca:65:de:86:a7:46:15:09:46:93:de:71:d9:93:c8:
49:e9:8a:3f:fb:b5:da:87:9c:00:6f:6a:a6:11:8c:72:12:16:
9b:2c:f8:26:87:25:30:9c:e6:2c:29:40:a5:54:15:ee:a3:fa:
57:57:e8:89:ed:41:d2:af:96:f4:9e:f4:64:87:68:25:08:bb:
2e:82:8f:25:d3:59:96:df:d8:43:8e:3b:99:df:f9:45:6e:65:
38:bf:8d:1a:af:6c:ad:6a:96:7e:c4:3f:1f:5b:9a:fc:96:ce:
f9:c3:1d:00:bc:5a:de:49:8f:7a:a5:71:62:e5:79:01:da:e0:
fb:38:97:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 17:08:25 2024 by rpki-client on console-fra.rpki-client.org