Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/xeNhIp3QesnEzL2tqpEkLNwh_A4.roa
File: xeNhIp3QesnEzL2tqpEkLNwh_A4.roa (raw, json)
Hash identifier: A/O5FHcG/+YXOeTcpwO/VxtFCMGi0NSvU/Fj3iZj3CU=
Subject key identifier: C5:E3:61:22:9D:D0:7A:C9:C4:CC:BD:AD:AA:91:24:2C:DC:21:FC:0E
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 01856F42AAB9ACC080821AA68E8178199F35
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/xeNhIp3QesnEzL2tqpEkLNwh_A4.roa
Signing time: Sun 01 Jan 2023 21:35:18 +0000
ROA not before: Sun 01 Jan 2023 21:35:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54903
IP address blocks: 95.164.140.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:aa:b9:ac:c0:80:82:1a:a6:8e:81:78:19:9f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 1 21:35:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5e361229dd07ac9c4ccbdadaa91242cdc21fc0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:05:22:69:82:31:bc:18:ac:a0:4c:34:c5:5e:
80:70:76:3d:f3:78:87:cd:34:37:0f:0c:31:bb:d4:
83:8d:a7:c9:f9:78:b0:d1:dd:41:6c:84:4f:2b:d0:
20:64:64:6f:10:08:b8:7f:bf:91:6f:00:df:29:10:
de:1a:94:b4:48:9b:09:55:01:1f:c2:1b:20:37:16:
c7:1d:10:5f:01:a5:c1:b2:f2:61:44:b9:8c:da:34:
24:3a:00:1e:1a:f9:91:7b:2f:99:a9:a0:52:45:20:
c6:70:2a:90:b7:4a:9b:48:4a:61:f1:4d:f8:de:17:
4c:87:10:25:9c:72:b7:5d:b3:ff:94:ff:9a:fc:a3:
08:b1:e8:9c:5f:2b:c7:f5:ca:7d:92:8a:5a:62:a4:
88:70:e3:99:91:cc:e4:d6:60:36:4a:de:56:47:e3:
a4:d9:7b:ab:19:7b:61:a9:99:e0:e8:d9:5b:b6:08:
98:da:d6:38:46:28:c6:74:4a:00:6a:0c:7c:88:b2:
42:da:26:4c:b9:72:8b:bf:2e:6d:42:31:a7:ce:a5:
55:eb:52:16:71:ab:a1:9a:61:ff:79:c7:87:7e:fc:
e2:25:c7:14:84:41:12:55:2e:0d:07:86:00:b5:a2:
10:f9:1a:82:fd:c7:77:3a:10:f0:d0:0d:d7:54:a0:
f6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E3:61:22:9D:D0:7A:C9:C4:CC:BD:AD:AA:91:24:2C:DC:21:FC:0E
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/xeNhIp3QesnEzL2tqpEkLNwh_A4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.140.0/22
Signature Algorithm: sha256WithRSAEncryption
54:dd:94:6f:e3:2f:a4:b7:7a:73:48:e2:7f:ac:a4:4e:26:3f:
b6:46:de:61:39:3a:29:9b:a0:ae:1e:c2:82:2e:7d:3a:b3:9d:
8d:37:e4:81:23:ef:ac:3c:22:41:66:16:d7:1a:f2:3c:20:86:
e5:99:ad:58:3f:0b:ae:47:c7:1a:d5:02:05:21:74:dd:7e:d7:
a1:04:ac:75:11:f1:1a:70:49:61:ad:af:db:f7:ec:9a:77:49:
cd:98:77:cb:74:61:65:08:c4:3b:1c:2b:37:28:7e:ca:42:53:
f0:eb:30:99:c5:3a:33:0a:a5:0c:11:f1:2f:c9:9a:46:bd:eb:
94:bc:80:59:43:1d:3d:e4:69:bd:8c:72:3c:1a:77:a5:de:f2:
86:c6:2f:43:6a:02:0f:6e:b1:dc:20:7f:9f:3e:75:94:9e:a7:
d6:2c:c0:90:dc:74:1f:45:00:71:ad:50:d8:b1:84:39:0e:eb:
d9:49:75:4d:0e:bf:98:d2:f8:ee:c2:5e:17:c2:6e:fe:b5:4f:
80:d6:be:a1:80:41:52:12:00:11:34:61:6e:73:00:ec:7e:ee:
e7:30:5f:3f:6b:a2:bc:a2:be:05:bb:d9:f3:2b:d2:b7:9e:1d:
8c:df:12:62:20:80:ef:84:8c:06:3b:e8:6e:63:f8:1c:08:28:
1e:3b:31:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:58 2024 by rpki-client on console-fra.rpki-client.org