Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/i0LqVTDqBMfpAkqe-PYkzqckVVk.roa
File: i0LqVTDqBMfpAkqe-PYkzqckVVk.roa (raw, json)
Hash identifier: 7PTUjgnF8wNFl668md7TuBhm1Xb+P0tgj2h+bC3Cb20=
Subject key identifier: 8B:42:EA:55:30:EA:04:C7:E9:02:4A:9E:F8:F6:24:CE:A7:24:55:59
Certificate issuer: /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Certificate serial: 018C728064AF60D775C873A2FD45285E2017
Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/i0LqVTDqBMfpAkqe-PYkzqckVVk.roa
Signing time: Sat 16 Dec 2023 12:01:06 +0000
ROA not before: Sat 16 Dec 2023 12:01:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 95.140.160.0/24 maxlen: 24
95.140.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:72:80:64:af:60:d7:75:c8:73:a2:fd:45:28:5e:20:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Validity
Not Before: Dec 16 12:01:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b42ea5530ea04c7e9024a9ef8f624cea7245559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:95:78:9b:fa:a1:a0:ae:81:91:6f:16:06:57:
c0:29:5d:e4:db:ee:23:ca:eb:92:52:8f:7d:61:8f:
93:db:e1:3a:6c:7a:0e:98:c9:17:28:82:92:0d:99:
32:43:94:2b:c2:0e:c6:b3:37:5c:85:44:cc:18:88:
5e:43:74:b0:a7:56:24:61:2d:ae:e6:72:c3:dc:6b:
ca:cd:93:09:97:1d:2a:cf:42:72:d9:ee:c8:c7:e9:
29:40:5f:d7:2c:06:93:39:c0:56:a6:ff:af:02:3a:
1b:7b:ca:c3:d3:cd:58:6a:d4:bc:ae:56:90:91:3f:
ce:2d:80:72:35:8a:42:a6:07:b6:46:b5:6e:9f:72:
92:1b:0b:cf:44:b2:28:83:13:6a:65:f2:d1:90:79:
e9:7e:94:2f:d3:37:64:8b:75:60:f2:21:64:6b:e2:
97:ef:b2:62:ce:be:06:e4:a0:5d:d0:dd:a7:71:c9:
60:d8:f6:b0:1d:16:b7:9f:4a:ff:b3:99:06:c5:90:
00:55:62:ef:9c:40:a2:ce:0a:51:e6:89:18:1d:2d:
c5:79:b9:5d:6f:a8:cf:05:36:09:2f:0a:79:c0:76:
0f:bf:48:1d:4e:79:4f:12:b5:f7:9e:86:0e:b9:ca:
f5:76:00:fd:d6:b3:a4:35:c4:d4:75:0d:da:73:98:
38:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:42:EA:55:30:EA:04:C7:E9:02:4A:9E:F8:F6:24:CE:A7:24:55:59
X509v3 Authority Key Identifier:
keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/i0LqVTDqBMfpAkqe-PYkzqckVVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.140.160.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:ce:59:c4:85:5b:dd:79:f0:cb:4b:3f:fc:8e:c4:af:51:e4:
1e:d8:26:2d:95:fc:81:06:e8:78:cc:fb:fb:f8:42:33:45:ba:
e2:d4:bc:ed:53:a4:11:5d:3e:ed:62:36:ec:b0:61:7f:40:0e:
0b:25:11:a9:5a:73:a9:79:34:21:97:a7:da:97:34:75:b9:b1:
2d:f4:1d:c4:8b:24:a3:e2:4e:76:85:26:5e:2f:08:e1:67:c2:
c4:66:68:1a:16:b9:0c:4a:97:db:b9:fa:55:33:f5:c7:83:6b:
b3:b9:0d:31:28:6a:bd:91:8c:0b:ac:31:30:4e:38:2c:b5:40:
ab:f2:37:27:f7:02:eb:d4:d0:78:49:e9:fb:12:35:69:d9:71:
4c:1d:b1:ca:94:db:00:5e:b8:af:54:77:6a:7f:f0:07:a8:53:
c7:46:f5:e1:3a:11:44:5a:0d:13:35:1a:9b:96:bd:fc:3d:b4:
3e:c7:de:ac:f3:d0:51:12:46:fd:f4:70:fc:89:cc:7c:ab:82:
96:1d:da:09:1a:e5:2d:a4:9c:47:0c:07:ac:b6:11:b6:ec:de:
6d:3a:e4:be:f8:6d:6d:c3:27:27:29:0e:24:6f:48:c3:0f:21:
9c:aa:99:6b:4a:85:7e:a7:46:0c:99:d7:8f:88:02:07:c3:47:
a1:1a:1a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:10 2024 by rpki-client on console-ams.rpki-client.org