Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/x3_Y6-w38aDrx21IpLSi0_CJ7oQ.roa
File: x3_Y6-w38aDrx21IpLSi0_CJ7oQ.roa (raw, json)
Hash identifier: e2YPuFwaE1de96pqNhgMS0wVf53CdOqvC6zwVdJux/o=
Subject key identifier: C7:7F:D8:EB:EC:37:F1:A0:EB:C7:6D:48:A4:B4:A2:D3:F0:89:EE:84
Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial: 01902BD14A755E53C5E1D13FF95C95757B4E
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/x3_Y6-w38aDrx21IpLSi0_CJ7oQ.roa
Signing time: Tue 18 Jun 2024 14:47:34 +0000
ROA not before: Tue 18 Jun 2024 14:47:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48753
IP address blocks: 95.169.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Jun 2024 14:36:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2b:d1:4a:75:5e:53:c5:e1:d1:3f:f9:5c:95:75:7b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Validity
Not Before: Jun 18 14:47:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c77fd8ebec37f1a0ebc76d48a4b4a2d3f089ee84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1f:71:af:6e:8d:48:39:3a:6d:1d:ef:ea:88:
af:a0:da:30:60:cf:76:ec:7f:02:06:bf:71:e8:36:
7a:16:d5:a4:5d:a6:39:fe:74:f4:bc:7f:02:cd:c0:
1d:b4:53:d1:6a:ea:6f:f5:c1:b6:52:8f:70:9b:b0:
fa:62:12:6b:51:fd:89:be:08:45:a0:1a:8b:3f:33:
3c:09:1e:4c:07:9b:4c:5c:c2:6f:02:50:28:11:30:
47:73:e9:10:55:28:5e:3f:c8:a7:b9:c3:79:1c:f6:
2c:35:b6:b4:64:af:88:77:76:33:22:94:41:95:14:
2f:bb:12:fb:04:93:a0:92:dc:5b:3e:8b:0f:cf:36:
a6:0b:0e:c5:14:2f:31:d7:49:5f:8f:04:58:ce:27:
24:05:87:db:54:bd:e8:0b:c8:53:26:ce:b0:75:1a:
12:23:f9:94:2a:23:5e:1a:a8:23:59:ea:e0:8e:a3:
9c:c6:18:d9:9e:53:fa:87:82:17:e4:ee:77:59:be:
1f:43:4f:1a:44:66:e4:47:06:79:ad:ef:78:f9:b5:
6d:9f:4b:5b:76:e8:40:46:88:0a:aa:2b:7e:b0:0b:
55:43:d3:51:77:49:5a:2d:c8:f7:61:bc:46:64:36:
05:31:d7:27:1f:55:f0:09:2d:30:d2:6c:c9:7b:01:
fc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7F:D8:EB:EC:37:F1:A0:EB:C7:6D:48:A4:B4:A2:D3:F0:89:EE:84
X509v3 Authority Key Identifier:
keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/x3_Y6-w38aDrx21IpLSi0_CJ7oQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.203.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:17:92:99:a4:d8:20:58:9a:72:c3:b3:41:b7:7d:43:fb:e3:
7c:3e:14:6b:f7:60:b1:a4:48:f8:c8:12:44:96:af:f8:3d:e9:
7a:e9:d7:be:4f:80:d3:10:57:26:7c:10:03:fe:7d:6b:ec:69:
03:64:31:49:09:6c:34:96:5a:21:f6:06:21:7d:c7:16:e5:fb:
e7:cc:28:41:31:9a:45:4e:8e:9c:60:c6:d4:d2:1d:e6:41:25:
a6:b9:ae:6f:2b:a4:38:95:57:32:54:64:84:fe:25:de:30:3f:
c4:40:60:ab:c6:4c:fb:3b:8d:11:34:3a:df:60:6f:93:05:69:
ca:b8:22:e4:ef:a7:87:6d:1e:ed:55:a6:b8:2e:0a:01:2a:19:
9a:df:a9:f1:f3:d7:8f:b9:3e:87:80:77:60:cb:e6:32:8d:f6:
72:b1:93:9d:19:4f:49:a3:1c:aa:3f:71:42:6a:e4:e4:92:ac:
da:22:eb:6c:cf:97:d1:e9:fa:00:3f:a1:b5:35:fe:5e:31:74:
8c:b7:3a:0b:89:ba:47:87:bf:be:3a:24:79:36:16:41:4c:bb:
ae:0d:34:84:b5:ef:93:b9:54:21:91:84:a1:44:5f:4a:e0:00:
e5:61:f6:d1:5c:e0:c4:e4:a8:01:64:4c:77:c6:b8:7e:71:ec:
9c:d3:c5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:13 2025 by rpki-client