Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/7aqSyzBIOhZ_3IK0VaLJUfamvKA.roa
File: 7aqSyzBIOhZ_3IK0VaLJUfamvKA.roa (raw, json)
Hash identifier: z4Hi9xg2WjEoJgeR1/Hz393XPlXxvhUNmjKms5C9NnM=
Subject key identifier: ED:AA:92:CB:30:48:3A:16:7F:DC:82:B4:55:A2:C9:51:F6:A6:BC:A0
Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial: 018A5B62ED86FB40B17EE1A6DC8EAA3AC8E2
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/7aqSyzBIOhZ_3IK0VaLJUfamvKA.roa
Signing time: Sun 03 Sep 2023 14:12:04 +0000
ROA not before: Sun 03 Sep 2023 14:12:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201671
IP address blocks: 95.181.151.0/24 maxlen: 24
95.181.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5b:62:ed:86:fb:40:b1:7e:e1:a6:dc:8e:aa:3a:c8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Validity
Not Before: Sep 3 14:12:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=edaa92cb30483a167fdc82b455a2c951f6a6bca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8f:73:d2:48:c1:5e:3d:eb:f0:f7:f6:95:2b:
25:10:5b:1a:86:13:58:28:c1:0f:cd:e3:25:58:05:
00:ac:5c:21:9d:0a:44:45:cd:cc:d7:93:f6:8f:24:
76:13:d3:4b:9f:8e:38:af:75:eb:0f:5c:a8:f3:d7:
66:d2:06:89:74:9a:8e:74:c9:85:93:0e:22:8e:1d:
fd:3f:75:c3:9f:6b:77:17:fb:54:eb:27:3e:ee:2b:
e2:3d:5e:1e:e5:38:25:f0:73:3f:ea:b9:28:3a:a2:
62:54:e6:fa:1d:62:2d:47:0c:99:d8:38:3f:e3:65:
be:31:88:e4:c1:18:4c:00:46:0d:70:55:8b:55:6b:
1f:4f:91:b4:98:62:80:25:dd:d8:9c:8a:f3:44:f5:
39:8b:94:09:41:ee:03:8d:9c:a9:82:42:f1:80:ab:
c1:89:0e:d2:d4:93:03:93:a1:22:6d:f0:d5:70:8e:
46:31:a0:56:a4:1c:70:0f:00:f9:ec:40:82:b0:ef:
8d:3a:99:f2:56:63:a7:36:cb:50:86:9a:a3:b0:e7:
6f:69:50:ac:42:ba:30:09:46:5a:e8:75:a4:df:79:
c9:d8:e9:b4:18:16:c8:9d:e0:4f:11:98:73:e5:e7:
ce:58:25:81:f6:88:58:62:46:31:b3:a3:09:d1:14:
dd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AA:92:CB:30:48:3A:16:7F:DC:82:B4:55:A2:C9:51:F6:A6:BC:A0
X509v3 Authority Key Identifier:
keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/7aqSyzBIOhZ_3IK0VaLJUfamvKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.151.0/24
95.181.161.0/24
Signature Algorithm: sha256WithRSAEncryption
14:c6:74:ff:63:7b:2b:2b:3a:e6:ea:a1:a9:80:b6:b2:fb:48:
ca:d2:6f:12:df:cf:06:75:f0:0f:ae:57:a9:c3:e5:3a:1a:3c:
f5:76:79:f4:d7:7b:45:25:5a:68:bd:56:88:ec:71:0b:c5:4c:
48:db:83:b4:8e:61:82:a4:90:78:99:af:c9:94:92:1c:75:a0:
e5:04:5b:90:ec:ac:f1:3a:f5:7b:ab:56:7f:bb:71:98:eb:4b:
3d:79:3c:55:c9:29:6f:9d:1c:ad:b6:95:05:f6:6e:47:7b:5a:
2d:51:51:6c:a2:da:af:86:d1:3f:ac:31:22:a8:76:8c:a1:56:
5a:cd:03:2c:c1:01:bb:b7:24:93:ab:60:3f:ba:ec:3b:5f:ab:
ce:a5:b2:0f:83:34:a8:76:23:06:bc:1c:72:92:26:09:37:23:
e8:c3:7f:5e:79:dc:af:03:a5:e2:71:da:c4:b6:c2:ec:37:bd:
1e:78:e5:d0:65:87:da:a7:08:0f:a5:97:de:a3:c3:ab:1e:28:
67:ec:ae:36:85:65:ce:16:08:c6:8b:55:13:80:ab:cc:46:f9:
cd:68:c6:cb:fe:87:0e:23:57:ef:6e:77:4b:c7:e2:b0:6f:29:
00:7a:ee:e2:75:55:e4:d7:f6:72:94:c4:ba:ac:a4:09:49:3e:
03:18:c7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:35 2024 by rpki-client on console-ams.rpki-client.org