Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/H_ob0G1fQDBRll0fKSv4EhtgcQg.roa
File: H_ob0G1fQDBRll0fKSv4EhtgcQg.roa (raw, json)
Hash identifier: k3scgcVgOQFrSm5NISYS2CUDbj7ojlAdti5Witoz9ms=
Subject key identifier: 1F:FA:1B:D0:6D:5F:40:30:51:96:5D:1F:29:2B:F8:12:1B:60:71:08
Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial: 018A5B6203308622342A42B39A105DB1F690
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/H_ob0G1fQDBRll0fKSv4EhtgcQg.roa
Signing time: Sun 03 Sep 2023 14:11:04 +0000
ROA not before: Sun 03 Sep 2023 14:11:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 95.181.149.0/24 maxlen: 24
95.181.148.0/22 maxlen: 22
95.181.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Sep 2023 16:11:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5b:62:03:30:86:22:34:2a:42:b3:9a:10:5d:b1:f6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Validity
Not Before: Sep 3 14:11:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ffa1bd06d5f403051965d1f292bf8121b607108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:76:c1:76:55:b9:10:1d:97:cd:c4:53:72:5f:
14:fb:ef:69:bd:33:e0:80:03:c6:f0:d3:0a:51:9a:
85:cb:cd:2e:f3:34:69:51:03:8b:37:d0:1a:95:ee:
8c:b7:e6:7f:a2:8a:3d:4f:9d:11:4c:34:17:24:f0:
77:73:05:97:d8:90:53:a7:59:33:0e:76:3a:cf:77:
96:0d:bd:29:cd:82:ed:5a:67:40:6a:3f:53:a8:d1:
d5:d9:f9:ec:a0:d8:75:bf:c0:a5:9b:db:56:cd:79:
0f:2d:32:47:82:a7:44:66:5e:13:b0:e9:14:b2:77:
e4:42:35:64:ec:fb:6e:b8:2c:bc:3e:40:65:97:f8:
16:9e:ac:52:b6:c1:fe:19:3e:57:e6:38:3e:ff:ba:
25:f5:63:d1:3d:75:37:f2:8c:72:fb:95:ed:48:b8:
91:15:79:9c:f3:03:36:ea:e1:21:83:14:73:48:bb:
3f:63:fa:f4:61:78:1d:7f:83:a1:e7:d4:4f:a2:5b:
0d:ef:be:01:05:d3:0d:7c:0d:59:23:70:b2:0a:98:
2c:82:c9:fc:f6:03:e6:3c:bd:af:0b:59:94:0b:46:
76:c4:6e:20:ae:08:c5:bd:71:de:e8:36:0a:2a:7e:
47:ff:e9:f3:89:d6:b2:ab:bb:ba:fb:3b:66:a3:c1:
77:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FA:1B:D0:6D:5F:40:30:51:96:5D:1F:29:2B:F8:12:1B:60:71:08
X509v3 Authority Key Identifier:
keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/H_ob0G1fQDBRll0fKSv4EhtgcQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.148.0/22
Signature Algorithm: sha256WithRSAEncryption
70:db:ac:49:46:9d:70:22:13:f8:0d:a4:c8:d2:6b:b2:c9:94:
6c:ce:28:03:db:ff:8b:ae:bd:be:d3:82:90:bb:bb:09:17:bf:
ea:21:ec:30:40:51:78:b9:6f:a6:f8:b0:54:41:bf:12:0c:b6:
c9:f5:f9:82:aa:3c:e5:e2:2a:20:7d:a2:a6:22:f5:ce:a1:5d:
c3:a0:1c:65:6c:99:78:c9:2d:58:b7:b8:54:62:3a:db:3b:14:
59:de:fb:a1:fe:9b:36:84:fd:26:01:92:9a:4f:46:ae:5e:c5:
39:f0:cd:a7:7d:e5:ac:1c:20:21:96:dc:7c:0b:73:cd:42:c9:
51:7d:bd:55:8b:96:47:af:19:3d:07:bc:f4:29:62:bd:3b:0d:
d3:3c:c3:d9:9c:ac:7f:3c:c1:32:b7:5a:a9:72:81:07:19:f2:
8c:10:32:e8:4d:fc:c4:3a:df:68:db:03:9d:a1:68:82:d2:f5:
1e:07:73:38:c7:9c:40:53:e2:75:40:c8:0a:43:c0:c8:87:63:
3e:e0:ae:54:c4:f6:0b:ef:f2:91:95:dd:6a:04:38:d9:7e:84:
10:28:2d:5d:bd:37:9d:4e:d0:86:a5:c1:4f:2f:e2:26:61:f1:
06:fd:37:4d:11:7e:63:8f:04:ab:3c:ab:59:43:52:5e:ac:7b:
bc:20:6a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:34 2024 by rpki-client on console-fra.rpki-client.org