Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/pwL-2ijcTdO05zcwgVReFbcaTxA.roa
File: pwL-2ijcTdO05zcwgVReFbcaTxA.roa (raw, json)
Hash identifier: L7I6GKiegFqk6erZOxQ6w2y+33/mPuHzmg1U97QOMS8=
Subject key identifier: A7:02:FE:DA:28:DC:4D:D3:B4:E7:37:30:81:54:5E:15:B7:1A:4F:10
Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial: 018A4209ABFE58EA4C4183E24B95C6AA1A29
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/pwL-2ijcTdO05zcwgVReFbcaTxA.roa
Signing time: Tue 29 Aug 2023 16:04:04 +0000
ROA not before: Tue 29 Aug 2023 16:04:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43278
IP address blocks: 95.181.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:42:09:ab:fe:58:ea:4c:41:83:e2:4b:95:c6:aa:1a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Validity
Not Before: Aug 29 16:04:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a702feda28dc4dd3b4e7373081545e15b71a4f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e9:34:a7:06:2b:a7:09:4a:c4:51:16:01:c7:
65:2e:f2:30:e2:c7:d1:e7:42:01:aa:7b:5a:3d:a5:
a8:e3:5a:ff:2d:f6:66:8a:52:a0:95:67:45:6c:4b:
56:eb:9a:07:25:a4:60:ec:f4:7c:a6:00:9f:15:70:
fd:11:ae:8d:b0:3e:dc:f6:ea:11:15:d0:07:99:68:
ae:fa:0c:f0:17:93:08:0d:06:1c:49:b8:68:14:2d:
a0:22:87:cb:33:3a:c2:8f:ac:db:d8:bd:75:a0:5a:
50:1c:c9:b1:5a:2e:c2:ea:5f:78:cd:30:2f:14:22:
da:e6:67:ce:6b:42:b1:d1:c1:aa:cc:f6:a4:e2:23:
50:e4:95:79:b0:4d:bf:6b:50:db:6e:bd:53:1e:f3:
06:13:b6:7c:58:7e:77:66:bb:b3:f7:d2:6c:a7:0b:
06:d8:84:59:f6:92:94:0d:7e:20:65:7c:0e:27:b2:
7e:50:3c:62:0c:07:30:c5:e4:7e:be:d7:59:ca:4e:
77:13:82:49:b8:17:d9:28:5e:3c:c3:9e:50:c4:21:
67:a8:8e:5a:f1:7c:86:51:93:e9:bd:db:e7:d3:8c:
6b:86:7c:ff:bf:00:13:19:c8:a5:44:da:9b:3a:91:
31:de:40:21:66:6f:73:b1:b9:d9:cf:66:92:28:51:
b3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:02:FE:DA:28:DC:4D:D3:B4:E7:37:30:81:54:5E:15:B7:1A:4F:10
X509v3 Authority Key Identifier:
keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/pwL-2ijcTdO05zcwgVReFbcaTxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.158.0/24
Signature Algorithm: sha256WithRSAEncryption
43:68:c1:b9:c0:9c:e1:f0:54:b5:a4:5f:d4:be:60:5d:67:9f:
01:2c:c1:e4:3e:74:44:9b:77:b2:d7:63:f5:80:0a:23:60:50:
46:b3:a3:ef:60:6f:1c:d4:19:cb:30:af:7a:bf:d7:62:1b:c4:
ac:e2:e7:60:97:78:70:2f:4c:e6:1d:30:d4:7f:94:99:a6:f2:
e0:57:19:d4:89:7e:42:36:97:46:f1:4a:bc:6f:22:cc:a6:57:
a6:62:b3:4b:ba:27:c9:65:6d:ea:9f:13:51:db:aa:8f:ef:2b:
35:5a:07:36:ad:f6:77:1b:8a:5c:ba:e8:ac:d6:3f:01:9b:4b:
c9:3f:8e:98:56:e2:25:fd:6e:88:ba:a3:4d:37:37:7f:52:26:
f5:e3:05:a9:70:db:95:29:c7:8a:29:90:39:c9:15:66:7c:17:
b4:f6:ea:6a:a0:18:33:f6:64:f1:41:1e:06:4b:9e:87:42:28:
6d:e4:98:75:2f:5b:3d:b2:73:2b:84:11:de:57:18:6f:4f:4d:
c6:dd:46:1d:0d:3c:c1:79:9a:e5:81:f1:d3:06:49:de:1e:eb:
92:ab:43:b6:91:e4:8f:b2:19:07:b2:f2:e5:4f:d3:52:03:cc:
b5:be:94:b7:a5:27:7e:b6:8b:11:11:90:e8:26:fd:b2:06:48:
3e:7c:e3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:35 2024 by rpki-client on console-ams.rpki-client.org