Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/D0VhHtJdI9XCmX2eJCFT8ZzB9nQ.roa
File: D0VhHtJdI9XCmX2eJCFT8ZzB9nQ.roa (raw, json)
Hash identifier: OvsXQMFV2uG2XibK9pbU5mW/Yd8SMf19nXIB3DkCl9U=
Subject key identifier: 0F:45:61:1E:D2:5D:23:D5:C2:99:7D:9E:24:21:53:F1:9C:C1:F6:74
Certificate issuer: /CN=94846741139263388d984db1e97e031669c6486e
Certificate serial: 0185D2E761137A8820FA68817D245070E6B1
Authority key identifier: 94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/D0VhHtJdI9XCmX2eJCFT8ZzB9nQ.roa
Signing time: Sat 21 Jan 2023 05:57:37 +0000
ROA not before: Sat 21 Jan 2023 05:57:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59643
IP address blocks: 195.190.144.0/24 maxlen: 24
188.95.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d2:e7:61:13:7a:88:20:fa:68:81:7d:24:50:70:e6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94846741139263388d984db1e97e031669c6486e
Validity
Not Before: Jan 21 05:57:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f45611ed25d23d5c2997d9e242153f19cc1f674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:35:10:28:4b:69:31:fa:ff:d4:89:4a:5b:27:
16:8e:ed:d4:04:cd:3b:0e:05:59:14:52:60:96:8c:
92:47:5e:b1:2f:db:4b:90:1a:f5:1a:89:7f:68:77:
6e:7f:3e:b7:74:8b:1f:f5:20:3b:1d:56:13:aa:52:
a3:18:e5:b1:a5:f4:1a:59:91:12:4d:53:36:e9:00:
aa:e2:b0:24:fb:eb:ec:3d:b0:8b:ab:e0:c0:6d:c2:
2b:f7:13:ec:24:46:92:eb:9a:85:41:e2:77:28:0f:
3b:6c:8b:59:9d:64:5f:cb:7b:24:f2:45:be:d4:8a:
7e:62:02:7e:fe:3b:7c:c2:28:ea:20:a7:4c:b8:8a:
bb:72:a1:94:a4:79:cb:eb:ac:c3:6c:71:6a:44:c9:
a1:c5:49:8a:fc:1f:6c:4a:e1:53:2a:de:64:46:08:
2f:6b:2e:59:41:ed:9a:1e:b0:1a:f8:2f:0e:6a:77:
c4:49:1d:11:c7:d2:2a:12:53:45:99:01:88:b0:03:
95:6c:cf:d7:27:83:24:2c:e8:5f:b2:31:23:16:2d:
00:12:15:ad:10:d7:5e:7a:ff:d3:c9:a7:d6:52:df:
36:32:c3:85:44:e1:db:62:0d:d0:ec:39:31:e7:b5:
9e:63:e9:94:a8:90:0f:5d:43:26:f2:e0:d2:a5:0a:
48:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:45:61:1E:D2:5D:23:D5:C2:99:7D:9E:24:21:53:F1:9C:C1:F6:74
X509v3 Authority Key Identifier:
keyid:94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/D0VhHtJdI9XCmX2eJCFT8ZzB9nQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.89.0/24
195.190.144.0/24
Signature Algorithm: sha256WithRSAEncryption
71:3a:dd:9e:6d:fa:11:ba:b7:d8:6e:9e:3a:86:f7:ac:64:af:
cd:78:93:cc:89:9c:64:41:23:7b:f9:11:76:1e:32:b8:99:91:
f6:e9:35:d1:2e:cc:0c:18:e1:21:ec:9b:a2:52:77:18:2b:fe:
cc:43:6d:85:3d:c7:5f:23:42:05:60:a1:44:11:37:1e:07:ec:
78:85:a5:37:29:81:fd:1d:3a:40:1d:f1:35:4a:08:60:ab:ba:
71:cf:0e:88:97:db:b7:67:94:32:21:a3:e4:6f:0f:09:2a:3c:
41:a3:fc:f1:09:ed:af:c1:69:74:a1:6d:11:1d:30:5e:ad:22:
d5:4d:21:5c:44:f7:ec:7b:63:18:aa:97:5c:e3:a5:bb:77:7b:
3e:dd:03:c6:99:f0:11:f3:e1:25:97:d6:a9:e2:29:d1:a0:57:
df:e7:33:64:ba:3f:10:dc:cf:93:f4:4d:65:f6:01:be:bd:f3:
ca:e6:74:38:50:ed:64:d5:49:08:aa:1f:24:d2:86:0c:8b:00:
11:d5:06:0c:34:c7:3c:2f:fc:40:b5:a4:8a:9d:e1:e0:a1:72:
c8:d1:f3:b0:9f:a1:0b:20:f5:8e:49:3e:05:b1:b7:a3:be:3d:
6d:51:e6:b4:8a:c3:3b:45:50:43:02:98:20:02:9d:2a:9c:26:
69:7d:e1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:47 2023 by rpki-client on console-ams.rpki-client.org