Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/626fa6-6eca-476e-a5af-afe63376c88f/1/e0kh-zV6hTsPbylOIP8gzI6zUd0.roa
File: e0kh-zV6hTsPbylOIP8gzI6zUd0.roa (raw, json)
Hash identifier: BsxT826r66fY1Es4f7XA5Jt/48TxxOgEPwsLPi+coAQ=
Subject key identifier: 7B:49:21:FB:35:7A:85:3B:0F:6F:29:4E:20:FF:20:CC:8E:B3:51:DD
Certificate issuer: /CN=eedde41f362e98ae37d1efc7caf3e7d3c1653ee2
Certificate serial: 018570796725C70863DDA2BCA724437F8664
Authority key identifier: EE:DD:E4:1F:36:2E:98:AE:37:D1:EF:C7:CA:F3:E7:D3:C1:65:3E:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7t3kHzYumK430e_HyvPn08FlPuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/626fa6-6eca-476e-a5af-afe63376c88f/1/e0kh-zV6hTsPbylOIP8gzI6zUd0.roa
Signing time: Mon 02 Jan 2023 03:14:42 +0000
ROA not before: Mon 02 Jan 2023 03:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24676
IP address blocks: 95.169.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:67:25:c7:08:63:dd:a2:bc:a7:24:43:7f:86:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eedde41f362e98ae37d1efc7caf3e7d3c1653ee2
Validity
Not Before: Jan 2 03:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b4921fb357a853b0f6f294e20ff20cc8eb351dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c9:75:3d:36:cc:fc:2a:23:8b:58:cb:eb:31:
a3:aa:40:76:16:13:09:46:78:d4:5d:cb:6a:3b:74:
f0:1a:d8:36:8c:b5:80:05:7b:37:a4:7f:74:6a:23:
52:5d:98:75:14:09:be:d7:38:7d:ce:f3:83:1c:54:
c5:82:bd:20:fd:8b:bc:36:14:46:b9:f3:0a:3b:c8:
2d:f9:95:6a:91:65:b0:b7:4c:50:dc:b2:9b:fa:3f:
e2:a8:57:40:b3:6e:79:6c:c6:f7:0e:cb:99:e7:fe:
95:b4:ff:9c:5e:65:14:c2:10:4b:cf:03:51:1b:50:
c8:37:4f:e5:9d:43:ee:35:40:fd:27:13:aa:b3:c4:
69:13:8e:2d:0a:e8:f3:c4:06:f1:cc:c7:29:9e:ae:
49:6a:82:85:d7:a3:cc:b3:75:68:db:43:15:dc:92:
99:b5:d3:9f:bf:1e:12:ef:ab:3f:e7:c4:2f:d9:19:
19:d0:52:1f:00:fd:2c:d2:c0:93:4c:a2:64:b9:1e:
74:c6:e2:f2:94:a1:67:be:4b:c1:c7:92:a8:5d:6f:
ad:ca:2d:18:78:97:97:27:ec:40:d9:b4:dd:1e:03:
62:f6:d9:bb:19:0c:8a:c0:d8:79:77:ae:2a:13:7a:
e0:44:cd:1f:90:e7:7d:cf:72:43:c6:bc:e7:ea:f2:
76:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:49:21:FB:35:7A:85:3B:0F:6F:29:4E:20:FF:20:CC:8E:B3:51:DD
X509v3 Authority Key Identifier:
keyid:EE:DD:E4:1F:36:2E:98:AE:37:D1:EF:C7:CA:F3:E7:D3:C1:65:3E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7t3kHzYumK430e_HyvPn08FlPuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/626fa6-6eca-476e-a5af-afe63376c88f/1/e0kh-zV6hTsPbylOIP8gzI6zUd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/626fa6-6eca-476e-a5af-afe63376c88f/1/7t3kHzYumK430e_HyvPn08FlPuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.180.0/24
Signature Algorithm: sha256WithRSAEncryption
62:2a:71:7e:47:9b:9d:3c:2c:f9:8e:b9:93:c3:f6:b7:86:3f:
36:5c:c4:4a:1d:38:b0:3f:5d:d2:dd:5a:11:1a:75:c2:4f:75:
c5:18:fb:95:9e:b1:6e:cf:79:79:f3:a7:3f:3f:b1:71:57:4b:
21:7e:eb:f4:7f:db:90:80:d8:7b:9c:6d:3f:ab:4f:4e:c1:65:
95:28:86:b9:18:c4:25:43:05:40:73:92:0d:31:24:a3:42:a0:
80:52:ab:28:cd:5d:94:5f:b5:f5:02:ca:75:9c:7f:4b:64:a3:
0a:0e:5b:d7:09:c7:44:5b:25:51:5c:d2:36:87:b1:9f:45:1e:
4f:be:1e:90:ec:ef:ae:4f:4c:ec:2b:11:24:df:27:8c:13:3f:
79:1c:bd:dd:fb:65:04:c8:61:a3:9f:fe:7d:da:ab:56:a2:f6:
97:a3:b3:43:f7:19:87:df:6c:7e:f6:0b:2b:17:99:75:7c:4a:
ce:9b:25:4d:46:49:60:91:ba:9f:35:cd:45:10:9c:3e:f3:d7:
2e:c1:c8:6c:36:3b:b8:16:ae:72:d5:55:b6:a7:c0:dc:48:d4:
be:ba:14:3c:85:87:40:2c:02:c5:ba:c5:cb:7d:e0:c9:26:2f:
f4:fa:49:72:4d:c4:0b:ba:bd:f8:b6:f7:32:97:2c:55:0e:c8:
f8:ae:f9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:37 2024 by rpki-client on console-ams.rpki-client.org