Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/Ym555px6OWwp4pIFp1R7BEfdmpc.roa
File: Ym555px6OWwp4pIFp1R7BEfdmpc.roa (raw, json)
Hash identifier: FGvZH0Lfw15u9HJ7rdBI/Cmr+4P+2+QSB7zdCbuuPH4=
Subject key identifier: 62:6E:79:E6:9C:7A:39:6C:29:E2:92:05:A7:54:7B:04:47:DD:9A:97
Certificate issuer: /CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Certificate serial: 01856FB11F5179912E879F5DB23DC6674387
Authority key identifier: 4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/Ym555px6OWwp4pIFp1R7BEfdmpc.roa
Signing time: Sun 01 Jan 2023 23:35:56 +0000
ROA not before: Sun 01 Jan 2023 23:35:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49409
IP address blocks: 95.141.80.0/20 maxlen: 24
185.134.124.0/22 maxlen: 24
2a02:f58::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:1f:51:79:91:2e:87:9f:5d:b2:3d:c6:67:43:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Validity
Not Before: Jan 1 23:35:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=626e79e69c7a396c29e29205a7547b0447dd9a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:4f:d8:88:e4:ee:2f:01:6d:1e:89:c4:25:
3c:f6:2d:7a:14:85:7b:13:9e:cb:1b:cf:8f:32:98:
39:72:f1:bc:07:94:98:76:54:97:d5:2d:04:1e:23:
e4:4a:eb:a7:d9:11:f4:fb:21:99:f0:99:74:e0:99:
c7:de:72:a6:93:1f:39:3b:d0:d5:b5:c9:42:d6:b4:
1c:f9:ad:eb:4f:8a:d3:dc:af:67:45:7d:5b:3b:5e:
46:b9:fa:93:63:26:b3:4b:72:c4:d0:a3:a4:93:0d:
33:76:29:a8:a1:77:ac:9c:ee:d1:4b:b4:c6:50:49:
07:eb:56:a9:17:6c:32:3d:df:4f:ed:98:e2:5b:b1:
5e:9f:e6:2f:e6:64:f6:6b:b6:88:b2:3f:6b:a8:fb:
7e:63:ba:0e:13:8f:56:78:d3:7d:ac:e8:18:63:4b:
a1:a3:ad:96:dc:ab:8e:34:cf:be:ec:27:57:4d:d0:
4b:ac:56:f6:72:aa:74:a7:5a:31:8c:69:62:45:b0:
93:a0:30:9b:cf:c3:97:52:ea:01:d9:84:f8:c7:82:
1d:1d:d5:77:d3:0f:93:40:b5:92:26:6e:51:bb:a4:
d0:26:7a:24:36:1c:8a:a4:c8:ac:58:65:12:ae:bf:
c0:04:b3:88:b5:6c:09:98:e9:5d:9a:ad:82:8d:0b:
56:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6E:79:E6:9C:7A:39:6C:29:E2:92:05:A7:54:7B:04:47:DD:9A:97
X509v3 Authority Key Identifier:
keyid:4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/Ym555px6OWwp4pIFp1R7BEfdmpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.141.80.0/20
185.134.124.0/22
IPv6:
2a02:f58::/29
Signature Algorithm: sha256WithRSAEncryption
90:27:fe:aa:f3:68:fd:ec:13:6b:6a:54:b8:3e:d3:ec:2b:d3:
1a:e0:2b:85:94:27:dd:f5:aa:43:05:36:f5:b6:5f:3a:e5:b4:
e3:17:06:dd:8d:86:76:3d:ea:eb:80:75:01:63:8e:87:ec:7c:
8f:47:ed:0c:44:0d:f0:56:78:db:93:92:5c:ff:db:8e:f0:3f:
bd:7e:65:9f:a8:0d:20:91:b5:d8:dd:a6:e7:52:96:fe:2f:41:
0d:24:92:0c:50:27:9a:3a:71:ee:51:af:b2:bf:c6:a9:65:64:
8f:26:5f:18:a3:7f:93:3c:29:3a:75:e6:a7:88:65:ca:0c:89:
89:90:c5:5d:09:be:8c:eb:8f:22:a0:59:62:32:d0:38:44:f2:
bb:3c:8b:31:aa:a1:fa:23:09:4e:1a:4d:55:31:c6:de:5e:ec:
8c:0a:b9:12:21:70:0c:ec:8b:be:6f:52:aa:87:0e:de:3c:97:
3e:ed:08:07:d7:4d:70:32:5c:a0:d8:f2:15:6b:b5:1c:13:e7:
7c:10:cb:af:0a:e0:a9:67:4c:0b:2f:4a:b4:7e:74:e4:af:2c:
f8:82:02:1c:5b:0e:34:05:72:f5:7e:83:35:c3:43:27:2d:d6:
62:f3:2a:58:2f:1c:87:8c:27:8f:af:e0:ab:ae:02:1b:8a:e0:
f2:91:ec:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:46 2024 by rpki-client on console-ams.rpki-client.org