Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/JSza9FgMyrT6eCFWRf4rwbUJv3A.roa
File: JSza9FgMyrT6eCFWRf4rwbUJv3A.roa (raw, json)
Hash identifier: j/e44p9ALFSvM1tMScGByEgbJGttwQw/R9MXb+Uuu60=
Subject key identifier: 25:2C:DA:F4:58:0C:CA:B4:FA:78:21:56:45:FE:2B:C1:B5:09:BF:70
Certificate issuer: /CN=1c5c72ee422c61667e3056de6b3ffce034305175
Certificate serial: 01856C4A5631B730D2CE13FBA8C355D79291
Authority key identifier: 1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/JSza9FgMyrT6eCFWRf4rwbUJv3A.roa
Signing time: Sun 01 Jan 2023 07:44:48 +0000
ROA not before: Sun 01 Jan 2023 07:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60635
IP address blocks: 95.66.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:56:31:b7:30:d2:ce:13:fb:a8:c3:55:d7:92:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5c72ee422c61667e3056de6b3ffce034305175
Validity
Not Before: Jan 1 07:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=252cdaf4580ccab4fa78215645fe2bc1b509bf70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c1:b8:5d:41:db:eb:fb:45:a6:b9:40:27:57:
7b:a7:43:f0:d7:09:13:c0:80:42:bd:ed:d3:da:00:
5f:b3:68:a8:f6:4a:52:18:e6:f7:5c:92:ca:e7:9f:
e8:f6:20:a4:b8:bb:1b:72:34:8f:ad:85:c1:25:15:
b6:c8:9e:32:68:0d:8d:07:29:86:64:1c:10:6c:e1:
df:c5:dd:db:20:95:bc:33:e4:7b:b0:d8:ca:40:a0:
39:19:75:41:8d:40:21:32:46:e6:7b:ba:fa:ac:54:
84:2d:52:c8:3d:fc:3f:32:03:77:a1:89:36:ec:99:
43:28:da:fc:7f:61:4a:4b:e4:97:18:01:54:91:ba:
56:1c:87:24:5e:c4:e2:07:8f:f9:2c:09:e5:2e:99:
29:c1:25:9b:09:13:41:89:c3:cc:ab:20:37:b9:86:
2b:85:f8:bd:c7:26:6f:cf:e4:95:67:35:fc:7e:9b:
ef:8d:03:a4:1d:d3:ce:48:77:93:94:fa:a8:7c:35:
50:79:18:32:d5:f7:e7:2f:79:3d:18:28:5c:39:51:
7e:3b:cf:d3:84:a7:76:29:b3:77:9f:6c:4e:e5:b9:
0a:cb:ea:40:e1:37:bd:94:76:d6:33:5e:25:9f:59:
46:89:76:7a:11:fb:d9:c8:95:6e:ed:b6:01:02:15:
a8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2C:DA:F4:58:0C:CA:B4:FA:78:21:56:45:FE:2B:C1:B5:09:BF:70
X509v3 Authority Key Identifier:
keyid:1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/JSza9FgMyrT6eCFWRf4rwbUJv3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.66.226.0/24
Signature Algorithm: sha256WithRSAEncryption
51:dd:dc:11:26:86:05:61:0a:f7:4d:14:84:8c:fd:09:46:f6:
b7:69:1d:11:9b:75:b2:d0:fa:f0:5a:0b:c9:95:bb:ec:bd:8f:
69:f0:9f:af:ff:3b:95:15:fb:0b:b9:68:f4:f1:b7:9d:7e:55:
b2:23:78:c5:31:12:90:27:ce:2e:49:30:3c:17:d8:f8:68:03:
ca:2a:7e:e4:c9:43:26:b5:59:6f:5e:31:fe:d0:56:67:40:ae:
f0:44:21:91:4b:8b:ea:33:62:8b:72:4e:14:f2:d9:a5:1f:2a:
0c:87:cc:9b:12:a2:77:93:eb:59:94:ae:39:c6:3a:ba:d9:17:
13:20:8d:aa:d2:96:70:cd:6e:b4:ae:87:17:74:07:67:d4:50:
20:04:e8:3d:ce:0e:ef:91:c0:73:40:a3:3c:4b:96:bd:19:75:
05:79:39:23:cd:25:50:ac:ed:a7:ae:c9:1f:5a:36:ad:00:ba:
7c:cd:bb:0d:01:10:dc:eb:46:c7:b0:a6:82:87:1a:aa:e3:33:
be:3f:4e:1d:f2:25:71:83:17:d4:5d:dd:5e:35:cf:1b:71:26:
96:b9:86:69:c6:87:da:74:14:07:2a:1e:1e:96:39:17:3c:5c:
81:20:44:ab:ae:fa:8b:51:67:e6:91:4e:ff:5d:3c:0b:b9:ec:
f1:45:3f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:14 2024 by rpki-client on console-fra.rpki-client.org