Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8RBdzUSeNkvwUPVkofobwxf1mHo.roa
File: 8RBdzUSeNkvwUPVkofobwxf1mHo.roa (raw, json)
Hash identifier: aVzqSPSK0UK3tWL7tZDbkCi+MVfx+9P5FAb2qfdho7k=
Subject key identifier: F1:10:5D:CD:44:9E:36:4B:F0:50:F5:64:A1:FA:1B:C3:17:F5:98:7A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01867F9553327085A9BAD1A05FA593FB36EB
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8RBdzUSeNkvwUPVkofobwxf1mHo.roa
Signing time: Thu 23 Feb 2023 18:42:17 +0000
ROA not before: Thu 23 Feb 2023 18:42:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51803
IP address blocks: 95.46.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7f:95:53:32:70:85:a9:ba:d1:a0:5f:a5:93:fb:36:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Feb 23 18:42:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1105dcd449e364bf050f564a1fa1bc317f5987a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:09:70:c1:d7:14:96:a7:2e:79:92:41:a6:a1:
f8:7f:76:82:12:25:e7:f4:47:05:7a:8c:f7:ed:dd:
e5:87:2d:74:8a:1a:29:b1:15:0b:55:72:78:b9:dd:
c2:e8:3e:da:2d:36:6d:be:9b:df:6f:8c:8c:09:2e:
37:e7:81:c5:f4:f0:ef:43:f2:54:59:3e:ef:29:b1:
87:a3:6e:24:cb:c6:fb:f3:a2:f0:c5:07:42:e7:54:
cf:a5:f9:1a:04:8b:eb:27:37:24:8f:79:3e:d7:a1:
ad:bd:6b:0a:68:1f:20:a7:5f:d8:3f:ef:25:ba:19:
c0:1c:c6:a8:6a:41:51:ff:e6:a2:7b:fe:f3:cf:8e:
4f:41:ab:c1:2d:82:88:16:84:50:23:75:25:07:cd:
31:42:a5:d2:9b:da:69:a7:2a:01:de:eb:f0:f3:e4:
3b:54:f2:be:89:5b:0e:a3:42:d7:15:d6:97:01:d6:
ba:f3:a6:43:17:07:9c:60:01:72:65:e8:bd:d2:be:
5e:3d:61:75:ef:ce:05:b1:d8:c4:00:e2:8d:91:18:
41:c7:2d:b7:31:6e:ea:81:af:1a:36:3e:32:19:a6:
ee:56:5c:2b:ee:a0:78:4c:2a:70:85:05:69:20:27:
f2:b5:c9:3c:8e:ea:71:45:e2:43:15:cb:d5:4d:6c:
e3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:10:5D:CD:44:9E:36:4B:F0:50:F5:64:A1:FA:1B:C3:17:F5:98:7A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8RBdzUSeNkvwUPVkofobwxf1mHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.32.0/24
Signature Algorithm: sha256WithRSAEncryption
83:35:b8:62:40:43:c5:69:61:67:18:5b:be:b2:42:4a:df:b9:
5c:fe:bc:56:f4:80:d8:e2:ee:d0:cd:a9:a5:ef:d0:32:c7:25:
9f:66:fc:62:51:50:9f:b3:3d:65:8b:f1:b6:e7:da:59:5d:fb:
63:ba:15:41:d0:cc:3e:c4:fa:5c:1d:41:ce:cc:41:2e:36:0e:
47:14:c6:b7:dc:66:95:04:a6:87:2a:09:66:b9:69:12:3d:73:
39:38:7f:6f:7b:47:8d:8c:46:24:81:d8:e2:bd:1e:29:c9:9a:
f5:e2:95:1e:a7:17:fc:6f:4f:e3:a8:06:e1:2a:dc:8b:11:3f:
07:ed:b1:97:c7:67:fd:3e:f7:4b:39:ae:86:de:8b:ad:f8:2c:
9e:24:88:18:53:ef:5f:91:5c:92:56:6b:39:80:32:69:6b:de:
82:bb:68:ed:03:69:61:56:f9:b9:d2:3c:06:62:21:75:3f:3e:
5b:20:49:6d:c5:81:e3:e8:20:9e:c4:c5:9c:df:b6:57:df:39:
85:c4:a3:2b:43:2f:1e:a0:43:dd:ac:26:af:d7:87:23:0f:8b:
c5:1a:39:0a:6a:66:38:e3:4b:3c:aa:c8:b3:9f:61:75:bd:5b:
ad:a0:6a:85:ec:30:9d:fe:b1:b6:3e:a0:31:fa:90:62:cb:f2:
4b:ea:73:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:36 2024 by rpki-client on console-fra.rpki-client.org