Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DqBhRf47PLpS4x2bATbVtLBWq1g.roa
File: DqBhRf47PLpS4x2bATbVtLBWq1g.roa (raw, json)
Hash identifier: z7DK/vqTIyhGaIj9WZfaYUSbXYAP0uqpEeU0nsVCGc8=
Subject key identifier: 0E:A0:61:45:FE:3B:3C:BA:52:E3:1D:9B:01:36:D5:B4:B0:56:AB:58
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570955E31B4FE91F8D2669DECE4DA3276
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DqBhRf47PLpS4x2bATbVtLBWq1g.roa
Signing time: Mon 02 Jan 2023 03:45:15 +0000
ROA not before: Mon 02 Jan 2023 03:45:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57764
IP address blocks: 95.46.64.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:5e:31:b4:fe:91:f8:d2:66:9d:ec:e4:da:32:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ea06145fe3b3cba52e31d9b0136d5b4b056ab58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1f:8e:90:a1:be:45:30:15:e9:ec:e3:16:d3:
0c:c4:57:c1:61:e2:44:60:80:07:7f:fc:9d:ae:d9:
ef:4c:1e:91:ab:c2:9e:0b:b6:af:0d:25:b9:3c:05:
4f:02:d4:81:0e:ef:7a:09:27:85:00:4f:01:74:e2:
23:46:b5:c4:4f:62:f0:04:fc:12:61:5c:27:20:c9:
6b:0c:a7:07:e9:3d:d7:48:bf:d2:fd:e1:41:24:0e:
14:5d:75:bf:9e:25:5a:44:88:78:19:d4:67:9e:4c:
bf:4e:f3:1b:fb:00:19:d4:da:d8:5d:8b:e9:39:7a:
7e:ab:07:59:c7:c4:05:5d:bd:68:c1:b3:dc:ad:c0:
e4:e6:f4:cc:34:d3:9d:5d:ad:06:0a:3f:79:bd:d1:
47:8f:d6:84:ce:a7:16:63:57:65:0f:dd:bb:79:fd:
b1:c4:68:9e:d1:b7:ce:b2:dd:f2:6f:ff:e2:1f:a4:
11:70:c4:f9:ee:5a:0d:ec:b0:81:00:d8:9c:00:90:
ff:db:22:80:63:0d:86:06:47:5f:46:e7:2b:9a:c1:
fd:b2:aa:d0:a8:6b:0e:c1:b5:8c:38:e8:6f:6e:7f:
09:2d:e4:79:0d:bc:61:c3:29:2a:34:3c:de:d7:c4:
69:bb:9d:76:19:ce:10:4b:be:67:da:dc:9e:72:57:
3b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A0:61:45:FE:3B:3C:BA:52:E3:1D:9B:01:36:D5:B4:B0:56:AB:58
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DqBhRf47PLpS4x2bATbVtLBWq1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.64.0/21
Signature Algorithm: sha256WithRSAEncryption
90:cc:9c:15:ee:8f:f6:ec:05:5b:45:ae:8e:3c:de:46:b7:ca:
21:d5:bb:df:52:c4:c6:35:dd:c8:83:45:32:12:43:a5:14:6c:
af:9f:fa:97:7e:ba:7f:91:81:44:37:82:2e:87:93:16:8b:d2:
f7:f6:0c:50:93:19:25:7c:06:f6:0f:b5:91:51:80:95:13:a9:
f0:d3:72:d2:66:1a:63:15:c1:b9:6d:0c:3d:d9:e4:40:7f:e3:
4b:3e:57:77:ab:e0:ad:fe:aa:e6:77:f8:ef:c6:95:65:8e:73:
81:03:86:f8:c8:8f:b0:6e:68:95:63:ec:94:f7:8c:fb:eb:9d:
d9:f7:8c:67:ee:15:1b:ab:bf:5a:c3:1f:74:91:d9:ef:71:65:
e2:96:c2:7c:8f:32:68:1b:86:53:17:d7:0f:fe:30:a2:4f:83:
5b:2b:e2:c1:c6:b6:9e:85:12:ff:76:0b:dd:bc:14:22:c7:fa:
51:e8:d8:72:7c:da:f0:6b:4b:ad:84:cf:d7:81:a3:f3:6e:cc:
3e:8a:d8:8c:d7:1b:f2:8d:06:00:71:19:16:16:74:4a:e8:9a:
24:84:7e:d6:be:0f:82:4b:c6:d3:cf:3c:56:a4:e2:cf:76:e3:
80:6f:0e:4d:56:db:17:23:46:9e:27:de:9e:6e:3b:20:a1:93:
62:ca:d1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:31 2024 by rpki-client on console-fra.rpki-client.org