Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/J67qOinS0ESVXoS-OCTbK4Ofw_w.roa
File: J67qOinS0ESVXoS-OCTbK4Ofw_w.roa (raw, json)
Hash identifier: 8F9K9gJM5wRRGHDthL9JeHI8WRM0cSMHVuzXb3EvIQs=
Subject key identifier: 27:AE:EA:3A:29:D2:D0:44:95:5E:84:BE:38:24:DB:2B:83:9F:C3:FC
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0189FE46929D46E7EFBA708947241C95DD32
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/J67qOinS0ESVXoS-OCTbK4Ofw_w.roa
Signing time: Wed 16 Aug 2023 12:16:25 +0000
ROA not before: Wed 16 Aug 2023 12:16:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213029
IP address blocks: 95.47.124.0/23 maxlen: 24
93.170.6.0/24 maxlen: 24
95.47.238.0/23 maxlen: 24
95.47.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fe:46:92:9d:46:e7:ef:ba:70:89:47:24:1c:95:dd:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Aug 16 12:16:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27aeea3a29d2d044955e84be3824db2b839fc3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a0:82:c7:cc:16:49:e0:20:2d:9f:4f:45:8e:
d1:d1:ea:29:b8:71:3b:66:55:5c:cf:63:ca:17:2c:
ff:7c:00:5a:4a:f8:df:13:6c:89:93:cc:39:e3:85:
b5:02:a3:d1:09:8b:1a:dd:ed:af:2f:75:95:c4:b8:
5e:2e:3b:c9:00:4e:1d:3a:a3:66:66:05:b5:cf:50:
8c:8c:5e:d7:29:2d:43:cc:15:2e:f4:6a:19:cc:2e:
86:b6:8b:34:e7:86:eb:7d:0d:14:a8:e5:e7:7d:34:
7b:ea:32:2a:ac:83:ed:3c:a5:9c:06:ca:2a:c0:71:
45:16:f6:c8:03:41:3d:73:66:d5:12:db:2d:68:ed:
71:d5:b0:7a:b0:52:c0:b8:0a:3a:fc:e3:1e:77:33:
77:4c:28:a4:1b:48:be:56:d1:98:f3:a9:f3:4f:10:
3a:8c:df:ab:48:6a:29:af:86:6d:ad:b9:fa:f5:25:
99:e0:04:05:51:c8:a7:e9:6a:ba:16:58:29:75:6f:
cc:94:b9:14:bb:fd:81:06:54:6b:49:c8:f2:8c:04:
cc:bf:34:1b:55:1c:71:ee:19:be:bf:b9:3c:ea:4d:
2a:ad:d6:a5:1f:8b:8c:36:1b:01:66:c1:42:21:13:
b2:3c:ca:8d:a9:20:fd:12:f4:e0:aa:f7:e0:57:bc:
2f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AE:EA:3A:29:D2:D0:44:95:5E:84:BE:38:24:DB:2B:83:9F:C3:FC
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/J67qOinS0ESVXoS-OCTbK4Ofw_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.6.0/24
95.47.124.0/23
95.47.127.0/24
95.47.238.0/23
Signature Algorithm: sha256WithRSAEncryption
09:bc:ca:7e:1c:5b:10:a7:65:bb:fd:dd:f4:db:5b:3f:0b:14:
8a:21:12:bf:2f:7b:1b:04:01:be:26:42:8d:37:58:43:d6:de:
94:22:8c:9e:a5:31:a1:69:f5:6c:43:8e:1d:cd:27:2c:b5:80:
a7:fd:61:8a:7d:55:70:6e:e5:75:7c:57:ed:29:86:d0:88:52:
43:a6:48:06:18:05:78:83:fb:b4:8b:ac:4c:e2:89:68:73:06:
83:06:b6:79:99:df:73:1e:3d:13:01:1c:26:2c:a8:2e:4d:22:
8e:68:f4:84:7c:b5:31:e6:53:14:97:95:17:d5:2c:09:88:cd:
cb:95:80:ce:f2:45:1f:c4:a6:30:51:84:5f:fd:02:12:bb:af:
3d:56:63:cd:38:38:20:12:b5:d3:ad:46:3c:7b:f3:5d:e5:52:
c1:47:20:b3:75:ea:54:6b:50:b2:0a:46:ef:8a:99:ae:2e:99:
df:7d:fe:3e:fe:ff:88:8c:85:40:26:80:b3:aa:a3:e8:be:a5:
b5:ef:5a:3c:80:5d:fd:1b:2b:ec:50:77:b9:7d:bb:8f:f0:d8:
87:18:cc:ba:7b:95:8b:16:32:df:7e:90:3c:6f:8f:60:88:1b:
92:08:cf:b8:00:b3:75:13:6f:3a:9b:58:11:73:55:2d:9e:62:
12:94:1f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:36 2024 by rpki-client on console-fra.rpki-client.org