Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/XaaRJfF7cbprGUHKdTQ3ihn2rIY.roa
File: XaaRJfF7cbprGUHKdTQ3ihn2rIY.roa (raw, json)
Hash identifier: +ZHsqC3A5G4uDQkRg1cdY71ek7qyuR0SzGp4k07oEVY=
Subject key identifier: 5D:A6:91:25:F1:7B:71:BA:6B:19:41:CA:75:34:37:8A:19:F6:AC:86
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A352FF461C1F9A44196B03A635CA8
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/XaaRJfF7cbprGUHKdTQ3ihn2rIY.roa
Signing time: Tue 02 Jan 2024 12:33:32 +0000
ROA not before: Tue 02 Jan 2024 12:33:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198681
IP address blocks: 95.46.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:35:2f:f4:61:c1:f9:a4:41:96:b0:3a:63:5c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5da69125f17b71ba6b1941ca7534378a19f6ac86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:73:e2:cd:4e:d1:f2:25:78:92:23:c5:3d:2f:
5a:d9:68:3f:83:5d:b2:79:28:19:be:c0:67:e2:2b:
26:07:29:15:74:67:9a:4c:eb:a9:07:a0:4d:bc:aa:
7f:4a:dd:9e:8c:c4:5b:8a:7c:2e:5b:0f:b9:bd:32:
66:1a:0e:8b:bd:8b:60:fa:70:30:d7:a0:3a:f8:90:
86:90:a3:7c:b6:5a:de:ae:5a:c2:2a:1d:47:a1:bd:
20:0e:71:20:dd:9a:0b:1b:c7:89:b4:9c:42:c9:2d:
94:6d:21:4d:da:7d:33:ad:53:85:a3:1d:a5:c5:a5:
4b:77:be:3e:35:f2:21:55:6b:aa:29:ad:f4:5c:2d:
04:6c:9e:b3:d9:8a:46:a9:05:7b:d5:bf:83:4c:ac:
bd:30:b2:8c:94:5f:56:07:cb:56:ca:c7:17:97:af:
f8:63:0a:9a:47:70:cd:00:1c:8e:13:84:e9:87:d7:
49:63:73:a3:b6:87:83:02:1e:a1:58:0b:49:91:9c:
4d:31:06:1e:be:af:a4:f0:7d:4a:d5:8e:e9:ce:bf:
70:f2:cd:20:30:66:bb:e7:66:6a:d8:47:bd:97:f7:
de:18:d1:06:3f:19:09:e9:2d:9c:7a:6d:55:5e:6b:
7f:97:8e:cb:7c:9a:8b:5f:cd:2d:ae:34:d5:c9:f8:
15:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A6:91:25:F1:7B:71:BA:6B:19:41:CA:75:34:37:8A:19:F6:AC:86
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/XaaRJfF7cbprGUHKdTQ3ihn2rIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.105.0/24
Signature Algorithm: sha256WithRSAEncryption
50:4e:a0:cf:ed:19:7e:9d:6f:8a:70:d8:05:07:49:7b:29:24:
c3:ef:e7:0b:ee:04:e1:78:a2:df:b3:94:24:9c:03:48:f8:d7:
57:b1:8f:4d:08:2d:24:64:a5:73:c7:f5:d8:09:e0:bb:f2:e1:
d5:cf:3a:b6:9b:a9:6a:ca:30:ea:d8:44:d0:a1:87:d8:81:36:
e6:7f:ff:ab:78:e4:ba:f9:d9:ad:be:fa:09:80:26:24:f8:59:
57:c0:55:a2:96:ac:22:f1:ed:ad:37:99:52:00:ce:0d:9b:9b:
4a:69:8e:af:d4:70:d9:60:e1:45:a8:d7:25:e8:80:13:7f:c0:
c4:d8:a3:58:18:ae:2d:7e:bc:fa:40:25:e5:13:a2:0e:cd:4d:
96:6f:87:bd:80:08:31:ec:1e:4c:62:ae:f9:75:89:e3:d7:46:
ac:b6:dd:98:7c:6d:e2:a1:28:34:25:dd:39:9c:8c:27:ae:b3:
21:ed:ac:b9:80:cb:f9:e8:33:4e:0a:aa:79:19:30:31:02:f2:
f8:e8:8f:db:fe:7e:fd:79:19:f5:ce:9e:3e:51:b5:00:8f:0d:
e2:31:91:6b:fb:c8:35:aa:e3:32:c8:67:ae:a8:43:2c:45:ec:
05:e4:06:38:14:b9:4a:b0:b4:9c:3a:b9:d3:25:e5:a1:9c:b5:
be:91:1e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:55:50 2025 by rpki-client