Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bPfVfMuZF-_fKmXLmZ0AxdyTeGY.roa
File: bPfVfMuZF-_fKmXLmZ0AxdyTeGY.roa (raw, json)
Hash identifier: oh6eq/MyQVyDhHAuOoLg0OP2M5TKzr3qu05vjFqh+pQ=
Subject key identifier: 6C:F7:D5:7C:CB:99:17:EF:DF:2A:65:CB:99:9D:00:C5:DC:93:78:66
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A0DECDB11C7EC446177C129FE0E12
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bPfVfMuZF-_fKmXLmZ0AxdyTeGY.roa
Signing time: Tue 02 Jan 2024 12:33:22 +0000
ROA not before: Tue 02 Jan 2024 12:33:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50927
IP address blocks: 95.46.160.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 11:05:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:0d:ec:db:11:c7:ec:44:61:77:c1:29:fe:0e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cf7d57ccb9917efdf2a65cb999d00c5dc937866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b2:04:2c:d1:ea:bb:8c:df:77:48:ea:4e:b2:
d6:39:6b:fd:8a:43:c3:e8:e0:15:c3:25:6e:64:3c:
5e:d4:51:ca:aa:e1:3a:20:79:90:9e:9d:be:47:73:
a0:2b:36:f4:91:57:aa:e2:d5:bf:80:03:7b:c0:fb:
8f:80:0b:b0:ee:86:fb:7a:50:0f:de:c0:cc:01:0c:
28:8f:c8:72:ff:8b:ad:b1:b5:50:6b:ca:ec:b1:db:
03:ad:3c:cd:4f:3b:b2:c7:22:8b:63:43:06:50:44:
38:d2:d2:c8:bd:30:b9:76:e4:50:8d:f1:7f:25:90:
cf:0f:da:bc:1e:f1:ff:ad:d1:87:51:3c:6c:2b:73:
e2:e3:97:5d:36:bf:9b:78:c5:7a:48:d5:f7:30:f8:
f6:e1:76:47:0b:ba:a3:22:5e:68:57:3c:0f:58:46:
f0:f3:dc:4b:99:cf:d3:db:59:9d:13:51:11:c5:91:
88:56:20:bb:4d:0b:12:60:cc:3b:df:65:54:09:97:
e9:86:11:71:96:67:ce:67:4c:a5:81:c1:f6:04:9b:
01:5b:05:3a:4d:64:98:7a:07:94:60:eb:73:2b:73:
6e:2f:fb:5e:01:71:7f:21:cf:4f:0b:00:0e:cf:84:
ed:66:69:da:35:5b:79:96:ec:00:55:3e:7f:6e:05:
1a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F7:D5:7C:CB:99:17:EF:DF:2A:65:CB:99:9D:00:C5:DC:93:78:66
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bPfVfMuZF-_fKmXLmZ0AxdyTeGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.160.0/22
Signature Algorithm: sha256WithRSAEncryption
69:06:84:61:cf:85:d9:23:01:e0:f3:d9:bc:a1:c8:b3:54:84:
05:9d:22:ba:9e:36:ca:6c:95:0d:7d:fe:6c:d0:8f:ee:6f:58:
f7:3d:d5:ca:8d:11:70:84:64:95:8e:52:d8:05:ca:05:a6:a1:
d9:c9:ec:21:38:35:b1:3b:b4:50:41:d5:85:24:ca:c0:7f:2d:
75:e8:8a:41:2a:6d:28:70:93:fa:85:35:bb:9d:e1:ba:b5:80:
aa:4f:be:c3:33:4e:a9:b6:d5:5c:73:db:3c:f6:b4:c6:c5:ce:
52:e8:ba:d4:68:0f:6e:e3:03:6b:3a:b8:5f:43:76:62:c5:0b:
82:ae:81:7a:bc:8f:ec:e4:08:b3:87:cc:0e:54:3c:71:9f:ff:
32:6b:2d:50:db:4a:24:7d:ab:02:02:84:8a:8d:97:d1:90:41:
52:69:69:80:b9:f0:59:bf:cd:49:79:c2:9e:bc:a5:f8:8f:3e:
c8:78:35:26:1c:c6:18:e5:94:0d:2b:e5:a2:92:52:9a:bc:cb:
85:62:64:2f:07:46:51:8f:13:3d:1f:dd:19:58:9c:29:5d:ed:
80:78:2e:ac:19:61:88:a3:58:99:52:4d:2b:3b:b5:45:24:c4:
2b:bb:ef:2e:82:59:ea:24:6c:4f:6c:bf:b0:be:8d:d3:f5:94:
6a:6b:cb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:51 2024 by rpki-client on console-ams.rpki-client.org