Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/d1ae-0As260m5Ymlh37Z9ZWLtg4.roa
File: d1ae-0As260m5Ymlh37Z9ZWLtg4.roa (raw, json)
Hash identifier: ZQKY1L9lJg+0Nw5IPyN35fJMSKLbREX3SzMLagfSMuw=
Subject key identifier: 77:56:9E:FB:40:2C:DB:AD:26:E5:89:A5:87:7E:D9:F5:95:8B:B6:0E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095A0306C18520CD808A704FC9C722F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/d1ae-0As260m5Ymlh37Z9ZWLtg4.roa
Signing time: Mon 02 Jan 2023 03:45:31 +0000
ROA not before: Mon 02 Jan 2023 03:45:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206326
IP address blocks: 95.47.104.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:a0:30:6c:18:52:0c:d8:08:a7:04:fc:9c:72:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77569efb402cdbad26e589a5877ed9f5958bb60e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9a:d7:5a:26:b1:77:86:a9:87:0a:c1:3b:bb:
7b:29:62:8b:54:01:30:0e:06:e9:48:40:f7:91:70:
6a:9d:5c:31:d1:f7:46:be:3c:d8:d7:de:b8:2a:5e:
c6:70:05:d7:fa:6f:da:f8:67:58:8e:c5:52:ba:d1:
b2:d3:b0:8a:09:9d:ff:cb:78:2d:fa:54:81:22:fe:
bc:d6:73:2b:a1:54:32:d4:a7:ff:f1:88:74:13:2c:
46:0d:cd:46:1b:5f:7d:22:e3:64:f3:97:d1:a4:87:
00:51:06:ec:17:b7:ff:a7:5e:6b:60:e5:21:23:16:
c8:b2:b5:a0:a2:64:74:f5:b6:bb:68:9d:f2:20:c3:
f9:46:2b:5f:0a:4a:01:49:a3:79:d2:0f:05:5d:e0:
1f:b3:33:ab:9b:01:7f:5d:3a:8e:4c:77:a7:e6:6e:
df:20:5f:4d:b0:72:7d:cb:b2:a3:8b:f4:ae:74:c2:
d3:a0:32:13:64:9e:d3:de:c1:49:18:53:5b:5c:06:
36:af:ad:23:20:04:ed:fa:ea:7c:71:af:b6:34:5c:
1c:4c:29:49:9a:f9:77:65:7c:32:16:9d:bb:0f:92:
d7:56:3d:60:73:a1:89:04:6a:4c:d0:f7:18:f3:45:
f2:84:ce:a4:c2:57:28:bd:03:41:38:a1:94:36:e1:
f5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:56:9E:FB:40:2C:DB:AD:26:E5:89:A5:87:7E:D9:F5:95:8B:B6:0E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/d1ae-0As260m5Ymlh37Z9ZWLtg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.104.0/22
Signature Algorithm: sha256WithRSAEncryption
52:6f:92:c8:90:47:48:e3:88:54:d1:ea:ce:7c:76:8d:21:90:
5e:c8:cb:83:05:63:e4:a3:16:3c:b5:06:5d:2e:42:3d:a4:b2:
81:34:d5:03:76:ab:49:92:0c:c0:bd:e8:9b:98:65:55:fd:17:
ba:7f:a9:c5:3c:23:c0:4e:32:75:f2:f5:aa:12:34:b3:21:6b:
f0:37:bb:10:62:15:11:fb:16:1a:91:93:41:e1:64:2f:fa:38:
55:e7:b4:af:aa:e2:5a:0b:06:1e:9d:50:b9:ba:8e:5c:3e:c5:
95:fd:13:47:5d:f8:43:03:8d:b4:8e:3e:06:1b:0f:b1:82:03:
ba:8c:a1:40:27:39:7d:04:c5:9e:95:95:10:27:0f:b1:79:1d:
60:ad:34:39:f2:91:d7:1b:e2:39:61:da:e2:04:ad:16:f7:f2:
60:a2:db:ab:fa:38:1c:07:e5:9b:fc:ad:2f:ed:1c:bb:f6:5f:
7b:b7:fb:cd:28:db:19:58:3e:13:f4:b8:cf:ab:d8:fd:7c:dd:
39:f3:f9:99:23:f0:00:61:f8:e6:8c:68:9c:25:76:8d:67:83:
dd:94:55:8b:ac:ec:3d:32:99:f6:10:16:50:3b:b4:b8:cb:e2:
c8:a8:6a:ce:ab:ef:41:df:8d:c9:ae:1e:6f:98:58:ab:f9:5e:
3a:a4:1e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:51 2024 by rpki-client on console-ams.rpki-client.org