Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/j0yB6-Hj67xTNfSvhIFSBQ-1CQk.roa
File: j0yB6-Hj67xTNfSvhIFSBQ-1CQk.roa (raw, json)
Hash identifier: cfGZqbMgTezcoK7zbjF6Ic3yBr6i+K9jZ8UJcAqtAzY=
Subject key identifier: 8F:4C:81:EB:E1:E3:EB:BC:53:35:F4:AF:84:81:52:05:0F:B5:09:09
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095A2B6F0384840566369D4F47EC2C1
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/j0yB6-Hj67xTNfSvhIFSBQ-1CQk.roa
Signing time: Mon 02 Jan 2023 03:45:32 +0000
ROA not before: Mon 02 Jan 2023 03:45:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207397
IP address blocks: 95.47.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Feb 2023 08:41:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:a2:b6:f0:38:48:40:56:63:69:d4:f4:7e:c2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f4c81ebe1e3ebbc5335f4af848152050fb50909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ca:76:cb:70:fc:d5:24:be:40:c0:a7:12:cf:
1c:7b:c8:2c:24:e0:9c:39:16:8b:86:a3:23:27:18:
62:16:14:56:f8:7a:b5:ff:c6:db:8e:fc:7a:e7:c0:
67:d0:09:d1:ab:29:85:b1:3d:96:8b:50:de:88:58:
8c:61:e0:a6:67:35:fc:ca:67:c5:b1:10:19:96:df:
84:16:31:66:bb:8c:85:c7:fb:a1:e5:50:44:4a:c5:
da:60:ec:d4:dd:a9:73:7f:3f:e1:fa:aa:4e:a2:aa:
42:71:77:d8:8e:69:e9:e9:75:9b:ca:22:b7:71:0a:
21:47:be:8d:db:69:bb:3c:13:74:93:f2:f7:84:7a:
d7:32:67:1f:89:89:50:3b:e5:bb:cd:20:04:41:13:
5a:3c:0f:a7:69:d8:ae:c5:18:31:c8:13:3c:ec:6b:
f0:4c:e6:08:21:ac:c4:c2:15:ad:91:9f:22:04:15:
5f:9a:64:c6:88:7d:87:38:2c:06:c9:ff:a6:60:20:
82:e4:78:f5:fd:7b:eb:35:3f:cf:8f:e3:78:74:b3:
99:67:4c:4a:e6:d4:0f:b7:c5:69:49:34:a0:d9:c1:
20:5a:38:94:0c:2a:b7:b4:07:78:5a:1d:97:70:a4:
75:30:59:d2:6b:bc:c9:08:58:21:33:44:ad:52:17:
e5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4C:81:EB:E1:E3:EB:BC:53:35:F4:AF:84:81:52:05:0F:B5:09:09
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/j0yB6-Hj67xTNfSvhIFSBQ-1CQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.117.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:53:93:c6:23:ad:ba:a5:ae:1e:39:79:61:c1:34:6a:28:bd:
1a:52:d5:e6:c1:05:ef:9a:33:e3:b5:8c:dc:b3:45:a2:11:5f:
62:67:2b:e9:b6:d0:6a:7d:1e:51:82:fd:e7:51:7b:26:9a:ea:
54:3b:77:05:a2:e6:54:49:3c:b0:90:c9:3c:ec:b1:8c:41:7b:
3f:aa:86:de:9a:e2:c1:e3:f8:4e:3e:16:df:6c:fc:e2:ba:d4:
69:c2:49:ff:a0:fe:9a:f1:d3:7f:7e:c0:72:ba:2d:67:9a:21:
1b:e4:d1:46:b5:eb:35:59:ac:ad:9a:93:7f:e2:73:91:39:f2:
58:94:8b:46:9b:cf:67:22:dd:76:f9:2e:e8:fe:3d:be:5d:95:
3b:af:06:5f:c5:c7:f7:42:a3:80:00:49:37:ae:4d:f7:cb:a9:
a0:e1:62:03:9a:d5:04:9c:dc:fa:b5:53:90:01:69:63:70:79:
0f:96:55:1a:fe:bf:1d:42:77:ca:18:13:12:d9:46:e0:e9:ba:
1d:8f:a1:cf:e1:dc:24:2a:e8:33:dd:d1:09:40:04:73:a0:84:
dd:e8:47:88:8f:06:b8:67:df:b7:d6:84:7d:ac:1e:c4:0d:10:
df:7c:85:40:d9:b8:46:01:96:24:80:b0:3f:ff:a3:b5:bd:81:
52:17:1d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:37 2024 by rpki-client on console-fra.rpki-client.org