Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/k_dddNqFwDwSiEMCh996OgLwSic.roa
File: k_dddNqFwDwSiEMCh996OgLwSic.roa (raw, json)
Hash identifier: pJVDcuSR8cXk7fxTY1EwdOqJVJuq4aVkAbrF2Cetf4I=
Subject key identifier: 93:F7:5D:74:DA:85:C0:3C:12:88:43:02:87:DF:7A:3A:02:F0:4A:27
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A0C419AFFD6A5460A4CD78BB1219A
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/k_dddNqFwDwSiEMCh996OgLwSic.roa
Signing time: Tue 02 Jan 2024 12:33:22 +0000
ROA not before: Tue 02 Jan 2024 12:33:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50765
IP address blocks: 95.47.62.0/24 maxlen: 24
2a02:128:6::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:0c:41:9a:ff:d6:a5:46:0a:4c:d7:8b:b1:21:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93f75d74da85c03c1288430287df7a3a02f04a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9a:35:53:0a:36:95:9b:6b:49:08:ff:33:b9:
a1:46:0b:30:4c:78:df:a4:5c:95:06:65:25:bf:19:
0e:23:7e:dd:a5:d9:52:91:5c:c2:3b:e6:c6:75:bb:
ec:19:1c:54:68:25:12:af:44:18:f0:d9:79:d8:a4:
72:7a:de:0f:76:cd:01:8f:ad:df:34:5a:c3:c7:8c:
22:75:30:42:72:92:f6:59:64:c9:e1:1f:8d:bb:78:
5e:36:34:a5:4c:d8:88:14:f7:da:60:eb:21:4f:27:
61:be:c1:98:df:54:ad:d9:e7:e0:c6:af:56:dc:bd:
ee:fb:1f:06:eb:e8:29:8b:be:61:cf:08:7a:a5:87:
27:02:00:f7:be:8f:ea:ab:28:b6:eb:b2:88:c0:6c:
38:83:44:dc:3b:e8:01:f1:1a:83:83:3c:e0:a2:70:
01:5f:e4:3d:05:39:7c:04:1f:09:38:f6:13:6a:d9:
13:a1:86:25:df:5a:e9:57:3d:ee:bd:4d:7e:60:a4:
0c:20:63:97:cf:a1:ab:9f:04:67:d3:40:8f:25:04:
94:40:56:92:46:3a:d8:86:a2:92:b1:74:2e:05:50:
36:65:33:3f:58:f8:f7:4a:1b:e1:cd:f5:23:3f:65:
f6:82:46:41:25:18:5a:11:40:2e:4b:b3:0b:ec:a8:
0e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F7:5D:74:DA:85:C0:3C:12:88:43:02:87:DF:7A:3A:02:F0:4A:27
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/k_dddNqFwDwSiEMCh996OgLwSic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.62.0/24
IPv6:
2a02:128:6::/48
Signature Algorithm: sha256WithRSAEncryption
7a:21:7d:f9:6f:fb:f6:fc:b0:03:09:30:3e:50:f6:6b:d7:e9:
f9:88:9f:a1:77:f2:1e:cc:e8:16:da:d2:11:18:81:44:55:70:
50:6f:b4:01:35:ae:27:9e:73:6b:17:72:ba:9a:a6:e4:34:17:
0d:b9:ce:6f:63:f2:7e:17:9c:af:d5:d5:8a:5f:8e:e2:a6:01:
bc:82:90:26:2c:7f:01:5b:75:5b:b4:6b:43:d9:bc:31:7b:9d:
9a:fe:a9:7b:ca:e8:e0:80:12:a8:eb:cf:05:63:d9:c7:07:d0:
82:1d:2c:b7:c7:64:53:79:ae:9c:9a:80:64:b4:c5:0e:e8:31:
a3:74:22:fd:3a:7f:2b:54:77:d1:bb:8d:04:55:ae:8e:ad:ab:
79:11:02:a1:ca:34:36:0e:e5:2e:82:0d:8f:25:ee:ff:06:ab:
81:30:7f:d5:7b:de:05:92:7b:e8:2a:d3:4e:c4:f4:df:1c:ea:
17:fb:97:b5:f7:4b:47:af:35:9d:6e:e5:72:1e:52:b8:0a:88:
ba:39:37:13:96:86:f4:60:0b:b9:68:65:9d:f8:30:9d:b0:ab:
ee:86:5c:57:12:f9:b6:ec:c5:2b:1c:c3:8d:dc:97:d5:33:d6:
69:13:60:bf:78:19:81:04:a2:c5:f9:ad:28:57:8d:90:1c:67:
d3:ee:20:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:45:01 2025 by rpki-client