Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lrrzH0N1AIT6PMQeDCjBjYbhl3U.roa
File: lrrzH0N1AIT6PMQeDCjBjYbhl3U.roa (raw, json)
Hash identifier: e/1ykDodI5Sqbj0G164x0nDXeLYbTNJ8IA/agHZ1E0k=
Subject key identifier: 96:BA:F3:1F:43:75:00:84:FA:3C:C4:1E:0C:28:C1:8D:86:E1:97:75
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29FAEB9AE0DF3DABE9FDDDD76CB76D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lrrzH0N1AIT6PMQeDCjBjYbhl3U.roa
Signing time: Tue 02 Jan 2024 12:33:17 +0000
ROA not before: Tue 02 Jan 2024 12:33:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44956
IP address blocks: 95.47.247.0/24 maxlen: 24
95.46.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:fa:eb:9a:e0:df:3d:ab:e9:fd:dd:d7:6c:b7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96baf31f43750084fa3cc41e0c28c18d86e19775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:11:0e:73:31:96:0c:a6:96:51:68:59:8c:2c:
2e:6e:42:1d:f5:59:1a:c7:66:f6:90:10:71:1b:73:
f0:4f:7a:4f:9c:11:f4:b6:b3:17:2f:1e:37:e5:c5:
b8:fc:3a:6c:9f:77:e8:07:f6:3d:5b:c9:56:4c:2c:
6b:a1:fe:54:70:fb:02:5e:ed:8a:a2:5d:aa:66:c7:
cc:0e:08:b2:95:67:17:bc:53:8b:34:38:28:39:cb:
2e:e2:79:53:5e:9b:94:e4:84:c4:26:1d:53:a9:50:
eb:10:5a:fd:af:0b:92:e8:de:f4:5a:65:ee:ec:35:
de:c1:32:b6:cf:fa:7a:10:97:9b:ea:7e:64:b7:8a:
08:57:fa:b0:3f:be:1e:65:95:61:65:72:a6:63:cd:
51:4f:09:17:4c:0a:03:71:67:1a:97:13:71:13:f2:
7a:91:a3:0b:51:6c:14:1d:4b:2f:64:af:d6:f4:82:
03:a7:2b:0a:e3:fc:a9:f8:2c:b4:5c:d4:41:84:df:
9d:9a:eb:e5:e4:aa:4f:24:8c:ce:b3:7a:5d:ec:ad:
13:e2:16:8e:83:58:6f:aa:d7:e1:a6:4d:04:9b:1f:
fa:34:f1:23:02:11:db:58:48:0b:1c:95:ad:9b:3e:
9e:76:d3:e9:93:77:78:a9:f8:5e:b7:fe:c5:1a:70:
33:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BA:F3:1F:43:75:00:84:FA:3C:C4:1E:0C:28:C1:8D:86:E1:97:75
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lrrzH0N1AIT6PMQeDCjBjYbhl3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.97.0/24
95.47.247.0/24
Signature Algorithm: sha256WithRSAEncryption
67:24:89:52:47:01:01:12:8f:f2:20:68:a6:25:a3:f0:f9:3f:
6b:2c:bd:f1:2d:bd:7a:b9:bf:9f:ea:67:11:90:03:5a:6d:49:
7a:6f:c7:6e:1f:81:46:14:ff:52:9f:fd:43:c1:ee:8a:5c:77:
c2:6d:ab:80:0f:a3:06:f4:43:55:19:75:75:f7:e3:b4:19:37:
6a:3e:90:c3:c8:f2:78:a3:78:c1:58:2b:ba:9f:ce:5a:08:dd:
b1:7e:12:c8:39:3a:fe:cb:96:aa:7a:b5:22:08:e9:c6:a8:8e:
d5:41:c7:21:64:a3:93:37:46:fe:3b:9b:58:55:57:4f:70:bb:
1b:6b:29:0b:30:3b:a2:f8:14:bf:db:36:c2:7c:14:ae:96:7a:
53:29:bc:7b:4b:57:33:03:fb:87:73:25:67:76:79:52:9f:96:
b1:d2:82:26:3a:32:07:55:4b:33:15:57:56:77:f6:86:33:41:
8a:88:e4:9d:bd:33:92:0a:c0:75:87:fe:4a:f4:62:72:9d:9f:
f6:b0:dd:10:89:f8:85:a0:ae:6e:25:d9:be:55:fb:34:0c:73:
1e:d0:1f:7d:dd:54:16:32:20:a8:9c:a9:87:c1:39:13:92:e2:
37:ee:13:1a:85:a7:d9:d7:13:ea:6c:48:9c:7d:f2:d6:50:27:
a3:e0:3d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:49:19 2025 by rpki-client