Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mLIXFQjTqweeUg7LHOJm5D38-aY.roa
File: mLIXFQjTqweeUg7LHOJm5D38-aY.roa (raw, json)
Hash identifier: yEcHRS+EqIZA7F7DVyw02NvG52ZJmzTHDbWILj9nUA4=
Subject key identifier: 98:B2:17:15:08:D3:AB:07:9E:52:0E:CB:1C:E2:66:E4:3D:FC:F9:A6
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570951EA3CBFC1349E2DD117BF97F719B
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mLIXFQjTqweeUg7LHOJm5D38-aY.roa
Signing time: Mon 02 Jan 2023 03:44:58 +0000
ROA not before: Mon 02 Jan 2023 03:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42146
IP address blocks: 95.46.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:1e:a3:cb:fc:13:49:e2:dd:11:7b:f9:7f:71:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98b2171508d3ab079e520ecb1ce266e43dfcf9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:62:ce:3c:a5:5f:77:38:dd:e0:35:56:78:a4:
99:ad:49:71:9e:bd:14:3e:ca:83:56:bf:9d:d5:82:
b4:e5:e9:73:d8:d9:a9:87:85:df:d8:4a:b6:61:c2:
3b:21:92:0f:ac:53:2e:db:46:e2:fd:85:13:ed:15:
3d:6c:5b:aa:92:78:be:b4:59:af:88:79:d2:3f:c3:
52:4e:bb:bd:e5:e7:bb:0a:d7:4f:69:0a:5a:e6:d1:
c0:c1:65:63:bc:02:b5:b0:29:ca:7c:3f:f5:08:0e:
df:c0:b1:9b:da:9f:68:03:21:49:19:16:6f:93:04:
d4:10:2f:01:06:1d:84:56:5a:24:2f:11:80:ff:f2:
a4:a4:42:9b:2c:e3:4c:28:63:7f:b5:1b:e2:bd:b9:
cb:98:49:0c:c1:a0:ae:61:20:75:59:35:9e:d2:31:
92:d3:70:86:79:e0:9c:18:2c:c8:23:38:1d:6a:6e:
e7:cc:d0:44:21:3d:d5:43:99:88:c2:40:2c:a7:b7:
7b:15:c3:e6:39:36:39:32:3d:83:ab:ef:28:a6:c6:
c2:d2:e5:23:a8:f3:aa:4f:11:1f:c3:d3:96:8d:fc:
4c:52:eb:8f:2b:32:dd:9c:39:62:8d:a0:6e:1f:49:
f9:64:bb:30:fd:4b:e4:8a:5f:1e:33:69:96:70:de:
a1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B2:17:15:08:D3:AB:07:9E:52:0E:CB:1C:E2:66:E4:3D:FC:F9:A6
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mLIXFQjTqweeUg7LHOJm5D38-aY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.76.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ae:c2:fc:4c:02:c6:8b:40:40:5e:b6:6d:54:52:4e:59:6f:
69:0f:99:d5:39:b4:e2:2c:6f:49:22:93:11:a7:ff:de:a1:18:
c6:51:92:9c:8e:08:1b:dd:30:71:0d:1b:7d:3e:83:79:3b:ee:
8c:40:27:10:d1:24:fb:bc:88:9b:b5:ee:a0:3b:c2:a5:79:27:
27:02:ed:56:a5:3b:41:64:50:2f:60:ed:1b:5d:f7:dd:c2:34:
96:ca:17:80:fa:1a:db:8b:7c:05:3e:cb:c3:db:46:33:25:61:
65:0b:79:8f:9c:39:19:57:c1:4c:a0:f1:39:b0:2d:0e:7c:3d:
3b:20:d4:cc:27:75:0f:2c:bd:33:16:e3:65:90:bc:07:2c:c1:
cf:b1:88:ee:db:10:c9:e5:a3:0b:c2:25:38:ff:bd:41:c4:f1:
61:56:e9:5b:05:06:3b:de:54:54:19:8c:6b:cf:f1:26:52:e4:
31:fd:7b:a0:12:a5:e6:ee:63:e9:94:05:ab:3b:b0:d7:68:eb:
bd:f8:63:0c:fe:65:5d:8a:91:42:24:9a:a5:cd:fd:12:4b:da:
e8:cb:57:99:09:47:8c:11:b5:da:4d:68:a0:f2:d1:0f:30:f2:
f5:47:e3:5d:8f:81:b0:2e:b6:53:62:a7:db:8a:23:40:e4:71:
43:cd:dc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:32 2024 by rpki-client on console-fra.rpki-client.org