Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mT7M3J0gW748dxXiTZ-wC7Sf3i8.roa
File: mT7M3J0gW748dxXiTZ-wC7Sf3i8.roa (raw, json)
Hash identifier: JfZhn8sIhr479+16o4FHeAwD6caOzHdZZmOiHeB+TRg=
Subject key identifier: 99:3E:CC:DC:9D:20:5B:BE:3C:77:15:E2:4D:9F:B0:0B:B4:9F:DE:2F
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A42CB23CF0BFCB5AE8651CAB8185D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mT7M3J0gW748dxXiTZ-wC7Sf3i8.roa
Signing time: Tue 02 Jan 2024 12:33:36 +0000
ROA not before: Tue 02 Jan 2024 12:33:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204752
IP address blocks: 95.47.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 09:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:42:cb:23:cf:0b:fc:b5:ae:86:51:ca:b8:18:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=993eccdc9d205bbe3c7715e24d9fb00bb49fde2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:78:45:9e:8b:c0:cc:0d:83:05:00:ab:30:b2:
b9:c1:fc:fe:1c:91:9a:1a:2b:6c:7e:2a:38:a0:3f:
80:18:b9:a8:58:e3:30:79:84:e7:e1:dc:50:f6:60:
e5:94:d1:f4:37:e0:3d:b2:90:dd:29:e1:84:77:d9:
6b:d3:e2:78:00:c6:14:07:d9:cf:c8:3e:1e:fb:09:
4c:63:d1:2e:67:e4:58:f6:da:44:c0:3d:a0:31:4c:
e6:8a:da:11:1b:8b:b4:9d:7d:1a:1d:f0:32:4c:29:
2e:55:08:be:16:f6:8c:49:f6:33:97:cb:2a:12:5f:
17:f1:a0:75:80:cf:64:ce:1c:1f:21:b1:f8:4b:5b:
1c:1f:ab:8b:b3:f4:91:78:4b:44:0c:6b:32:70:bd:
1e:88:24:21:5f:7a:86:d8:9b:2f:5a:41:46:f2:ff:
e5:0b:84:5d:e6:65:16:20:ab:a0:6e:4c:5b:d8:8b:
d2:5a:23:a4:b1:8e:71:3e:dd:3a:5d:0c:27:85:68:
be:ba:7a:34:64:5c:fe:85:ae:8c:e7:38:b6:f9:90:
76:33:50:ff:f1:df:4d:fa:b1:65:6e:95:0a:c0:78:
f5:0f:89:35:e8:ca:5e:26:b1:9a:54:7b:5b:69:cb:
ea:09:e5:bb:70:c9:3f:e4:f4:0b:90:59:48:b0:c2:
70:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3E:CC:DC:9D:20:5B:BE:3C:77:15:E2:4D:9F:B0:0B:B4:9F:DE:2F
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mT7M3J0gW748dxXiTZ-wC7Sf3i8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.118.0/24
Signature Algorithm: sha256WithRSAEncryption
83:9f:92:64:1f:33:46:51:b0:bc:e4:13:42:f2:aa:70:ea:bd:
fb:bb:d7:b5:24:58:c2:10:4f:13:1b:81:d8:0f:da:d6:1d:92:
10:3f:e5:5b:77:c6:6e:70:1b:7a:5c:60:ed:f5:fa:85:41:74:
30:39:91:7d:21:df:ea:df:2a:5e:d4:d3:81:3a:35:3b:41:07:
6b:c1:ed:89:f1:1c:7b:78:f3:72:9d:97:93:46:f2:f0:62:ab:
f0:b7:14:88:e9:6a:75:a8:3c:c1:85:90:20:59:d2:cf:44:1d:
10:c1:f7:b9:5b:41:ac:0d:08:f0:f7:e3:72:6e:e9:6d:c0:ed:
88:88:b9:99:90:b8:4c:d9:29:db:3c:b2:20:08:d5:41:65:6d:
e5:b1:90:92:1f:12:ac:52:75:cc:89:67:8d:bf:a9:5e:82:9a:
74:d3:c3:41:9d:b9:c2:fa:8f:c6:a8:07:20:cf:8b:8f:c1:39:
46:99:3c:bf:01:9b:e4:31:da:ff:80:fc:e8:74:55:72:41:1a:
57:ef:c5:cf:e4:2f:8b:15:03:52:50:e8:57:bb:27:8f:75:93:
13:71:ff:25:83:11:2f:a5:71:d6:45:ee:52:3d:1a:ae:33:9c:
db:72:77:86:2c:d4:69:31:69:38:3b:76:d8:d3:da:7b:45:f4:
ff:7c:16:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:18 2025 by rpki-client