Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/rwa0qp4BTjbM9Bea5ie3ryaOxFk.roa
File: rwa0qp4BTjbM9Bea5ie3ryaOxFk.roa (raw, json)
Hash identifier: SsCZSipC8f6/NKzBoHfpnwwV9xaq7wANULjyU9ust5s=
Subject key identifier: AF:06:B4:AA:9E:01:4E:36:CC:F4:17:9A:E6:27:B7:AF:26:8E:C4:59
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095B1484F3D51024D421F69A3DF58B7
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/rwa0qp4BTjbM9Bea5ie3ryaOxFk.roa
Signing time: Mon 02 Jan 2023 03:45:36 +0000
ROA not before: Mon 02 Jan 2023 03:45:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209918
IP address blocks: 95.47.232.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:b1:48:4f:3d:51:02:4d:42:1f:69:a3:df:58:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af06b4aa9e014e36ccf4179ae627b7af268ec459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cd:25:7f:de:2c:e1:d5:c1:89:1d:1d:63:3b:
18:25:70:be:77:59:78:71:f8:91:c9:1e:46:57:1f:
94:0a:3c:2d:23:8e:c5:3e:a6:a7:12:cc:4e:91:5f:
36:7e:b3:05:e6:e4:c7:27:7e:f0:27:ad:50:fd:6a:
e1:b6:17:99:3d:12:0d:ec:eb:85:17:0f:e1:48:b4:
cf:78:f1:94:fc:96:8b:cf:87:a7:3f:55:c4:08:f8:
f9:3a:af:5d:aa:98:a9:0e:b5:18:64:cc:0c:22:ea:
7a:a2:4f:72:6b:39:bc:43:a7:2f:0b:b5:b8:fb:95:
b2:b8:d6:26:d6:27:95:99:c3:da:44:45:91:78:f9:
e8:e3:1c:77:90:b5:e2:49:f7:12:ff:23:8d:e8:f4:
62:f7:2b:32:61:40:75:67:46:39:1f:a9:52:bc:c7:
72:5d:b5:c3:57:61:1b:c5:dc:92:fe:7a:99:93:fc:
12:c5:b0:96:ac:40:83:9b:90:81:ff:94:b6:fb:8a:
67:b2:51:3f:64:7c:0e:1c:81:41:47:7f:ef:de:08:
24:cb:01:4e:2e:e9:72:07:8f:71:fc:87:f7:b1:55:
93:a5:36:a0:13:3a:c2:d5:75:7a:bb:d2:c2:59:eb:
48:05:cf:cc:40:49:cc:cc:13:64:34:97:7a:66:ad:
47:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:06:B4:AA:9E:01:4E:36:CC:F4:17:9A:E6:27:B7:AF:26:8E:C4:59
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/rwa0qp4BTjbM9Bea5ie3ryaOxFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.232.0/24
Signature Algorithm: sha256WithRSAEncryption
43:0e:cf:e3:b6:ec:b4:ef:3c:ff:95:b1:7f:b1:dc:ca:62:23:
8a:51:86:09:41:b6:dd:ad:cc:80:eb:33:b7:54:21:40:e3:cf:
fb:82:cf:ec:8c:fc:87:6a:f8:71:a7:5b:42:4a:2b:0f:c6:80:
0a:fe:7c:10:00:55:6c:29:e8:38:d3:60:1e:0a:7f:82:52:34:
d6:5e:f8:0f:69:ca:49:7a:5b:9b:a5:82:81:c1:d7:19:a4:94:
17:4e:85:64:6d:e2:00:83:9b:6d:81:77:f6:a0:e5:e4:08:2a:
e2:a5:a2:77:77:1e:71:92:11:a1:1b:03:23:92:a7:aa:f3:41:
b8:38:9a:c1:de:74:0a:29:73:ff:79:cb:d7:73:07:ca:0c:7c:
79:af:22:4b:9c:04:04:f6:66:02:05:6f:ad:a8:a6:ee:a5:d9:
ba:48:b8:c6:d4:59:e4:d2:39:3a:2b:1c:e1:1d:42:f7:10:df:
1c:e1:47:e6:28:12:5b:99:7f:f1:73:1e:e6:9d:af:bb:54:9e:
86:46:57:68:ee:dc:4a:56:5a:dd:2c:8a:6e:63:29:56:ae:86:
9e:98:05:8e:cf:6f:72:d6:7c:7c:e8:9e:d3:7c:88:ae:f9:5e:
b1:17:ef:df:59:89:7b:a8:7f:79:1b:73:a7:5d:c4:91:5b:54:
f8:0b:8d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:01 2024 by rpki-client on console-ams.rpki-client.org