Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/RpJCW8gJU1CYYETvEOW41CJsL5k.roa
File: RpJCW8gJU1CYYETvEOW41CJsL5k.roa (raw, json)
Hash identifier: +cALET3vRfAlYmkgHR2brPNHylKDJ+oDRpDvWGeKtNA=
Subject key identifier: 46:92:42:5B:C8:09:53:50:98:60:44:EF:10:E5:B8:D4:22:6C:2F:99
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 0186084935C66D92C98274F77A09C9DB5230
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/RpJCW8gJU1CYYETvEOW41CJsL5k.roa
Signing time: Tue 31 Jan 2023 14:44:20 +0000
ROA not before: Tue 31 Jan 2023 14:44:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60441
IP address blocks: 95.169.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:08:49:35:c6:6d:92:c9:82:74:f7:7a:09:c9:db:52:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Jan 31 14:44:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4692425bc8095350986044ef10e5b8d4226c2f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b7:e5:91:ce:9f:9b:52:55:b2:d9:f8:ae:51:
f2:d1:11:af:01:08:89:9f:04:de:83:be:8c:bc:2b:
c0:a6:f1:b1:7b:ac:30:a9:6d:3b:f4:16:1a:7e:93:
d5:93:14:43:1b:44:c7:91:ec:a4:7f:b8:53:50:a7:
e3:94:d6:15:0c:e0:f2:31:0f:21:6e:dc:57:a8:37:
b6:9f:c1:d2:61:6f:78:c3:79:0a:a6:a0:17:5f:d1:
a4:77:ce:e4:a4:c9:6c:52:08:5c:fa:b6:56:3f:3a:
7c:0a:fc:60:5a:35:20:6a:ef:b1:09:2e:11:da:ba:
ac:c7:1c:29:c8:04:66:ac:fb:ab:02:e0:35:2e:d4:
38:52:1c:c2:3e:23:5d:1d:73:87:12:2e:39:4e:05:
91:79:4e:22:75:45:05:80:58:84:28:c7:4f:d5:dc:
d5:0a:f4:79:d0:5a:b5:12:0b:17:dc:ba:df:f9:3c:
28:f8:11:5d:a0:1a:0d:db:67:35:fb:2e:33:1a:cf:
eb:73:6a:8e:fa:57:d2:0a:5a:17:49:5f:63:d7:37:
23:90:8f:65:b6:73:73:8f:a6:6f:1e:ee:fe:b6:c5:
a9:ca:4e:f9:af:0b:05:a2:4a:09:91:5a:1a:74:71:
18:5d:41:e8:e1:c2:16:15:95:f2:a6:33:5d:59:8a:
3e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:92:42:5B:C8:09:53:50:98:60:44:EF:10:E5:B8:D4:22:6C:2F:99
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/RpJCW8gJU1CYYETvEOW41CJsL5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.208.0/24
Signature Algorithm: sha256WithRSAEncryption
16:cc:88:98:82:a6:20:7f:48:c4:71:14:07:67:e4:cb:cb:8d:
af:07:89:24:35:95:75:bf:ef:51:fc:3c:79:ab:08:97:a7:00:
3a:da:b6:04:23:37:cd:31:17:1f:28:68:b0:c2:28:87:8b:5a:
16:ea:7c:2a:ce:31:6d:41:80:60:4d:69:e8:bb:11:40:45:a6:
8d:90:a1:88:e4:25:e6:f1:af:15:88:b9:59:73:39:da:4f:a4:
42:e3:78:8f:47:7b:9f:b3:d2:bd:49:fb:a4:d2:70:fc:57:bf:
60:82:da:d0:3e:70:1d:28:34:8d:bd:38:7b:50:b0:e2:d3:85:
97:63:b9:b2:a4:16:02:46:89:66:d9:41:04:a3:da:26:44:b8:
a1:57:19:25:15:45:74:89:c9:6d:a7:0e:fc:dc:09:9b:20:a9:
38:94:31:95:8f:c3:66:60:9c:7d:05:4d:73:6b:78:46:57:1e:
ad:67:46:15:b6:cb:15:e5:97:f8:d9:b9:8f:77:23:8f:89:1c:
e9:22:80:0c:b4:e7:bf:af:f7:98:db:ce:56:c4:dd:5f:69:e7:
5a:97:1c:c8:2d:31:e7:bb:b8:60:b1:6c:f5:37:07:8a:7c:9c:
0c:53:15:ef:a9:d2:19:b8:1c:57:5d:27:af:ac:4d:f9:dd:55:
bd:fa:03:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:08 2024 by rpki-client on console-fra.rpki-client.org