Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/bUFF3X6H3Iyy0aj-8O4p2zuUmYo.roa
File: bUFF3X6H3Iyy0aj-8O4p2zuUmYo.roa (raw, json)
Hash identifier: Xznd99coMsl2FXAO9uF1PHXWaVWx9bnILDqDvo5aD80=
Subject key identifier: 6D:41:45:DD:7E:87:DC:8C:B2:D1:A8:FE:F0:EE:29:DB:3B:94:99:8A
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 0186083C911A46DCD888724ACE3D5C52FDB1
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/bUFF3X6H3Iyy0aj-8O4p2zuUmYo.roa
Signing time: Tue 31 Jan 2023 14:30:32 +0000
ROA not before: Tue 31 Jan 2023 14:30:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39251
IP address blocks: 95.169.199.0/24 maxlen: 24
95.169.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:08:3c:91:1a:46:dc:d8:88:72:4a:ce:3d:5c:52:fd:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Jan 31 14:30:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d4145dd7e87dc8cb2d1a8fef0ee29db3b94998a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fe:0a:89:cd:1a:c8:28:d4:df:8d:c8:af:93:
d2:11:d8:dc:d4:10:00:8a:7b:38:a9:0f:97:f9:e6:
97:48:f4:5d:ff:dc:93:d3:d0:45:86:bc:9f:ee:b6:
79:7e:d1:32:d9:52:42:6f:81:f2:71:03:ec:4c:97:
90:6e:79:3f:11:b8:b5:d9:85:cf:80:0c:e7:74:ff:
82:92:4a:f8:a6:2a:da:38:10:c4:3d:2f:af:83:6d:
e9:3b:8d:cd:bf:5a:ae:ed:d5:30:ce:4f:df:fc:83:
f6:45:1d:ac:26:e5:03:fe:20:ec:e9:8b:82:d8:f9:
5a:10:58:3c:96:32:33:58:f7:04:70:ee:ee:e1:0b:
0c:08:4b:c5:c0:1b:92:ec:36:8e:4f:f0:71:f8:eb:
af:57:4a:9a:bc:ae:65:ce:c1:c8:f7:3c:6b:d0:e9:
c0:27:b7:41:57:db:44:31:d8:5b:e3:41:0f:76:f0:
47:f8:3a:86:4f:59:5d:a2:40:88:bb:1c:df:35:69:
a2:c3:88:95:42:b0:48:a6:82:12:87:eb:c9:59:81:
7e:e4:b2:22:34:34:4f:07:8e:c0:4d:11:96:66:63:
33:e5:af:32:e4:07:72:f9:fd:f3:8e:6d:5d:db:7a:
cc:72:05:9f:95:01:74:66:38:22:b3:ba:fb:c6:e4:
6c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:41:45:DD:7E:87:DC:8C:B2:D1:A8:FE:F0:EE:29:DB:3B:94:99:8A
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/bUFF3X6H3Iyy0aj-8O4p2zuUmYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.199.0-95.169.200.255
Signature Algorithm: sha256WithRSAEncryption
2a:41:69:8c:50:9c:c5:ce:ea:87:51:20:cb:73:8b:d1:32:de:
5a:0c:19:86:c9:4c:87:6d:cf:2a:49:31:51:c0:bd:d0:e4:b1:
90:6d:dd:6d:26:e7:dc:7a:a7:32:f0:38:85:22:8c:a3:02:e1:
2d:b7:2f:f0:05:75:12:b8:bb:33:a3:14:0d:4e:ba:25:5a:35:
dc:bc:27:df:41:cc:3e:3a:b5:2f:f5:53:5a:e9:d5:02:2d:13:
49:dd:0b:b5:55:95:0c:e6:97:24:77:a9:8e:cc:f5:a0:c6:ef:
2b:ef:d4:03:c2:59:2c:55:d6:80:ee:e7:d0:f0:a9:fd:3d:b9:
e0:21:87:f8:79:4c:5e:29:ad:2f:ed:75:f3:ef:4f:14:80:ae:
5f:50:e4:33:d6:3f:27:73:c3:bb:ba:2a:83:e4:86:5f:f1:3c:
1c:1c:b6:b4:8c:96:ef:81:1c:78:50:11:6c:04:0d:0d:55:d3:
a1:de:c7:a2:24:62:1f:6b:4d:f0:e4:82:a1:12:20:33:08:29:
03:8d:d5:53:d1:ad:9c:80:2e:83:ee:ee:95:c8:17:26:bb:1a:
b5:5d:16:07:4c:03:dd:a8:d8:29:94:ed:f7:d3:8d:7c:e9:5d:
7a:c3:ff:7a:f1:12:82:61:0a:84:d1:e9:56:7e:78:3a:5e:33:
15:8e:5a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:06 2024 by rpki-client on console-fra.rpki-client.org