Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/vN4JM0VuhvQOUIgcE0esHtF4DtE.roa
File: vN4JM0VuhvQOUIgcE0esHtF4DtE.roa (raw, json)
Hash identifier: YbL9EIDfBT6bi3kPnEVKmopPZGOKzf+WxU5gwc3sBXg=
Subject key identifier: BC:DE:09:33:45:6E:86:F4:0E:50:88:1C:13:47:AC:1E:D1:78:0E:D1
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 0186083C909A2EC2DC818D12C0CE569473CD
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/vN4JM0VuhvQOUIgcE0esHtF4DtE.roa
Signing time: Tue 31 Jan 2023 14:30:32 +0000
ROA not before: Tue 31 Jan 2023 14:30:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34909
IP address blocks: 95.169.212.0/24 maxlen: 24
95.169.210.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 13 Feb 2023 09:31:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:08:3c:90:9a:2e:c2:dc:81:8d:12:c0:ce:56:94:73:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Jan 31 14:30:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcde0933456e86f40e50881c1347ac1ed1780ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a9:04:bc:58:e6:85:f5:98:e5:92:cf:55:6c:
e6:13:c4:f2:e3:62:d6:d9:1d:ba:58:0f:ff:18:db:
9b:00:18:87:c8:46:31:24:8a:e2:59:da:88:3e:0e:
cb:1d:b2:64:8f:6c:21:43:61:ed:2a:58:64:2e:4c:
95:c4:90:c9:6b:94:5b:1a:0e:fa:a3:9c:8e:85:56:
3c:0a:a3:11:c8:fa:af:7f:0e:fc:e7:7f:19:27:66:
9a:05:ff:83:e2:11:97:ce:2a:5b:b1:a5:26:38:03:
02:19:0b:0d:4e:f5:95:65:d9:2d:1e:73:d6:b9:62:
75:46:bd:3b:2a:4b:6e:69:56:12:db:94:80:b2:36:
e0:b5:6a:f3:ab:a5:70:88:ec:31:b0:6e:d8:82:c5:
94:27:81:2e:e5:28:61:54:3d:8e:b6:52:48:98:e1:
15:a2:cf:22:47:64:bb:46:f5:69:66:cd:02:b4:81:
f2:ce:81:13:ec:41:6d:a1:8b:56:60:a0:97:91:db:
39:d8:b8:fe:24:49:e2:77:5d:a7:89:12:c9:a9:54:
19:69:5a:b7:b3:d4:7b:c4:ca:30:0b:ac:a3:68:41:
0c:4c:98:6f:39:0d:32:08:f0:34:85:26:af:cd:03:
0c:48:44:4f:4a:90:94:63:c2:b6:cb:17:35:88:6b:
40:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DE:09:33:45:6E:86:F4:0E:50:88:1C:13:47:AC:1E:D1:78:0E:D1
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/vN4JM0VuhvQOUIgcE0esHtF4DtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.210.0-95.169.212.255
Signature Algorithm: sha256WithRSAEncryption
87:6f:9d:a6:64:46:25:c5:4c:92:67:54:28:02:5e:b5:c9:70:
3d:78:c2:f3:98:f2:91:90:68:e5:23:20:88:ea:1e:42:b1:bd:
6c:02:00:42:3f:69:1a:bb:96:50:80:ef:e0:db:7a:ca:de:7a:
3d:ce:4b:61:5b:a5:5f:e8:df:0b:6b:12:52:30:86:6c:2d:bd:
c7:50:c9:48:e0:0d:39:3d:c9:65:48:20:ec:d2:36:c0:2c:22:
8b:07:9f:62:8e:6b:1b:79:33:a6:aa:3b:31:8e:db:7b:a1:93:
08:c9:de:5f:ef:fb:ba:c2:ed:30:fa:a6:51:b3:d4:58:75:ad:
f3:b2:da:08:aa:17:bb:ed:82:f0:9d:70:d7:1b:b6:8f:0c:fe:
57:8d:2a:20:b5:9e:c5:7a:b4:20:64:de:f2:3a:84:2c:77:80:
4f:85:97:4d:55:2b:96:00:3c:d3:53:62:6c:5b:9a:7e:d3:78:
81:49:df:18:ac:fa:36:d1:bd:b1:61:fb:e6:db:b1:f0:84:ce:
67:46:c8:aa:e1:86:12:45:53:77:61:59:4f:d2:88:00:88:00:
7b:57:60:10:9d:0a:a2:ac:a4:8b:07:d3:d0:03:fb:57:c2:45:
49:0c:1c:be:76:aa:46:81:14:7b:b9:50:e8:4e:38:34:d8:d9:
9d:02:c8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:50 2024 by rpki-client on console-ams.rpki-client.org