Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/N_b_TisdmF_uXkALMO5Y3J_6ous.roa
File: N_b_TisdmF_uXkALMO5Y3J_6ous.roa (raw, json)
Hash identifier: j1aa9r93oC3ObBCtxE3l+JmzGCUBA85h/D08ck9F+Jg=
Subject key identifier: 37:F6:FF:4E:2B:1D:98:5F:EE:5E:40:0B:30:EE:58:DC:9F:FA:A2:EB
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 01856C65F796845861298D6FD957C19FF973
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/N_b_TisdmF_uXkALMO5Y3J_6ous.roa
Signing time: Sun 01 Jan 2023 08:14:59 +0000
ROA not before: Sun 01 Jan 2023 08:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205754
IP address blocks: 95.85.84.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:f7:96:84:58:61:29:8d:6f:d9:57:c1:9f:f9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 1 08:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37f6ff4e2b1d985fee5e400b30ee58dc9ffaa2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:71:e5:72:f0:78:98:b7:15:92:fb:d6:9f:94:
04:72:70:07:dc:a4:b6:f9:f4:b4:f3:e5:f7:43:a8:
1a:1a:23:de:73:04:ec:ef:33:49:72:76:20:cb:cf:
1c:fa:9e:7a:cc:2d:99:96:d8:4f:89:e4:3d:d0:6c:
12:74:e9:ad:91:b8:63:d1:71:18:f2:3e:dc:22:25:
37:af:23:e8:69:28:2f:c3:31:b0:66:14:b1:d7:d8:
fd:1c:5c:20:87:34:ad:9c:8c:ae:8c:e6:b4:72:50:
89:9b:ed:0e:b7:e1:91:40:0e:f9:81:68:b9:6a:cb:
a5:2b:b2:7a:9c:50:e2:3b:cb:2f:a5:8e:98:ae:2c:
1a:b9:f6:a5:8b:59:24:66:d9:4c:68:a7:a5:da:dc:
32:a9:f7:51:24:be:aa:53:89:08:9c:d9:2e:94:f9:
d4:0e:07:2d:61:28:08:90:e9:eb:55:20:cf:d9:9d:
1d:f6:6b:b9:06:8f:5e:28:94:73:71:ef:64:78:63:
a9:ed:b6:e7:bd:50:9c:8a:17:fc:4b:65:3c:ac:85:
cc:6a:7e:d8:5d:6c:41:47:71:90:1d:da:ec:fd:0d:
83:e0:87:10:d3:a8:a2:8a:5c:d6:d4:68:b5:07:fe:
5f:8f:05:0c:8e:c1:b3:23:ca:0f:c1:27:df:4c:7d:
63:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F6:FF:4E:2B:1D:98:5F:EE:5E:40:0B:30:EE:58:DC:9F:FA:A2:EB
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/N_b_TisdmF_uXkALMO5Y3J_6ous.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.84.0/24
Signature Algorithm: sha256WithRSAEncryption
83:c5:67:b0:4d:a4:08:7f:d3:fc:e9:fa:42:47:f7:73:23:dc:
1f:34:a3:7e:08:c0:5b:62:a3:f9:70:f2:29:a9:d5:eb:d8:b3:
92:72:60:c9:b4:f4:54:e1:19:5d:5f:f7:87:a9:b5:4a:73:ac:
04:fc:e6:55:35:7e:9b:f4:65:6d:34:4c:7b:eb:15:1c:fc:63:
d1:72:c0:e3:bf:7f:5d:e8:e0:55:2d:e7:0a:a7:94:13:01:c0:
57:4a:60:fe:40:fb:9d:82:32:77:af:46:01:c0:52:75:a0:ad:
a3:8d:10:a1:3e:6d:eb:a6:9b:32:2a:0a:b5:62:9b:b2:c5:6f:
2f:3c:85:cc:11:cd:4f:4b:b8:42:32:a6:d4:57:e2:22:81:3b:
1f:83:5b:17:f3:03:c7:eb:5d:4b:db:3f:a4:21:b8:54:8b:1c:
e0:74:83:1a:07:39:b7:01:cc:4a:c7:df:14:28:b4:28:b1:41:
48:86:c8:71:f9:d7:44:3f:a2:0f:80:1e:39:da:ad:f9:7a:94:
af:50:a4:dd:ea:be:d3:a8:7f:d7:82:f8:db:4f:2b:84:5e:3b:
13:73:6a:0e:fa:f5:ff:9a:b6:62:3f:e6:46:63:fa:6a:92:0c:
6a:49:7a:90:ee:b5:97:e7:82:fa:41:94:ab:cd:0a:45:b8:03:
0f:f4:4e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:21 2024 by rpki-client on console-ams.rpki-client.org