Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/tF9dBtYy1QAyiM4CAwtweAGI2Ds.roa
File: tF9dBtYy1QAyiM4CAwtweAGI2Ds.roa (raw, json)
Hash identifier: 88Qh3yscuYJnobamdKF6Vk1K5Pf4EX8Ok+j2ZnFv5pY=
Subject key identifier: B4:5F:5D:06:D6:32:D5:00:32:88:CE:02:03:0B:70:78:01:88:D8:3B
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 018AFE78B528AE0526A5473C75ED817D3300
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/tF9dBtYy1QAyiM4CAwtweAGI2Ds.roa
Signing time: Thu 05 Oct 2023 06:13:58 +0000
ROA not before: Thu 05 Oct 2023 06:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25436
IP address blocks: 188.68.7.0/24 maxlen: 24
95.85.82.0/24 maxlen: 24
95.181.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fe:78:b5:28:ae:05:26:a5:47:3c:75:ed:81:7d:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Oct 5 06:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b45f5d06d632d5003288ce02030b70780188d83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:c7:87:45:5d:2b:87:75:b3:83:b3:c6:ec:
bc:8b:48:79:e2:73:15:29:a2:f0:1f:a4:64:c0:8b:
37:1d:94:93:6d:f2:23:f1:fb:9d:be:d3:e3:e9:b5:
a6:1d:e0:73:9d:e1:fb:cd:5d:ab:dd:e3:b6:1e:1c:
28:5f:53:0f:b7:be:7e:1d:ed:07:a7:b7:b3:7f:12:
70:03:11:03:f0:77:9e:90:db:29:60:4d:98:99:ef:
e0:67:dc:36:40:85:56:4d:0e:5c:38:91:5e:b1:4c:
11:45:9e:7f:37:b3:ac:f5:11:d3:74:9b:72:b3:e4:
72:a2:5f:65:86:60:7a:ff:c5:fd:2a:7e:9f:10:b2:
ae:43:7f:2f:3b:90:32:da:02:00:00:f2:8a:2a:b7:
d5:0e:c6:61:8c:d4:45:92:9f:e7:2d:c4:7e:88:07:
ce:0d:52:92:e7:0e:01:d6:93:8a:68:8a:64:6b:7c:
82:77:d2:3c:b8:59:ba:9d:a1:e6:2c:8a:d1:f7:86:
1e:69:45:14:d9:ec:1d:44:2d:89:e1:9e:3b:c1:b8:
ef:de:c4:4f:f2:7b:b3:6b:28:74:37:ed:23:60:01:
32:4f:0b:60:e6:fa:59:3f:87:db:3c:53:98:70:e5:
f3:bd:ee:f1:40:0c:fc:42:f4:6c:aa:8d:68:00:f4:
95:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5F:5D:06:D6:32:D5:00:32:88:CE:02:03:0B:70:78:01:88:D8:3B
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/tF9dBtYy1QAyiM4CAwtweAGI2Ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.82.0/24
95.181.145.0/24
188.68.7.0/24
Signature Algorithm: sha256WithRSAEncryption
39:e6:7e:97:9b:a1:0b:e9:ec:42:7b:96:25:c5:7f:f2:e6:0d:
4e:3c:c2:94:29:fc:60:35:76:91:d0:ee:56:eb:72:03:03:61:
b4:e6:ea:40:3c:15:a8:d3:39:21:30:b7:11:bf:ba:db:be:e7:
7f:cb:12:62:9c:f5:d1:f6:c0:ec:65:e4:39:97:f5:77:95:cd:
01:4b:a9:7f:37:47:82:c5:91:51:a5:97:70:94:75:24:ae:1a:
ac:98:27:71:e6:fb:f4:ed:85:77:e8:a7:80:20:d3:fb:2f:41:
a7:00:e2:57:36:9a:74:eb:92:66:45:77:4c:75:98:a8:be:cc:
24:55:78:d0:58:18:e7:d2:0f:46:fb:07:86:d4:fd:99:f6:13:
bd:74:6d:a6:41:21:7a:51:f6:ae:a1:f3:a4:06:f7:2b:bb:76:
dd:8b:8f:95:1e:b9:80:33:26:c4:37:df:c5:5e:a2:1d:97:f4:
48:91:bf:45:53:1a:a0:e7:c5:20:86:7c:d9:36:b0:8b:e6:4f:
37:b7:69:6b:82:22:92:6e:65:92:6b:68:5b:de:2c:61:f4:f2:
ac:02:0b:eb:fd:a6:35:9b:be:34:51:34:3d:14:59:87:4c:4b:
55:0c:09:0e:41:1c:97:02:10:6c:e6:7b:c1:fd:5a:92:f2:ef:
de:32:8b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:30 2024 by rpki-client on console-fra.rpki-client.org