Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/15PBACldIN3319PUak9ajnc4Tjg.roa
File: 15PBACldIN3319PUak9ajnc4Tjg.roa (raw, json)
Hash identifier: wWFYc/TQF8GmdZMV1KfjTaLkJCmWg/dak6fQUDmzwY0=
Subject key identifier: D7:93:C1:00:29:5D:20:DD:F7:D7:D3:D4:6A:4F:5A:8E:77:38:4E:38
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 0186E65E06A8F8C98C4BBBED4DDFBB0C0C80
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/15PBACldIN3319PUak9ajnc4Tjg.roa
Signing time: Wed 15 Mar 2023 17:42:47 +0000
ROA not before: Wed 15 Mar 2023 17:42:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 95.111.128.0/20 maxlen: 24
95.111.144.0/20 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Mar 2023 18:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e6:5e:06:a8:f8:c9:8c:4b:bb:ed:4d:df:bb:0c:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Mar 15 17:42:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d793c100295d20ddf7d7d3d46a4f5a8e77384e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5c:3a:7d:c7:13:42:b1:66:a7:6e:e6:82:8a:
20:f4:b2:05:2a:41:9a:26:b6:9b:e2:fb:44:7c:8c:
98:36:37:4e:d3:cf:6c:f1:2b:53:5e:0b:97:59:1d:
de:90:5c:d7:8d:69:26:5d:07:0a:c7:50:7f:f6:25:
86:29:07:c9:2b:c3:18:cc:f1:c0:8b:82:24:8a:5a:
fc:98:8f:f9:1b:21:ee:be:e2:2e:f5:82:51:e3:aa:
c2:e7:bf:de:27:dc:93:bc:7f:5d:48:6e:3a:da:b5:
08:ca:70:25:5c:83:cd:8f:8a:3f:8f:af:d2:c7:1a:
be:ed:b3:64:68:2a:ad:73:2c:17:23:06:5f:59:aa:
a9:24:23:fa:10:0f:b0:2b:e4:1e:8b:74:d8:fa:4c:
ff:98:d5:f9:c6:45:fa:d3:1c:4d:6b:ab:58:48:64:
dc:70:3a:cc:fd:7f:53:37:5a:ec:dc:9f:0b:c6:f2:
4a:1d:7d:45:6e:f5:cd:cb:48:0a:70:3d:00:5c:3f:
d4:3f:21:9b:2a:64:6c:8c:b8:29:fd:7e:be:22:2c:
78:ea:ad:2e:f5:e5:37:28:3e:10:aa:7d:84:6e:f6:
df:30:26:0c:e0:67:be:50:1f:f9:93:3b:4b:90:fd:
73:9e:64:37:ca:67:54:9b:d8:0f:47:9d:03:e8:9b:
ec:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:93:C1:00:29:5D:20:DD:F7:D7:D3:D4:6A:4F:5A:8E:77:38:4E:38
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/15PBACldIN3319PUak9ajnc4Tjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.111.128.0/19
Signature Algorithm: sha256WithRSAEncryption
83:49:fe:91:e7:9b:53:97:ad:e4:95:47:ae:e1:04:23:1c:6e:
e3:97:1a:6b:3a:1f:c0:4a:5e:f3:4d:da:2d:86:ef:62:4a:98:
ef:bf:9a:9e:67:d8:34:88:d3:46:f1:20:76:16:8f:df:6b:4e:
da:f2:cb:81:f2:11:12:71:02:5b:3c:f0:5e:2e:0e:7d:c3:d1:
cf:e4:02:53:5c:91:38:dc:30:44:be:6c:2c:f1:80:b8:d9:31:
b9:ad:38:1e:b7:e5:c3:58:92:dc:15:33:c3:5a:aa:5b:b8:5e:
56:2d:ac:6a:77:0c:47:96:ff:f4:df:bc:9f:96:73:97:a6:04:
45:6a:4b:ff:29:f5:c4:30:ad:19:e5:cf:21:76:de:2a:01:41:
69:21:b4:a3:6f:4c:4a:24:32:3e:cc:cb:60:cd:e5:fc:c2:19:
03:6d:f5:7d:73:60:c9:cc:f5:21:c0:2a:b4:7f:7a:d8:9a:cf:
5e:64:cf:96:41:8a:35:a8:fd:7a:8c:75:88:aa:71:6a:a2:16:
1a:c8:f8:00:75:2f:ff:74:a9:c4:76:0c:57:24:ce:f2:01:25:
64:52:15:78:51:91:d8:57:a2:ed:a5:10:4b:a9:f9:f0:de:c3:
f5:1f:96:ab:1f:0f:09:10:b0:05:23:31:0e:56:07:4c:e1:0d:
e8:10:fa:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:31 2024 by rpki-client on console-fra.rpki-client.org