Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/9uG2k9YQTkpuBXAOBycX6sVssnk.roa
File: 9uG2k9YQTkpuBXAOBycX6sVssnk.roa (raw, json)
Hash identifier: viDMeHLu7GyUXKnOH30Y998n8thaFPRuaUrQfphIygI=
Subject key identifier: F6:E1:B6:93:D6:10:4E:4A:6E:05:70:0E:07:27:17:EA:C5:6C:B2:79
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 018572B420DEAF6CD7FF64D53D9500CB894F
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/9uG2k9YQTkpuBXAOBycX6sVssnk.roa
Signing time: Mon 02 Jan 2023 13:38:05 +0000
ROA not before: Mon 02 Jan 2023 13:38:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 95.111.128.0/20 maxlen: 24
95.111.144.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:20:de:af:6c:d7:ff:64:d5:3d:95:00:cb:89:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Jan 2 13:38:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6e1b693d6104e4a6e05700e072717eac56cb279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4a:34:08:06:26:bc:27:28:30:c2:e0:43:f9:
61:99:87:d6:a6:ea:3f:36:05:c0:b8:8b:b7:5e:7b:
24:0e:d4:d8:e0:52:57:ae:0f:e1:2b:2d:68:e5:e6:
7f:28:64:47:50:36:39:9a:52:c7:b6:63:c5:98:9c:
c3:6d:d5:12:58:d3:2a:d3:76:c8:35:0f:54:c9:4c:
67:c5:4f:fa:bc:b3:b7:cc:7d:94:d5:ca:80:21:f0:
4d:df:31:24:e8:88:10:3a:d8:b7:7a:ba:e8:cf:bf:
ea:89:bf:51:9f:5e:7f:9c:53:97:5f:bd:f9:3b:f3:
34:07:2e:0a:4f:4f:39:58:7b:91:ff:c3:ce:86:10:
90:c9:8e:83:b0:5c:72:f2:84:2c:6a:fe:d9:4e:05:
ce:83:93:bb:30:21:67:41:64:8c:01:11:8a:4c:b2:
b7:f1:10:15:43:9b:e6:7c:3f:ad:72:59:ed:13:e9:
99:7c:04:12:93:3f:ad:0b:05:04:7c:11:d5:3f:16:
54:88:fe:12:7f:fb:c6:b4:2b:1a:c7:ce:7a:bf:c2:
2d:f9:dc:e6:16:be:3f:fa:c9:47:dd:20:67:38:22:
1d:6b:9a:24:84:26:fa:66:e6:ea:c6:a3:1d:59:02:
67:be:6f:bd:a1:9b:c9:33:15:57:16:bd:a7:b8:dd:
86:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E1:B6:93:D6:10:4E:4A:6E:05:70:0E:07:27:17:EA:C5:6C:B2:79
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/9uG2k9YQTkpuBXAOBycX6sVssnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.111.128.0/19
Signature Algorithm: sha256WithRSAEncryption
22:f4:9d:81:83:5c:06:5c:62:12:5c:dc:08:ad:13:3a:ee:c1:
97:bc:e9:41:23:a7:5f:f2:fb:00:64:2e:05:f2:df:03:63:5b:
ba:80:11:03:3d:6e:6e:7f:3f:ee:c4:1a:fc:9b:af:1f:53:7f:
04:2c:ee:e3:01:b4:42:d6:1c:8b:2c:16:f9:06:a0:75:e6:82:
7b:c7:79:9f:eb:ba:10:5c:e4:47:82:a8:d8:34:83:a2:c4:bf:
75:dc:21:37:e5:75:04:4d:8f:94:f4:08:54:66:33:e7:37:ae:
20:2a:0e:3d:5b:eb:31:11:36:c2:c7:a0:d1:33:8b:15:e3:ad:
20:54:69:37:8c:f8:34:d5:e5:46:d1:57:44:33:be:dc:98:35:
0e:1a:27:a9:d4:33:0f:93:41:af:71:29:a9:d4:c5:b6:d1:4d:
bf:9b:5d:6c:96:15:11:b1:c3:6e:a7:f3:f9:40:73:c8:8c:ac:
fb:5f:9f:09:d0:a9:f7:f4:83:4b:94:a1:3f:9b:0f:5f:90:f0:
7e:26:fb:e5:fe:ca:b4:a5:89:17:65:7b:80:24:1d:a1:ca:07:
6f:d9:ec:77:bb:5d:82:f3:27:5d:cf:1d:2b:47:ec:d9:c1:0a:
00:e3:84:b0:90:3d:43:c4:9d:b6:15:5b:4c:e9:c2:a9:77:57:
04:0a:5f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:42 2023 by rpki-client on console-ams.rpki-client.org