Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/Ss0k-5Lv4OEDc6FrbLmslNtzTOo.roa
File: Ss0k-5Lv4OEDc6FrbLmslNtzTOo.roa (raw, json)
Hash identifier: dSojNSC0uSqyIwMWcjbpnKZkQCzkH5bb1ahdZuNz09U=
Subject key identifier: 4A:CD:24:FB:92:EF:E0:E1:03:73:A1:6B:6C:B9:AC:94:DB:73:4C:EA
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 0186E275F72B69AA62F2E39D8D3DF7F74C50
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/Ss0k-5Lv4OEDc6FrbLmslNtzTOo.roa
Signing time: Tue 14 Mar 2023 23:30:27 +0000
ROA not before: Tue 14 Mar 2023 23:30:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 95.111.144.0/20 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Mar 2023 17:42:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e2:75:f7:2b:69:aa:62:f2:e3:9d:8d:3d:f7:f7:4c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Mar 14 23:30:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4acd24fb92efe0e10373a16b6cb9ac94db734cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c0:8b:5d:ec:bd:3b:4d:cc:4f:25:4e:85:be:
17:42:95:15:3b:98:48:e1:21:5e:5c:35:11:33:61:
c8:67:51:e7:b3:e0:ae:7d:0a:ca:9b:10:47:52:51:
ef:ae:a3:58:5e:b2:e3:f0:46:2a:87:f9:40:6e:0e:
50:a3:3b:df:e1:5f:0a:5c:2c:33:f9:af:33:0a:e8:
4e:61:9d:ef:06:b1:b5:f0:b0:bd:cc:a6:26:5a:59:
81:d8:49:62:32:cc:54:f0:2f:07:f4:8e:e9:32:3a:
14:53:16:55:63:e5:0d:59:9e:90:fa:a0:b1:7a:7c:
1f:de:e0:17:5a:1f:e6:a7:ca:bf:03:91:9a:82:02:
50:ee:90:e2:24:5c:9f:4e:47:6d:a5:6d:04:cb:c9:
10:40:8b:5d:f7:3b:ca:0d:44:02:87:82:03:f3:75:
f1:76:33:c1:85:28:bb:a7:5b:69:1b:20:a4:e1:5d:
d1:4d:d2:42:fb:b8:cb:a6:9b:f5:4a:ac:18:6d:d4:
23:56:91:9e:4d:9f:82:c2:76:4d:43:03:6a:5c:e5:
f9:a2:6a:6e:1d:69:43:c5:24:24:a9:6c:e2:3a:e3:
27:a1:07:da:81:03:ca:98:f1:18:96:f1:2c:09:6e:
0b:f7:35:6c:58:08:c4:69:6a:81:39:50:86:3e:62:
27:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CD:24:FB:92:EF:E0:E1:03:73:A1:6B:6C:B9:AC:94:DB:73:4C:EA
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/Ss0k-5Lv4OEDc6FrbLmslNtzTOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.111.144.0/20
Signature Algorithm: sha256WithRSAEncryption
4e:2f:5a:af:b2:46:22:05:05:f0:8a:c3:66:7c:6a:41:02:f4:
26:a0:72:59:4a:6a:4d:88:be:3a:8d:7b:a7:db:81:b7:1f:f9:
55:37:42:05:88:ae:97:f2:e4:dd:a6:70:b1:6e:e2:54:91:fd:
a5:74:9a:dc:74:6e:93:79:cd:ca:a4:5a:fa:d8:cc:96:e4:0a:
bf:c5:5b:e4:e0:1c:15:23:78:f2:c8:29:a7:43:24:ee:c5:54:
43:b9:ab:c7:61:24:0d:00:39:cd:81:62:14:9b:20:22:85:cf:
ac:7b:3a:78:49:2a:74:ab:27:65:74:ad:c1:51:a5:42:fc:e1:
48:00:ae:bb:3c:7f:89:38:83:19:03:ab:b2:d8:f0:1f:80:95:
2e:f3:5b:25:92:e8:66:79:b9:88:30:a5:4f:40:5d:fe:f9:99:
99:f5:3b:06:ce:5f:23:65:ed:38:f2:64:c5:52:7f:46:97:b4:
3e:6c:70:a7:95:bd:fd:71:3f:6d:a2:ff:5b:c1:69:ef:97:d3:
5f:76:7d:11:18:97:10:05:bd:16:e1:9b:90:b2:77:96:e9:af:
7a:13:4f:4b:c0:01:f4:b4:c9:83:f3:a9:02:df:94:1a:1f:fb:
85:eb:98:18:a1:c9:a4:4f:97:ee:41:8b:3f:55:26:42:3f:6a:
fc:6b:3b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:31 2024 by rpki-client on console-fra.rpki-client.org