Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/jKwtfY_F_J2LpQP6fG5T365t7lg.roa
File: jKwtfY_F_J2LpQP6fG5T365t7lg.roa (raw, json)
Hash identifier: MOOeqOUNUmecsduSTgmlgA+mf0GREwpvsuizqMBdYLw=
Subject key identifier: 8C:AC:2D:7D:8F:C5:FC:9D:8B:A5:03:FA:7C:6E:53:DF:AE:6D:EE:58
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 018CC7933D9B7D694D8D9EB97E46DAFFC290
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/jKwtfY_F_J2LpQP6fG5T365t7lg.roa
Signing time: Tue 02 Jan 2024 00:29:24 +0000
ROA not before: Tue 02 Jan 2024 00:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211178
IP address blocks: 95.111.144.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 16 Apr 2024 12:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:3d:9b:7d:69:4d:8d:9e:b9:7e:46:da:ff:c2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Jan 2 00:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cac2d7d8fc5fc9d8ba503fa7c6e53dfae6dee58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:92:6d:b2:08:f0:01:bc:f0:07:1e:63:73:f2:
86:1b:42:9c:6f:69:40:16:9e:85:9c:61:74:91:58:
3f:86:1e:59:e8:bf:38:45:d7:e1:43:32:7d:4a:e9:
d2:13:0a:e0:51:70:2c:7b:7f:3c:3d:5c:18:05:f9:
c8:b1:8f:6c:54:db:fc:b9:96:0e:62:9a:24:29:ca:
ef:08:32:54:f9:40:9e:1d:8e:15:cf:b9:c3:e0:b2:
07:8b:86:56:27:ec:3d:c3:92:cf:a0:e4:04:8d:9d:
b7:bc:e2:23:3b:b2:10:7f:7f:41:46:af:6c:54:93:
5a:1d:cb:58:7a:f0:cc:09:2e:4b:3b:3c:15:c4:93:
ae:7b:58:92:06:59:55:66:be:19:7b:81:0f:b7:e8:
ed:1c:b9:a9:b6:52:89:12:b9:9d:8f:47:7a:a7:e0:
5b:62:42:10:f9:7d:7d:e4:d7:8b:6c:b3:67:6f:f5:
59:5f:d4:91:87:0c:6d:8c:81:4c:24:22:35:43:fe:
89:a4:76:3a:a4:cf:5a:c7:74:c6:0d:7e:5a:65:05:
f8:9e:99:a7:1a:50:cd:3d:a6:4b:e9:56:5f:30:64:
12:6e:36:a9:e7:06:d2:f0:a9:f4:45:b8:db:43:24:
f2:4f:51:a1:03:10:21:9b:8e:dc:8a:bd:b7:7d:8a:
23:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AC:2D:7D:8F:C5:FC:9D:8B:A5:03:FA:7C:6E:53:DF:AE:6D:EE:58
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/jKwtfY_F_J2LpQP6fG5T365t7lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.111.144.0/20
Signature Algorithm: sha256WithRSAEncryption
8d:ac:85:c6:82:b0:02:89:40:71:97:ea:ab:a0:76:c5:7b:9d:
44:fe:cf:22:44:88:71:68:c2:da:e6:ed:98:cf:42:f6:e5:bc:
e8:02:91:4a:ac:0b:e4:27:ca:ae:52:d3:5e:bc:86:6f:3b:0c:
6b:7a:6d:2d:1e:d3:42:21:d5:98:3a:33:2d:31:64:e5:d6:fb:
29:d6:5d:de:b7:83:e5:9a:f8:80:e5:22:06:0d:b0:2e:61:c2:
45:e0:1f:39:c5:22:3b:a6:61:8f:89:8f:d1:c5:6c:60:2e:ef:
3b:7d:8c:9f:45:f5:97:eb:ec:9e:24:29:23:8c:67:43:f9:2a:
05:b6:bd:14:40:86:b3:f4:f3:55:4e:cc:13:2a:9f:b2:8e:6c:
f3:d7:09:0a:91:d3:ea:eb:ca:40:c2:c9:c5:bc:d4:96:19:eb:
b7:ba:8c:5a:63:b2:a2:3a:32:57:e3:2e:4b:d2:ad:47:d5:72:
27:60:7d:dc:c1:96:9f:d7:1c:3a:66:87:1e:08:9c:92:7f:89:
ae:0e:50:9c:fb:f2:2d:e5:b0:84:97:39:4a:04:ee:4a:0d:1c:
1e:f6:b4:2a:01:aa:43:d9:e0:0a:7f:4b:38:ea:aa:8c:5d:ee:
4e:76:06:ed:9d:f8:65:ed:05:80:9d:9a:c6:78:d9:47:dd:9e:
04:0d:6f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 16:50:20 2024 by rpki-client on console-ams.rpki-client.org