Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/6LupcBCO5fzdrIIE6Mx9uAy-QJI.roa
File: 6LupcBCO5fzdrIIE6Mx9uAy-QJI.roa (raw, json)
Hash identifier: MbyhyE1YYeZOm7mt+XoCIOlVhbqu2sr6w2yLer8S/4w=
Subject key identifier: E8:BB:A9:70:10:8E:E5:FC:DD:AC:82:04:E8:CC:7D:B8:0C:BE:40:92
Certificate issuer: /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial: 018CC8DE67A63FF6561CE2029705C85DF8FE
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/6LupcBCO5fzdrIIE6Mx9uAy-QJI.roa
Signing time: Tue 02 Jan 2024 06:31:07 +0000
ROA not before: Tue 02 Jan 2024 06:31:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39308
IP address blocks: 95.81.72.0/22 maxlen: 24
95.81.76.0/22 maxlen: 24
95.81.96.0/20 maxlen: 21
95.81.96.0/22 maxlen: 22
95.81.96.0/19 maxlen: 21
95.81.100.0/22 maxlen: 22
95.81.112.0/20 maxlen: 20
Validation: Failed, certificate revoked on Sat 21 Sep 2024 17:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:67:a6:3f:f6:56:1c:e2:02:97:05:c8:5d:f8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Validity
Not Before: Jan 2 06:31:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8bba970108ee5fcddac8204e8cc7db80cbe4092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:54:b3:22:ff:0d:a7:a6:b8:09:f7:ec:22:
05:83:91:04:67:2f:c4:b6:0e:b9:2f:37:bb:74:68:
bd:f0:c1:52:54:c1:40:0c:e3:2d:3c:a1:be:24:43:
6c:70:4e:57:09:5b:59:77:3b:0b:4c:70:b6:58:0b:
70:1b:96:66:ff:d5:0d:b5:ef:b0:bd:9c:5e:48:fa:
eb:a1:0c:c0:77:01:43:d2:e1:57:4d:2e:22:b2:61:
7c:0f:23:13:94:ef:85:24:bf:f9:16:62:e5:20:13:
2d:8e:a9:63:12:12:3f:b7:49:2d:9b:43:19:91:95:
80:ef:a6:c1:3d:ed:63:6f:0f:8d:ee:e0:e9:81:a5:
83:93:32:5d:6c:11:5b:7c:a7:49:dd:71:8e:b3:fe:
d9:41:09:db:a5:61:f3:46:45:d4:28:01:fa:fb:dd:
81:9c:98:3c:7e:60:21:4b:03:1c:f3:23:6a:a3:e8:
fe:49:89:a9:c6:0a:d0:e4:77:86:53:0d:12:de:94:
df:81:63:96:4c:d1:b9:5a:72:34:a3:e5:6b:02:12:
3a:57:98:22:1c:e5:5c:4d:89:0d:18:45:fb:88:31:
b5:18:98:cb:bd:73:33:c9:8e:14:38:3c:69:32:d8:
bc:db:ae:79:e1:44:c1:e3:c6:1d:83:84:67:63:f4:
4d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BB:A9:70:10:8E:E5:FC:DD:AC:82:04:E8:CC:7D:B8:0C:BE:40:92
X509v3 Authority Key Identifier:
keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/6LupcBCO5fzdrIIE6Mx9uAy-QJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.72.0/21
95.81.96.0/19
Signature Algorithm: sha256WithRSAEncryption
52:dc:5d:66:1c:5a:19:eb:1b:86:6d:a0:5f:e9:2a:f2:ff:b7:
a9:d5:c1:06:ae:62:a3:cd:09:d5:50:f1:e4:43:2c:1e:f6:96:
fc:a2:10:f1:bc:f5:a6:e9:e3:9c:16:4a:55:e3:6b:d3:34:ca:
2c:be:ff:e2:11:07:24:d7:49:11:50:09:13:76:d4:1a:13:98:
02:c8:8e:49:af:bd:f5:dc:58:f7:40:2c:bb:93:bc:09:a4:07:
48:70:8a:06:82:94:ed:3b:50:56:2e:6d:94:96:a8:b4:32:78:
b0:db:9a:56:02:61:67:d5:82:9b:25:e4:80:3d:3f:67:06:00:
f0:75:36:87:cd:ce:0f:ef:1b:59:dc:84:f5:0d:ea:07:c8:0a:
77:0c:12:cc:47:e5:dc:f9:93:91:7f:aa:6c:ff:0b:5e:f5:59:
c9:b7:fc:fd:40:b1:8e:b5:8f:46:30:91:15:a9:d5:5d:62:f2:
11:10:07:6f:a8:ce:2d:97:19:6a:5e:3d:6f:48:72:f3:6e:d9:
7e:84:72:cf:4d:ed:8f:1a:30:72:b1:e3:85:d0:73:9c:dd:9d:
22:cf:32:18:b0:c2:90:f5:5b:e7:93:08:ab:86:67:e7:90:d5:
27:a6:92:6d:1d:7f:c8:0a:1e:e4:99:42:d9:7b:8a:7d:83:63:
e3:1f:c9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:21:58 2025 by rpki-client