Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/MIp6EUcHGY-7ZfZg_iKkk1-Jt84.roa
File: MIp6EUcHGY-7ZfZg_iKkk1-Jt84.roa (raw, json)
Hash identifier: 19EzfKj+muIH2eP5S4SayuGm7Pjh2QPkvRZHrrH27HA=
Subject key identifier: 30:8A:7A:11:47:07:19:8F:BB:65:F6:60:FE:22:A4:93:5F:89:B7:CE
Certificate issuer: /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial: 01856DC1B50771CD7E2A76ADA5DB063DF109
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/MIp6EUcHGY-7ZfZg_iKkk1-Jt84.roa
Signing time: Sun 01 Jan 2023 14:34:49 +0000
ROA not before: Sun 01 Jan 2023 14:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34636
IP address blocks: 95.81.82.0/23 maxlen: 24
95.81.80.0/24 maxlen: 24
95.81.80.0/23 maxlen: 23
95.81.81.0/24 maxlen: 24
95.81.88.0/22 maxlen: 24
95.81.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Apr 2023 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:b5:07:71:cd:7e:2a:76:ad:a5:db:06:3d:f1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Validity
Not Before: Jan 1 14:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=308a7a114707198fbb65f660fe22a4935f89b7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fb:c6:db:37:fe:32:4c:2d:f9:30:05:67:40:
0a:54:0c:1c:73:04:bf:7c:7a:7c:e0:25:d6:08:0a:
bc:56:d7:27:e0:4e:0a:28:6d:46:8f:6a:ec:e3:7b:
2e:75:bf:ab:49:71:25:69:19:9f:8b:21:d3:d4:a7:
73:67:08:e1:93:23:21:95:d8:ad:6e:6a:2e:0c:a2:
9a:e3:02:e1:60:af:a5:34:e7:d4:2e:6e:eb:6e:40:
35:a3:a0:13:01:fd:c2:d2:e0:50:db:97:89:d1:3b:
e4:43:9e:2b:e6:bd:49:a7:4e:53:bd:14:9d:11:8d:
aa:6f:04:28:fe:6d:47:46:c3:7e:75:ab:8a:a8:93:
dc:46:fd:e5:d9:bc:86:72:99:1e:9c:2a:58:15:1a:
14:0b:9c:b8:7d:37:d1:d7:b6:3f:27:7e:b5:fa:e6:
e2:c6:7e:81:e6:d5:b4:a3:60:5b:de:36:f6:0e:07:
34:f2:d5:31:a1:c4:27:80:6d:f3:79:56:35:29:91:
31:4e:1c:3e:6c:c9:9f:17:fb:be:64:c6:0e:4b:81:
43:d7:13:8c:16:be:86:68:26:fd:8e:03:68:58:db:
c5:1f:2f:ca:d1:fe:18:d5:c9:fc:18:65:3a:7c:18:
1d:c9:1b:4b:9c:5c:f6:8c:d3:6e:aa:ff:c5:95:5c:
61:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8A:7A:11:47:07:19:8F:BB:65:F6:60:FE:22:A4:93:5F:89:B7:CE
X509v3 Authority Key Identifier:
keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/MIp6EUcHGY-7ZfZg_iKkk1-Jt84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.80.0/22
95.81.88.0/22
95.81.95.0/24
Signature Algorithm: sha256WithRSAEncryption
98:e9:cf:7f:c8:14:2d:8a:ee:b5:f9:49:32:d1:f7:2e:f5:f8:
f0:b5:e6:a9:5e:4a:cf:59:90:4a:04:66:e3:ae:60:2f:7f:f9:
24:80:8a:86:98:23:36:e0:88:37:75:49:36:44:fb:e0:3c:93:
20:91:00:50:d8:6c:6a:69:0b:93:20:b9:b1:11:02:fe:21:1e:
36:c9:f8:cb:f8:ca:0a:28:ff:9f:48:44:c7:f9:ad:b3:8e:ea:
2f:08:ff:63:e4:13:a5:88:33:cc:26:63:8c:0e:ab:59:5d:47:
2f:51:eb:bd:a1:5d:05:83:5c:7c:98:ef:a7:96:19:22:79:20:
68:cb:50:53:39:2b:94:44:64:1c:88:59:2c:20:f7:23:cb:64:
08:6c:6b:5b:b7:c3:02:06:89:0c:01:a2:0e:8b:51:d9:0e:22:
7a:d6:c7:86:d9:70:70:16:3d:61:38:6f:40:49:fe:71:f2:5b:
7b:60:93:de:d9:0a:49:5e:21:2e:f7:3c:b7:57:bb:23:0e:39:
e6:7c:27:a5:b3:75:1d:88:ef:06:c7:ae:6d:eb:e8:ea:a2:9e:
bc:d6:66:c8:14:3c:fb:06:db:53:22:4b:b5:fe:31:72:1e:e8:
af:b9:ef:f6:2a:72:9d:31:23:48:8b:15:e8:41:e7:8c:d8:41:
f2:f4:2c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:40 2024 by rpki-client on console-ams.rpki-client.org