Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/XJsHkfCjaWPmAxnSxepc9-E4DIo.roa
File: XJsHkfCjaWPmAxnSxepc9-E4DIo.roa (raw, json)
Hash identifier: ZjLK8tBKpkUrx4mhJ/V3DN63AUdICyrF0xQuJt81F/g=
Subject key identifier: 5C:9B:07:91:F0:A3:69:63:E6:03:19:D2:C5:EA:5C:F7:E1:38:0C:8A
Certificate issuer: /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial: 01856DC1B7E7EB3A29809D542356B2D00914
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/XJsHkfCjaWPmAxnSxepc9-E4DIo.roa
Signing time: Sun 01 Jan 2023 14:34:50 +0000
ROA not before: Sun 01 Jan 2023 14:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48391
IP address blocks: 95.81.84.0/23 maxlen: 24
95.81.86.0/24 maxlen: 24
95.81.93.0/24 maxlen: 24
95.81.92.0/24 maxlen: 24
95.81.92.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:b7:e7:eb:3a:29:80:9d:54:23:56:b2:d0:09:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Validity
Not Before: Jan 1 14:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c9b0791f0a36963e60319d2c5ea5cf7e1380c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:57:81:7a:5b:d6:3c:71:37:87:1b:53:01:d9:
a8:82:fd:87:d7:cb:32:e3:99:5c:23:a2:38:35:5c:
94:42:63:9f:93:bd:6b:9d:fc:b0:e2:1d:94:81:b3:
36:f8:30:1b:4b:36:f6:fc:06:28:1e:20:a6:d1:eb:
0f:32:86:11:e1:6c:91:ce:c0:07:14:0b:4f:5b:4d:
6a:7a:82:07:69:0c:5a:0d:a3:da:38:19:9c:7c:2b:
d4:23:49:57:87:75:d5:b7:54:e3:9c:67:54:07:af:
30:51:4e:7c:01:f3:3b:91:59:3b:da:3f:46:77:87:
f8:ea:82:2e:66:a7:af:30:45:a9:5b:8f:38:da:cb:
2d:af:e6:ee:04:c9:9f:ef:4c:4d:71:92:40:02:3f:
dd:b6:9b:f0:68:ba:0a:07:9a:3b:db:8c:06:7d:d1:
6b:50:5f:4d:8c:bf:ed:f7:ac:1b:7a:75:e5:b4:d0:
1e:7d:b7:93:c0:9e:9c:ff:1f:92:e4:a8:9e:44:cf:
2e:04:70:f7:ec:5b:72:97:94:97:11:ab:6a:6a:ed:
ed:fb:f4:3e:29:82:a2:3d:49:b4:49:2d:3c:47:d4:
36:a4:50:f7:22:a4:17:d2:d8:41:1f:cd:06:3f:5c:
c4:92:a1:9e:5c:b3:18:4f:47:b7:57:6d:47:27:88:
8c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9B:07:91:F0:A3:69:63:E6:03:19:D2:C5:EA:5C:F7:E1:38:0C:8A
X509v3 Authority Key Identifier:
keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/XJsHkfCjaWPmAxnSxepc9-E4DIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.84.0-95.81.86.255
95.81.92.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:64:31:d6:9f:35:78:47:cc:62:90:e6:d6:59:9f:f3:31:bc:
8d:a4:75:25:e7:26:e1:bb:62:46:95:b4:0d:ec:0d:67:81:4b:
0f:ef:07:ba:b2:6e:e9:7b:ca:85:9c:d4:2e:4b:f5:cf:ec:49:
84:9c:44:9b:8f:ee:16:ac:61:4e:ef:bf:7a:a3:32:68:b4:2c:
18:30:19:1a:52:7a:05:93:e2:64:af:f2:ff:75:cb:d7:aa:00:
ba:76:0a:74:b8:d9:89:da:11:89:22:b6:8c:e5:d7:b0:76:db:
af:23:4b:f4:65:08:6c:f6:51:a4:62:a4:22:70:16:67:c7:76:
05:72:ba:05:20:90:c7:02:ab:02:a9:f7:2e:ed:b0:cb:b7:dc:
18:18:4d:54:05:db:3e:c6:42:09:09:84:e5:90:8e:ff:d5:07:
79:a6:79:fe:1b:40:86:25:26:0b:6b:e9:ca:f2:47:13:66:98:
77:8d:d7:73:79:60:6b:d3:57:74:f8:d2:0a:08:73:b3:ff:ad:
16:c1:a8:24:1b:8d:cc:77:e0:f6:6b:23:fd:21:7d:59:90:c6:
8b:76:62:39:8a:0e:a4:5a:d0:eb:dc:05:be:8c:5b:68:81:d7:
9a:5f:39:09:bd:46:27:66:2e:3b:2b:26:2b:9f:dc:b4:7f:39:
4b:2a:88:28
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:42 2024 by rpki-client on console-fra.rpki-client.org