Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/jqGNaMjjXOMIcSJ711zGhY1s9H4.roa
File: jqGNaMjjXOMIcSJ711zGhY1s9H4.roa (raw, json)
Hash identifier: j4hgxDBHygqQwdZ3POLjPqpvnTIQjhR+iuqAR8svLf8=
Subject key identifier: 8E:A1:8D:68:C8:E3:5C:E3:08:71:22:7B:D7:5C:C6:85:8D:6C:F4:7E
Certificate issuer: /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial: 0187943D0BBA3D20ACE93DD2200544EC34BC
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/jqGNaMjjXOMIcSJ711zGhY1s9H4.roa
Signing time: Tue 18 Apr 2023 12:00:41 +0000
ROA not before: Tue 18 Apr 2023 12:00:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34636
IP address blocks: 95.81.82.0/23 maxlen: 24
95.81.80.0/24 maxlen: 24
95.81.80.0/23 maxlen: 23
95.81.81.0/24 maxlen: 24
95.81.88.0/22 maxlen: 24
95.81.86.0/24 maxlen: 24
95.81.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 May 2023 10:06:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:94:3d:0b:ba:3d:20:ac:e9:3d:d2:20:05:44:ec:34:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Validity
Not Before: Apr 18 12:00:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ea18d68c8e35ce30871227bd75cc6858d6cf47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:19:6c:53:73:24:ac:41:b9:05:93:f2:95:60:
8b:d1:f2:4c:dc:9f:66:b4:31:42:22:b3:12:3d:e8:
cb:64:f2:24:51:04:3b:7b:dc:3e:6e:f1:15:f9:3c:
68:84:76:64:10:e4:fd:cc:67:cd:50:5d:52:8e:0e:
22:91:59:74:fd:37:95:f3:de:68:7f:e5:50:dc:17:
27:4e:59:a5:20:0c:d5:26:fb:6c:9c:9d:a0:79:37:
ce:e8:c8:a8:47:81:97:fe:51:c9:30:b5:8a:66:21:
0e:c4:fb:6b:d6:68:fd:01:9e:34:b2:bf:c1:a0:1b:
32:82:c5:c3:16:83:27:75:91:ec:01:a9:84:94:a0:
39:e4:0a:8e:c4:db:9c:3a:70:4f:47:f1:0e:ed:be:
dd:19:27:fb:9d:31:a0:df:bf:b7:2c:6f:1f:8f:a2:
48:bb:d8:05:96:41:65:29:82:40:0a:40:11:8d:a7:
d5:56:36:3d:d1:09:b0:d1:0b:5a:b1:04:69:9f:af:
4c:24:80:3b:06:04:57:90:d7:3f:67:af:66:c6:09:
e6:f0:26:c1:60:37:c2:95:ae:de:13:c8:3b:74:a1:
f5:b3:ed:7a:f3:3d:6e:89:4e:69:a2:4f:91:5d:4f:
b8:4e:9f:9c:c3:df:27:fe:06:e3:fb:f0:07:24:61:
ad:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A1:8D:68:C8:E3:5C:E3:08:71:22:7B:D7:5C:C6:85:8D:6C:F4:7E
X509v3 Authority Key Identifier:
keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/jqGNaMjjXOMIcSJ711zGhY1s9H4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.80.0/22
95.81.86.0/24
95.81.88.0/22
95.81.95.0/24
Signature Algorithm: sha256WithRSAEncryption
74:64:cc:0e:ea:87:db:d1:db:dc:00:28:1d:ad:19:be:29:d3:
4b:22:54:c5:bb:19:f6:e1:b0:c5:7e:8e:89:1f:d6:44:1f:99:
42:26:a9:0f:c1:12:33:63:30:56:81:77:26:80:29:fc:45:97:
63:20:05:b0:68:3b:dd:34:39:aa:e6:50:9a:82:b6:53:2c:11:
33:a9:2a:8a:53:5b:e6:7a:0c:11:f6:ac:c7:9f:2b:e2:9a:af:
75:db:ce:db:65:07:f5:74:a6:99:f7:89:77:a3:73:96:c1:42:
1a:eb:b4:a2:12:eb:c1:98:41:ce:bf:1d:32:16:4f:1f:4c:44:
9f:5e:fb:b5:59:02:f9:69:81:7b:6e:b0:36:97:8c:86:0e:df:
92:2b:d0:58:28:21:11:f6:1d:3b:23:11:f2:ef:c0:8a:db:3a:
4c:6c:15:17:c1:47:00:9f:21:ca:a3:0f:c1:2a:3b:1a:b4:2f:
e8:73:56:e7:9e:13:12:b1:d3:f5:2a:52:06:59:52:07:9a:91:
0a:8e:ab:33:d1:02:e4:21:d1:1d:ad:db:76:81:9e:24:11:9f:
80:91:63:41:22:a5:46:10:76:2c:72:e3:75:6e:81:d5:25:c4:
23:b0:33:8d:0d:dc:94:90:3e:21:ba:78:a7:dd:d0:df:f8:4b:
2d:aa:54:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:40 2024 by rpki-client on console-ams.rpki-client.org