Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/n7rw37G7Gu1wJaR3AjSFYDQj2-c.roa
File: n7rw37G7Gu1wJaR3AjSFYDQj2-c.roa (raw, json)
Hash identifier: y1/d/dQRY2hRLiv9xFFikvR/btAAE4fIHKYl2n5DGXs=
Subject key identifier: 9F:BA:F0:DF:B1:BB:1A:ED:70:25:A4:77:02:34:85:60:34:23:DB:E7
Certificate issuer: /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial: 01881AD1AE90BB1688CB658195E9B3B46EF2
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/n7rw37G7Gu1wJaR3AjSFYDQj2-c.roa
Signing time: Sun 14 May 2023 15:12:09 +0000
ROA not before: Sun 14 May 2023 15:12:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57391
IP address blocks: 95.81.83.0/24 maxlen: 24
95.81.82.0/24 maxlen: 24
95.81.89.0/24 maxlen: 24
95.81.87.0/24 maxlen: 24
95.81.86.0/24 maxlen: 24
95.81.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1a:d1:ae:90:bb:16:88:cb:65:81:95:e9:b3:b4:6e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Validity
Not Before: May 14 15:12:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fbaf0dfb1bb1aed7025a477023485603423dbe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bc:3c:37:4f:79:44:0b:ff:fe:ca:ea:6c:79:
de:4c:fb:90:cb:ef:9c:32:f6:8e:5c:18:f1:ed:b2:
a1:6f:ca:dc:4b:1b:23:40:d9:35:7b:78:66:43:f9:
c5:1e:74:9f:81:fc:07:1e:70:b9:fd:57:98:4a:4a:
11:04:55:39:14:19:4f:02:55:48:b2:ea:2e:d9:1e:
5b:52:1a:d4:8b:af:80:d0:9a:de:d2:67:21:19:60:
fc:d8:e7:fb:96:38:d0:28:6d:60:a5:4f:7e:02:d4:
30:2d:f3:40:38:7d:07:e8:f1:c7:24:5c:6e:43:15:
ab:1f:63:41:3b:96:da:6b:a5:05:b8:12:c0:34:16:
3e:b3:e7:2a:ba:be:bf:65:c3:0f:33:44:5f:8c:f5:
9b:95:4d:b8:7e:3c:cf:09:49:cc:77:62:76:82:8e:
2e:c2:66:73:a2:59:91:78:9d:e2:44:4b:37:60:df:
4c:f9:a7:81:f1:ea:4e:68:a4:d2:5f:30:15:c5:ea:
cd:1f:e9:c6:a9:c4:0e:6d:2a:f5:5b:97:61:1e:c6:
04:1e:89:8b:20:3e:41:76:f2:ce:2d:e8:97:51:8d:
81:2f:4c:f8:57:21:60:39:4c:0c:29:7c:d4:ef:33:
29:54:56:91:e8:2a:f7:6f:43:86:6d:71:1a:68:8a:
55:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BA:F0:DF:B1:BB:1A:ED:70:25:A4:77:02:34:85:60:34:23:DB:E7
X509v3 Authority Key Identifier:
keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/n7rw37G7Gu1wJaR3AjSFYDQj2-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.82.0/23
95.81.86.0/23
95.81.89.0/24
95.81.95.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:33:3b:48:bd:a8:16:be:26:61:4f:a5:9b:38:0c:06:33:d3:
50:b5:5b:06:f3:c1:0c:5f:91:6c:09:6a:6c:b9:29:3f:a3:ed:
30:ef:f2:4a:d1:f0:46:f7:8d:03:e2:28:29:a0:9d:93:81:61:
1f:fc:d0:6d:42:00:25:62:5d:5c:ec:d0:e6:63:93:5b:36:68:
c3:11:b1:26:82:33:d9:2d:84:51:55:3b:31:05:6f:4a:8e:4f:
04:7f:2b:75:cc:f2:ad:6c:6f:50:48:90:a1:38:08:c5:fe:2e:
4c:c6:24:bb:2d:15:62:5a:2e:42:dd:a6:06:21:c9:7b:c4:03:
62:4b:db:61:0a:9b:56:c7:09:ef:b3:6a:f0:9c:eb:4a:a6:06:
6f:30:60:7c:13:9f:d9:82:92:f6:f9:e0:d0:4a:53:2a:94:7b:
a0:47:f0:72:b8:26:e7:60:39:de:51:59:76:f9:f7:bf:a5:10:
6e:d6:56:1d:e5:98:66:40:ef:33:18:d3:dc:de:1b:ea:4f:4c:
af:9b:bf:92:7f:e8:20:f8:da:af:8c:2d:ee:4b:45:ff:7f:64:
8b:af:dd:b3:5f:5d:69:4d:fb:4c:55:b9:0d:6e:9b:16:f1:e0:
57:f0:2f:ef:87:11:91:d0:aa:9b:62:7c:92:d4:b9:5a:85:73:
f9:e0:78:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:42 2024 by rpki-client on console-fra.rpki-client.org