Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/kDzTTDMKtS6UsrvAi2vTRn6hG3w.roa
File: kDzTTDMKtS6UsrvAi2vTRn6hG3w.roa (raw, json)
Hash identifier: Pw9QQJ91Gx0DuSXpwSlzXHxT29u4yepEAb5uRbA8b+w=
Subject key identifier: 90:3C:D3:4C:33:0A:B5:2E:94:B2:BB:C0:8B:6B:D3:46:7E:A1:1B:7C
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018572BA4DCE4813A82A93F6682C7CFEC54B
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/kDzTTDMKtS6UsrvAi2vTRn6hG3w.roa
Signing time: Mon 02 Jan 2023 13:44:50 +0000
ROA not before: Mon 02 Jan 2023 13:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48780
IP address blocks: 95.182.112.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:4d:ce:48:13:a8:2a:93:f6:68:2c:7c:fe:c5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=903cd34c330ab52e94b2bbc08b6bd3467ea11b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:79:55:cc:19:9a:42:00:d3:3e:38:cf:5b:42:
92:cc:49:c7:01:c9:78:6a:4c:b2:29:41:65:31:94:
08:10:95:1d:ab:73:d8:8e:eb:a2:54:4a:30:3a:e3:
68:2b:7a:fe:cf:21:0a:42:c7:d0:0f:af:ea:6d:68:
38:7d:e3:0b:73:bc:e3:da:cd:dd:56:25:e6:7a:fc:
43:1f:6a:62:fc:ad:05:77:4f:88:39:d2:1f:ac:47:
5b:53:3b:d2:a3:01:1a:90:fe:31:db:5d:61:02:c2:
f9:35:cc:cb:6d:1c:69:dc:e8:d1:5d:ac:b7:d5:fa:
44:6a:b1:bc:98:f8:25:c4:91:5f:7f:18:6f:6c:06:
e2:5c:75:c9:82:b4:ee:53:78:25:5c:a3:f1:eb:70:
70:7a:43:8b:22:69:6c:81:4d:e6:e8:f1:3e:da:ea:
28:a1:7e:f8:b7:ac:41:98:3c:3a:63:18:19:6e:63:
c2:6b:2e:31:67:1c:77:44:0f:9c:c8:ed:f0:63:86:
0d:72:f6:91:57:ea:33:3c:e5:f6:b4:37:09:9d:fd:
15:80:db:80:b6:f1:8b:13:d9:32:9b:60:34:3e:01:
7d:1e:a6:c7:24:bb:25:22:d5:3b:66:ef:c6:90:cc:
4e:83:de:14:23:31:8b:fb:3d:f5:23:33:1b:63:1f:
e7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3C:D3:4C:33:0A:B5:2E:94:B2:BB:C0:8B:6B:D3:46:7E:A1:1B:7C
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/kDzTTDMKtS6UsrvAi2vTRn6hG3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.182.112.0/21
Signature Algorithm: sha256WithRSAEncryption
1f:bf:2e:47:86:e5:88:4e:b3:2c:be:fc:3c:e2:ad:39:09:38:
dc:af:7c:55:44:b5:10:b8:d4:75:da:fd:25:a6:7d:0c:5b:11:
75:a3:ee:b9:8c:1d:05:0d:23:03:5a:8c:de:0f:e3:f4:d0:6b:
1d:1d:d7:f8:58:b6:19:83:55:b7:16:bf:46:be:70:60:d1:5e:
db:e0:ce:17:90:6d:2e:7c:a1:9c:20:09:47:87:1f:2a:76:21:
a2:2f:6b:19:b5:18:ca:3a:48:c1:11:32:10:e5:8f:9b:12:56:
8f:91:65:11:3a:7d:c7:e9:91:d4:ca:e8:d3:68:ee:21:92:02:
42:8c:09:01:9a:11:05:18:6a:dd:55:f2:38:23:7a:c6:e7:3c:
2d:88:ff:f6:fa:28:40:73:8e:cf:98:6d:08:ca:40:38:34:dc:
9e:8b:bf:5e:99:f6:60:b2:3f:a6:ed:c5:de:11:3a:fa:ab:c0:
45:fc:ff:1b:cf:53:f9:68:6c:88:0b:14:95:5c:f6:54:b8:b9:
89:d2:a8:63:77:b3:13:86:47:4a:28:76:a3:95:00:c7:5e:7d:
c0:6b:d2:4f:59:1f:39:df:0a:22:3d:7f:a8:f7:47:ed:d7:72:
f3:f6:5b:f6:45:4e:d9:00:78:7e:11:0c:e1:1c:89:92:2a:eb:
3b:14:5c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:45 2024 by rpki-client on console-fra.rpki-client.org