Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/NCCxj7SZ_rIqYDiTgFL5ucXlOKs.roa
File: NCCxj7SZ_rIqYDiTgFL5ucXlOKs.roa (raw, json)
Hash identifier: o1/0qCwI0ID9uNaWlANdL0MEmPThYkjrcMNFdhXKDXw=
Subject key identifier: 34:20:B1:8F:B4:99:FE:B2:2A:60:38:93:80:52:F9:B9:C5:E5:38:AB
Certificate issuer: /CN=05ae5f23db983fd136ae9d71e87e1e5130bcf6d4
Certificate serial: 0189DE12C003E1D9E7335B315C11A20DAF44
Authority key identifier: 05:AE:5F:23:DB:98:3F:D1:36:AE:9D:71:E8:7E:1E:51:30:BC:F6:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/NCCxj7SZ_rIqYDiTgFL5ucXlOKs.roa
Signing time: Thu 10 Aug 2023 06:11:58 +0000
ROA not before: Thu 10 Aug 2023 06:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48840
IP address blocks: 95.129.15.0/24 maxlen: 24
95.129.14.0/24 maxlen: 24
95.129.13.0/24 maxlen: 24
95.129.12.0/24 maxlen: 24
95.129.8.0/24 maxlen: 24
95.129.11.0/24 maxlen: 24
95.129.8.0/21 maxlen: 21
95.129.10.0/24 maxlen: 24
95.129.9.0/24 maxlen: 24
2a05:e940::/29 maxlen: 29
2a05:e940::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:de:12:c0:03:e1:d9:e7:33:5b:31:5c:11:a2:0d:af:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ae5f23db983fd136ae9d71e87e1e5130bcf6d4
Validity
Not Before: Aug 10 06:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3420b18fb499feb22a6038938052f9b9c5e538ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:75:31:a3:a5:b9:98:42:b7:62:33:31:4e:71:
e3:cf:45:93:16:0d:d8:c4:26:32:51:b7:ea:93:e8:
0b:3f:8b:05:4b:4e:92:58:2e:bb:b6:45:90:c5:0d:
bc:dc:e4:dc:af:62:7e:54:9a:06:40:c0:44:6f:83:
d0:8f:4f:f5:a5:32:35:e7:c9:58:3b:19:cf:74:37:
f3:98:df:e8:43:8b:16:ef:a9:78:ba:9b:e6:14:ba:
5f:d7:60:53:11:f2:7e:e1:6d:97:c6:07:0e:7c:d3:
00:dd:71:56:42:c7:40:23:f9:cf:60:3e:5d:26:0a:
f1:d6:f6:28:a4:50:97:85:47:3d:e7:0d:e6:62:1e:
12:cc:c7:88:6e:43:fc:d8:11:47:5a:4c:c4:56:2e:
05:4b:6b:c7:97:a5:c3:91:df:da:65:b8:bb:ba:23:
b7:c3:6e:4a:a3:fb:4e:28:72:ae:2b:2b:85:15:91:
d4:d2:87:82:7b:99:3f:d4:c1:44:32:eb:89:7f:36:
99:6f:d6:97:b3:69:24:d5:4f:a3:90:7d:7a:91:cc:
1f:be:0e:1e:63:3b:94:88:d9:ae:c1:07:e8:3c:c2:
05:c6:c9:86:41:55:cd:b9:07:99:1a:c8:39:dc:61:
a6:0a:6a:ca:98:ee:c3:4a:49:70:00:a9:05:62:8d:
c6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:20:B1:8F:B4:99:FE:B2:2A:60:38:93:80:52:F9:B9:C5:E5:38:AB
X509v3 Authority Key Identifier:
keyid:05:AE:5F:23:DB:98:3F:D1:36:AE:9D:71:E8:7E:1E:51:30:BC:F6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/NCCxj7SZ_rIqYDiTgFL5ucXlOKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.129.8.0/21
IPv6:
2a05:e940::/29
Signature Algorithm: sha256WithRSAEncryption
42:87:0d:10:ef:8d:56:91:d0:78:12:24:1b:dd:65:33:8d:ff:
a7:e6:f4:1c:4d:25:28:2e:9a:0e:d6:f6:80:70:c8:5d:70:2e:
d0:1c:c4:9e:69:85:48:02:b3:96:6b:4b:bf:26:60:db:9a:8b:
34:56:62:29:fb:f7:af:df:27:89:c7:50:79:73:ae:3c:86:47:
ea:e1:d1:e9:f3:c0:b0:ca:f3:32:6d:20:bc:99:0d:fb:2e:1e:
cf:69:7e:64:12:8c:24:e9:09:b4:60:61:ae:11:56:31:11:d4:
66:14:65:fc:a4:96:27:0a:20:a4:05:a5:b2:f8:e9:18:6e:d6:
c1:7c:05:bc:4c:74:ef:28:4a:73:e5:84:d1:ec:61:c7:4d:62:
39:0f:cb:81:ce:84:7f:dc:e8:9a:bb:d1:8f:0e:df:a9:2e:b9:
18:b0:e0:85:97:92:92:7f:f1:3b:80:7c:27:0a:19:f9:5e:59:
36:42:1c:b7:5d:87:ea:90:a7:74:95:7d:8c:5e:07:20:cc:a7:
7f:84:d7:45:5c:de:4e:36:d5:d5:49:27:ee:5b:74:e2:3e:2f:
c3:4a:62:8c:2c:cb:78:06:ef:f7:75:7b:3f:c3:28:4c:b3:ba:
ae:7e:26:e2:b5:60:99:e1:db:23:f7:89:99:a7:15:ee:cb:9d:
39:a5:29:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:40 2024 by rpki-client on console-fra.rpki-client.org