Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/xKSacBFcUk4Eje98Oqw26RzYAoQ.roa
File: xKSacBFcUk4Eje98Oqw26RzYAoQ.roa (raw, json)
Hash identifier: vS5BiZwzw9tN/CPdJa0eYD3wZWGHsJzfNHO1lAeC5+0=
Subject key identifier: C4:A4:9A:70:11:5C:52:4E:04:8D:EF:7C:3A:AC:36:E9:1C:D8:02:84
Certificate issuer: /CN=05ae5f23db983fd136ae9d71e87e1e5130bcf6d4
Certificate serial: 0185728C8AAFC59B54ED6E5DA879908CB06B
Authority key identifier: 05:AE:5F:23:DB:98:3F:D1:36:AE:9D:71:E8:7E:1E:51:30:BC:F6:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/xKSacBFcUk4Eje98Oqw26RzYAoQ.roa
Signing time: Mon 02 Jan 2023 12:54:51 +0000
ROA not before: Mon 02 Jan 2023 12:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48840
IP address blocks: 95.129.15.0/24 maxlen: 24
95.129.14.0/24 maxlen: 24
95.129.13.0/24 maxlen: 24
95.129.12.0/24 maxlen: 24
95.129.8.0/24 maxlen: 24
95.129.8.0/21 maxlen: 21
95.129.11.0/24 maxlen: 24
95.129.10.0/24 maxlen: 24
95.129.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:8a:af:c5:9b:54:ed:6e:5d:a8:79:90:8c:b0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ae5f23db983fd136ae9d71e87e1e5130bcf6d4
Validity
Not Before: Jan 2 12:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4a49a70115c524e048def7c3aac36e91cd80284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ba:29:67:ed:a9:24:82:5d:c5:cd:9b:c8:3e:
d2:18:0a:61:f5:85:46:dc:48:66:3e:59:e9:57:fb:
0e:35:3d:3a:0d:22:c9:67:45:96:15:72:35:e3:e9:
27:d7:08:20:9f:06:bd:56:8c:cf:bc:99:25:6b:cd:
4c:f0:07:64:97:c6:e9:d7:d3:9a:7c:e2:e3:b4:68:
98:e0:73:aa:9f:05:ab:80:15:4f:d9:82:41:35:86:
a5:05:c3:f0:48:e8:3c:b6:dc:b2:0c:16:93:94:99:
99:bf:33:d7:c8:bf:18:99:dc:35:96:00:6e:5d:65:
53:9c:3d:17:33:f8:4f:34:c5:3b:b7:3a:8a:f6:d9:
24:28:d0:fa:d4:0e:00:cb:18:2c:6e:0b:fc:8a:f9:
66:7d:80:aa:0b:a8:81:a5:94:33:7c:36:e3:d0:b0:
7f:da:05:e2:6b:7a:b6:f1:7d:64:1c:2f:af:45:2a:
10:90:7c:71:70:e5:ef:16:3e:de:fc:c9:fe:a5:92:
81:b0:08:03:88:6e:50:44:37:76:57:92:e2:08:f7:
e6:0f:c6:78:fe:9a:74:0a:e2:54:de:10:10:c4:8c:
35:02:71:fa:09:9e:60:d0:af:a9:35:4c:73:3d:be:
80:de:61:86:ff:73:f1:9d:d6:7f:09:14:3f:05:06:
3c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A4:9A:70:11:5C:52:4E:04:8D:EF:7C:3A:AC:36:E9:1C:D8:02:84
X509v3 Authority Key Identifier:
keyid:05:AE:5F:23:DB:98:3F:D1:36:AE:9D:71:E8:7E:1E:51:30:BC:F6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/xKSacBFcUk4Eje98Oqw26RzYAoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.129.8.0/21
Signature Algorithm: sha256WithRSAEncryption
ac:02:72:c4:02:7f:97:fe:54:11:32:ae:a2:6c:de:76:b9:77:
1c:8a:a8:d4:c4:ca:ab:f6:0e:f4:54:2d:2e:21:6b:e6:08:69:
8c:e2:05:4d:0e:7e:fc:21:cb:5c:9c:9f:c7:43:0c:20:03:44:
16:75:e0:77:d2:0b:50:81:f5:a0:7c:b5:ac:bc:6f:5b:a1:26:
a6:47:ff:22:dd:f1:3b:36:9c:28:83:48:e7:d1:f3:cb:31:b2:
82:ef:cc:9d:08:4d:b6:ca:55:6f:dc:94:22:7e:57:32:4c:9a:
d9:0c:b1:6c:82:fc:e6:05:67:cc:46:f2:19:84:87:bc:af:7b:
62:18:2f:d1:74:08:30:57:c1:48:e1:5d:2d:96:a9:a2:29:9b:
ee:f1:9b:fb:ea:3a:f6:72:9a:6a:0f:25:30:44:fe:91:88:4d:
10:cd:ef:a1:23:ab:0a:d9:d4:05:e7:c8:40:93:4e:89:61:4b:
5d:d2:7c:9f:13:8c:63:bd:43:e9:54:6f:ad:a4:1e:0f:e2:8d:
cf:1c:f2:85:38:8f:34:d2:09:43:42:b6:ff:74:2d:30:ec:0c:
65:e7:2b:78:11:33:77:f1:17:88:55:c7:28:f8:9f:08:7a:99:
69:42:3a:91:4f:6c:19:9d:d0:cb:dd:1c:a3:4f:2a:e5:d7:e2:
82:17:61:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 06:42:12 2023 by rpki-client on console-fra.rpki-client.org