Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/3f426f-79ee-4cb2-ab17-30d64ff70b90/1/0MCVFRK8v0d6XlUi5gXLohs48vk.roa
File: 0MCVFRK8v0d6XlUi5gXLohs48vk.roa (raw, json)
Hash identifier: 6c8w3E1GccowEXn1Hfl9ONEcd2sYgviqcUFO9RzmoEc=
Subject key identifier: D0:C0:95:15:12:BC:BF:47:7A:5E:55:22:E6:05:CB:A2:1B:38:F2:F9
Certificate issuer: /CN=355c9a5bcb8340108a41c86276e1cb94a61e7da9
Certificate serial: 01857271087184F437AEA8CCB5C66B2FB3BA
Authority key identifier: 35:5C:9A:5B:CB:83:40:10:8A:41:C8:62:76:E1:CB:94:A6:1E:7D:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVyaW8uDQBCKQchiduHLlKYefak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/3f426f-79ee-4cb2-ab17-30d64ff70b90/1/0MCVFRK8v0d6XlUi5gXLohs48vk.roa
Signing time: Mon 02 Jan 2023 12:24:48 +0000
ROA not before: Mon 02 Jan 2023 12:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211175
IP address blocks: 185.95.67.0/24 maxlen: 24
2a0d:68c0::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:08:71:84:f4:37:ae:a8:cc:b5:c6:6b:2f:b3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=355c9a5bcb8340108a41c86276e1cb94a61e7da9
Validity
Not Before: Jan 2 12:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0c0951512bcbf477a5e5522e605cba21b38f2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9d:76:9d:b3:c7:e5:cd:70:fc:03:00:03:20:
e0:eb:be:4f:fc:65:9a:96:73:f4:81:b7:d9:2b:48:
c6:3a:95:80:8f:07:bb:e5:09:7d:41:13:01:95:d6:
38:26:f2:43:db:4e:d5:87:c8:e5:d3:17:93:32:df:
c5:1c:4d:d8:fd:a1:f1:c8:2b:11:17:a9:2e:52:6f:
20:f9:b7:26:1e:c5:69:8c:c2:d5:98:79:5b:54:25:
a8:8c:f2:94:f4:0d:02:e5:ce:3e:2f:de:33:97:0c:
d6:10:50:c1:c6:e6:ad:70:08:2c:aa:cb:aa:b6:35:
14:6e:ab:4a:c3:77:f6:e6:61:51:2e:ec:79:25:0b:
dc:a1:05:41:13:7d:22:21:e0:e3:13:c5:86:26:82:
3a:82:df:16:76:d8:7a:2f:de:1e:70:75:ee:d2:5e:
95:f5:4b:d4:aa:2c:a2:12:0e:7f:c6:8d:09:b1:59:
4b:bc:fc:46:01:7a:56:c8:f7:ff:47:2e:b7:8a:24:
38:97:40:61:13:43:c7:a5:45:0d:49:c5:90:ee:3e:
6b:9c:9e:14:7c:a4:c3:3f:36:b7:11:b1:eb:f3:d4:
27:74:a3:31:d2:ab:1f:01:76:3c:79:91:fc:ce:55:
a2:ce:6c:75:ae:57:48:36:4f:16:1a:f0:4c:af:35:
a5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C0:95:15:12:BC:BF:47:7A:5E:55:22:E6:05:CB:A2:1B:38:F2:F9
X509v3 Authority Key Identifier:
keyid:35:5C:9A:5B:CB:83:40:10:8A:41:C8:62:76:E1:CB:94:A6:1E:7D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVyaW8uDQBCKQchiduHLlKYefak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/3f426f-79ee-4cb2-ab17-30d64ff70b90/1/0MCVFRK8v0d6XlUi5gXLohs48vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/3f426f-79ee-4cb2-ab17-30d64ff70b90/1/NVyaW8uDQBCKQchiduHLlKYefak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.67.0/24
IPv6:
2a0d:68c0::/29
Signature Algorithm: sha256WithRSAEncryption
32:3d:d8:1f:45:ef:0c:43:73:8f:43:4c:59:a2:39:44:fb:92:
cf:e1:22:ba:49:c1:c7:33:fa:dc:9a:24:36:09:5b:0c:9a:33:
d3:79:ef:7f:02:dd:f5:36:2b:9f:61:10:2f:52:1e:1b:31:90:
47:91:1c:8a:6a:09:58:83:3d:02:14:26:9a:fe:15:93:94:32:
c0:c3:c2:f9:a7:78:fb:0c:8b:e2:67:3c:94:44:8e:5d:8d:61:
84:2f:87:8f:20:1b:7f:7e:7a:14:c0:c9:d4:2a:63:2c:57:bc:
fa:a8:8a:d9:fb:8e:9f:0d:0b:68:9a:5a:d4:2f:50:f6:22:fd:
72:4c:d6:b2:81:bc:45:16:0e:0a:e6:4f:de:b8:ba:b9:2e:79:
18:e4:1f:b6:34:85:9e:88:c8:81:b1:33:de:a9:1f:e8:e4:c7:
1c:6b:50:94:01:d5:c0:de:c0:b0:e8:fb:1d:e8:eb:01:74:ed:
a3:21:28:90:01:dd:60:10:52:98:02:26:7e:53:41:b6:2f:21:
f1:cd:e2:76:32:c5:43:85:f4:17:b9:24:67:8d:0b:6a:30:b6:
d9:69:45:6a:96:56:a3:5a:b8:71:aa:e5:ee:39:b5:ac:22:16:
78:74:ad:ee:53:7d:80:2f:1a:4b:92:8e:df:bc:8b:21:b5:ab:
83:b6:9c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:42 2024 by rpki-client on console-fra.rpki-client.org