Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/60C16k8U_tqV0ojPF38CSWEETy0.roa
File: 60C16k8U_tqV0ojPF38CSWEETy0.roa (raw, json)
Hash identifier: QQbYKfhhRhr12wUhAI/VH2h+SXY4CtrrA7RizVzWfJY=
Subject key identifier: EB:40:B5:EA:4F:14:FE:DA:95:D2:88:CF:17:7F:02:49:61:04:4F:2D
Certificate issuer: /CN=3076e9855f9bca3017a10137b443ee8c528ca952
Certificate serial: 01856F2FCED2811552B80105D8EBA5558D85
Authority key identifier: 30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/60C16k8U_tqV0ojPF38CSWEETy0.roa
Signing time: Sun 01 Jan 2023 21:14:42 +0000
ROA not before: Sun 01 Jan 2023 21:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206539
IP address blocks: 95.169.64.0/21 maxlen: 21
95.169.76.0/22 maxlen: 22
95.169.72.0/22 maxlen: 22
95.169.84.0/22 maxlen: 22
95.169.88.0/22 maxlen: 24
95.169.92.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:ce:d2:81:15:52:b8:01:05:d8:eb:a5:55:8d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3076e9855f9bca3017a10137b443ee8c528ca952
Validity
Not Before: Jan 1 21:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb40b5ea4f14feda95d288cf177f024961044f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:26:19:99:c1:db:c6:15:8e:24:ee:6a:aa:82:
df:bc:9b:22:80:33:0c:04:9a:62:22:54:7d:da:45:
ee:3e:f2:ef:b1:5b:3f:31:2c:81:b2:89:38:05:46:
1d:3f:b0:18:af:a5:92:2f:e1:f6:e3:58:16:45:d6:
14:07:3c:4a:95:f6:10:10:ab:26:67:0f:c8:68:1a:
1e:8b:5e:5a:a4:fb:da:8d:93:1a:d3:99:30:10:e0:
74:b3:a7:9e:1b:42:e6:43:b4:bd:bf:e2:81:78:6b:
28:5b:71:bd:3d:f6:2e:f0:af:7a:42:c3:fd:ac:41:
c3:94:4f:78:27:ef:6f:e9:1e:9a:27:91:20:9d:b5:
78:6f:00:4c:87:6a:c2:af:01:4e:5c:2b:5c:03:a2:
e9:1b:04:24:75:e0:f1:c0:b2:c9:1f:aa:f7:af:f4:
16:6b:06:9a:bb:17:ac:62:a3:c8:cf:19:7f:51:87:
f9:48:a9:4c:95:99:e5:57:a1:b1:4c:2b:3d:34:fd:
33:76:37:a9:1c:a2:23:5a:da:88:0e:20:33:14:6a:
4c:be:0c:91:34:21:d6:5b:8e:80:d3:70:3d:f0:b3:
09:7e:3f:eb:5b:5a:b1:20:75:4c:2d:10:38:f6:97:
e4:81:4d:2b:75:89:a8:43:63:28:82:12:4b:42:f4:
f9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:40:B5:EA:4F:14:FE:DA:95:D2:88:CF:17:7F:02:49:61:04:4F:2D
X509v3 Authority Key Identifier:
keyid:30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/60C16k8U_tqV0ojPF38CSWEETy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.64.0/20
95.169.84.0-95.169.95.255
Signature Algorithm: sha256WithRSAEncryption
03:20:d7:29:91:7c:d6:19:33:00:cf:b6:b9:cd:44:9e:d5:8b:
17:a1:5d:80:5a:ff:f5:fd:59:49:09:b4:a1:3a:74:8c:73:ec:
f6:b1:c4:c7:93:0e:bb:dd:27:a6:d4:a7:a4:6c:5b:35:3e:5f:
49:96:76:da:bb:43:a3:59:95:b5:d1:c3:6e:e8:7b:2d:4b:c7:
1f:f3:7c:c1:1b:e8:d1:ed:ff:dc:04:93:2b:78:5c:eb:31:73:
ac:94:f9:61:bc:1a:d5:29:fd:21:8d:e2:10:a2:28:33:56:64:
ae:a8:66:11:46:44:a1:06:f6:42:3e:a3:bf:9a:94:3d:3f:72:
e8:17:41:5c:7d:d9:60:2d:fe:b6:f9:7b:43:a7:07:72:55:9a:
c2:0c:fd:e6:be:13:e4:72:48:ed:1d:82:f8:1b:11:4a:27:cc:
9f:49:3c:12:70:d6:f9:fb:df:11:91:b2:1d:77:d4:1e:4b:66:
2c:b6:3b:21:f4:6d:9c:88:26:76:41:ae:43:c3:18:0f:20:47:
b3:76:ab:01:03:1e:79:71:d7:43:33:bf:1f:89:89:75:6d:4d:
cf:53:e5:2c:ff:b7:43:b9:5f:a5:40:e4:b3:0c:1b:1a:6b:84:
21:89:31:19:3e:09:f1:8b:5d:57:26:93:71:7d:26:04:80:42:
e4:37:77:fe
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:03 2024 by rpki-client on console-ams.rpki-client.org