Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/iMw6Rk2mOkFPzHnT3KFZsoOUMCA.roa
File: iMw6Rk2mOkFPzHnT3KFZsoOUMCA.roa (raw, json)
Hash identifier: hO7yZ1T7HT3AG6HgqQTmujBmzvAH+5W+IJY/UatPn2g=
Subject key identifier: 88:CC:3A:46:4D:A6:3A:41:4F:CC:79:D3:DC:A1:59:B2:83:94:30:20
Certificate issuer: /CN=feeb528ca48b1f447582c54ccf6ed780751b51d5
Certificate serial: 018D8403267A9A1A6FB083C0FF1D2568FE38
Authority key identifier: FE:EB:52:8C:A4:8B:1F:44:75:82:C5:4C:CF:6E:D7:80:75:1B:51:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_utSjKSLH0R1gsVMz27XgHUbUdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/iMw6Rk2mOkFPzHnT3KFZsoOUMCA.roa
Signing time: Wed 07 Feb 2024 14:40:15 +0000
ROA not before: Wed 07 Feb 2024 14:40:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204544
IP address blocks: 95.128.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:84:03:26:7a:9a:1a:6f:b0:83:c0:ff:1d:25:68:fe:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feeb528ca48b1f447582c54ccf6ed780751b51d5
Validity
Not Before: Feb 7 14:40:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88cc3a464da63a414fcc79d3dca159b283943020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3f:b4:f3:d5:7e:95:5a:e1:5c:ff:a7:86:ac:
29:03:18:82:a6:cf:a4:74:53:75:b0:1d:c0:15:c4:
59:43:59:9b:af:c8:6b:7a:1c:68:49:5c:0b:99:68:
d8:1f:1f:4f:7c:b9:37:92:33:07:9f:70:d0:2c:e8:
ac:95:99:02:55:12:a4:6e:d6:13:3e:1b:1a:84:6e:
47:c8:d8:8f:74:cf:7b:a7:bf:d3:99:55:24:de:6b:
97:34:f0:0b:8d:26:34:32:63:5e:68:6d:32:cf:d7:
55:d2:61:de:ef:ff:ae:5c:a2:41:92:41:56:1c:fb:
c9:b6:56:23:ac:a9:01:c2:d7:65:29:02:5e:1f:2c:
a2:1f:d4:0c:83:ba:3f:45:56:2d:2f:a0:a3:2b:d9:
38:ba:07:74:b6:b0:12:7c:35:96:e1:dd:dd:cb:47:
89:33:5d:5a:17:e7:f5:20:ee:59:7f:ff:bd:b0:f4:
d6:a1:e3:31:26:5d:a4:d4:d3:9e:05:aa:fe:7d:86:
93:2c:24:9f:56:3c:7f:25:43:25:80:7d:a9:12:c2:
43:35:b3:ad:a9:74:56:b8:fe:21:a8:5f:4a:c4:c8:
3d:c2:27:b5:2b:64:a0:77:83:f6:37:5f:8f:68:47:
81:1a:ca:7b:c6:d6:f4:ce:44:a9:0a:27:1e:ef:b9:
74:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CC:3A:46:4D:A6:3A:41:4F:CC:79:D3:DC:A1:59:B2:83:94:30:20
X509v3 Authority Key Identifier:
keyid:FE:EB:52:8C:A4:8B:1F:44:75:82:C5:4C:CF:6E:D7:80:75:1B:51:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_utSjKSLH0R1gsVMz27XgHUbUdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/iMw6Rk2mOkFPzHnT3KFZsoOUMCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/_utSjKSLH0R1gsVMz27XgHUbUdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.194.0/24
Signature Algorithm: sha256WithRSAEncryption
00:9c:c3:1d:e7:a7:f1:0f:ec:d9:84:45:da:c4:a4:c3:c5:c5:
4c:09:b5:d0:42:05:d5:89:0f:f0:84:96:4c:ff:45:9b:e6:f9:
00:f4:ad:88:3a:93:b2:59:99:34:fc:32:67:dc:17:a5:4d:1a:
af:88:d7:7f:21:55:dc:07:4b:b7:73:2c:c6:d5:00:65:44:52:
bb:cc:db:25:9a:51:7a:b4:f4:44:4b:db:c6:26:41:eb:79:c8:
76:4e:ba:82:88:4e:80:bb:a6:f8:78:e2:57:fb:af:06:4f:13:
31:48:d0:a7:5c:7f:a8:b4:ae:64:6a:1f:fc:9b:1f:d4:50:d7:
a0:66:32:48:1b:89:f5:f3:94:56:4d:05:3d:9f:ae:67:f1:e0:
93:ea:43:dd:68:ac:1f:11:7e:c1:0b:2d:84:2e:76:23:14:fb:
2f:3b:2f:b0:c8:28:bf:ed:40:19:14:74:99:41:c8:5d:b0:b6:
65:d5:86:9d:85:f5:c8:be:ec:ad:b5:31:e6:0c:9d:a5:d3:17:
50:48:77:2f:71:d7:c6:18:f7:eb:45:04:b6:c6:40:f5:a5:56:
7f:a8:b1:cb:64:9f:71:9a:dc:03:f9:74:69:e7:1c:0f:ea:1d:
dd:96:9d:48:30:95:74:06:34:ee:a6:33:5f:25:c9:2d:f7:0b:
f4:fd:0c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:22 2025 by rpki-client