Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/cBwP0eYDzviVuv3BXhQsWQsmuYQ.roa
File: cBwP0eYDzviVuv3BXhQsWQsmuYQ.roa (raw, json)
Hash identifier: xVeR+dFh5ubEhLbBtdedd6XeSdiz6xBHaIJf8OheiOo=
Subject key identifier: 70:1C:0F:D1:E6:03:CE:F8:95:BA:FD:C1:5E:14:2C:59:0B:26:B9:84
Certificate issuer: /CN=6dbd51576b4a93460a465af35e6bf550f5548894
Certificate serial: 01856D81ADDEDEB1685451BCC8848FE0B86F
Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/cBwP0eYDzviVuv3BXhQsWQsmuYQ.roa
Signing time: Sun 01 Jan 2023 13:24:53 +0000
ROA not before: Sun 01 Jan 2023 13:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209307
IP address blocks: 192.54.76.0/23 maxlen: 24
192.54.186.0/23 maxlen: 24
95.183.42.0/24 maxlen: 24
95.183.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:ad:de:de:b1:68:54:51:bc:c8:84:8f:e0:b8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894
Validity
Not Before: Jan 1 13:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=701c0fd1e603cef895bafdc15e142c590b26b984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fe:20:34:a9:4d:f4:30:ff:ef:2e:1e:59:d5:
da:7a:ee:56:13:0e:b2:83:70:d0:83:99:32:24:b7:
33:8a:79:46:e2:ee:e6:a6:1d:50:63:ec:72:db:43:
2a:ca:2d:f5:a3:a6:24:5e:42:c7:e7:ce:9f:4d:37:
af:b4:fc:0a:f8:7d:a9:77:69:3b:2b:be:f0:94:1e:
8f:f8:ee:1e:9a:98:f4:74:58:0a:49:80:83:ef:23:
00:76:01:64:a5:62:7d:17:0a:f7:13:82:78:fe:53:
4d:00:5c:06:cf:74:37:74:a0:09:ab:ec:d1:75:f3:
ac:92:61:07:a6:1e:fd:aa:0a:bc:d6:39:77:4a:57:
48:bf:6d:0d:fe:77:af:86:ff:25:a6:1e:c0:01:5f:
1b:7f:94:87:db:e2:bc:ac:fd:12:54:ef:dd:61:4b:
fd:82:9a:7d:c5:7d:a1:90:7f:b1:fc:28:07:8f:36:
b1:18:0c:42:61:50:7b:1f:e8:a8:c6:b9:56:a0:d6:
0d:b3:ae:da:21:57:63:f1:a0:c7:58:ac:ea:04:c5:
a2:32:7e:68:c2:42:ca:1d:58:ac:a8:bf:4b:ff:d9:
16:0d:55:e1:c0:7b:a6:f7:df:f0:5b:29:44:73:f5:
a0:b5:c8:f1:df:c4:34:8b:a3:62:66:02:25:4e:3d:
84:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1C:0F:D1:E6:03:CE:F8:95:BA:FD:C1:5E:14:2C:59:0B:26:B9:84
X509v3 Authority Key Identifier:
keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/cBwP0eYDzviVuv3BXhQsWQsmuYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.183.42.0/23
192.54.76.0/23
192.54.186.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:8d:e1:88:ef:d5:a2:db:54:a1:8c:ad:09:6a:7c:fe:f6:22:
8d:be:76:d0:42:e0:5a:85:d3:b8:f3:52:20:65:96:e7:57:29:
b4:0f:f2:ef:c1:48:4f:ff:97:85:cb:10:5c:9f:df:76:ed:26:
22:6d:05:f4:52:e3:b3:85:13:15:7c:c6:2d:2f:4b:30:0c:69:
24:65:70:bd:39:fd:57:6d:39:7a:a1:e5:7d:fc:43:d8:a0:b1:
3e:06:93:e4:41:86:5a:89:fb:19:4e:92:a6:4e:e6:86:51:52:
b8:7f:39:b7:a5:18:d5:85:48:86:86:e6:92:56:a0:bc:58:99:
b6:85:97:20:02:db:72:cc:2a:5f:5f:2a:0e:9c:b7:57:be:0c:
c8:6f:b3:9b:e2:e4:ff:26:dd:5f:73:12:27:1e:95:69:c9:50:
35:61:81:ad:74:32:e1:5d:a5:16:68:45:22:2d:f5:c5:2c:a3:
60:be:4b:27:ae:c9:70:cd:e1:40:a6:a6:4e:1b:51:c4:7f:36:
94:39:2c:45:32:bc:05:12:7b:11:f7:dc:ca:3e:c1:87:50:97:
6d:0c:a0:2c:6f:7e:e9:96:92:e6:6c:10:e0:45:1a:53:e9:2d:
3a:e7:13:5c:5f:fe:1a:ca:d1:69:16:36:39:df:8d:2f:37:3f:
81:d8:a1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:42 2024 by rpki-client on console-ams.rpki-client.org