Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/NiTkX8rN5zSzxxonO36A0SaUAu4.roa
File: NiTkX8rN5zSzxxonO36A0SaUAu4.roa (raw, json)
Hash identifier: 8RFWPqiXYA+eYXKURJ+GYX1sMw6BWHgRWgVLeuEZ0Cc=
Subject key identifier: 36:24:E4:5F:CA:CD:E7:34:B3:C7:1A:27:3B:7E:80:D1:26:94:02:EE
Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial: 018570027D2F23ECCB6BA5BAB5FF235B5816
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/NiTkX8rN5zSzxxonO36A0SaUAu4.roa
Signing time: Mon 02 Jan 2023 01:04:49 +0000
ROA not before: Mon 02 Jan 2023 01:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208900
IP address blocks: 95.160.57.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:7d:2f:23:ec:cb:6b:a5:ba:b5:ff:23:5b:58:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Validity
Not Before: Jan 2 01:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3624e45fcacde734b3c71a273b7e80d1269402ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:31:c5:2c:cd:67:08:a0:af:e5:c2:c8:2f:29:
5d:19:98:79:01:9d:b6:28:26:bf:5f:b8:b5:0a:5a:
d3:4d:10:3e:8d:c4:84:8a:28:ba:e4:dc:02:26:4e:
36:ec:07:63:03:c2:cb:bd:1f:99:f7:0a:e9:a7:fa:
b9:27:39:42:9f:44:dc:f8:cb:d4:98:e0:52:c9:ab:
0e:de:cd:97:0f:40:01:9d:21:34:38:3e:54:9e:18:
e8:73:03:ba:43:9e:a1:a6:87:56:8d:72:46:d6:9f:
22:93:a9:fd:22:96:73:d2:63:2e:24:7d:c2:dd:00:
ed:b8:b1:21:87:de:42:58:4a:f5:34:63:03:8c:3e:
97:fe:3a:aa:04:48:7f:07:c3:04:eb:d2:35:be:c4:
7f:c0:d8:de:82:7c:58:ba:8e:91:ba:ac:45:8c:77:
ea:d3:e7:d1:c1:ba:df:2b:11:cb:58:17:56:68:60:
04:83:2c:ee:e9:27:02:98:67:19:19:1f:ed:85:b3:
c0:eb:74:50:da:de:ed:7a:7f:cd:b7:f6:38:08:7a:
c3:93:33:1c:64:fb:69:e6:fc:61:a7:ac:d1:8a:65:
1a:ce:5d:85:92:2d:d8:d0:e2:89:a0:3c:89:46:c0:
a8:79:23:8e:96:d3:e1:16:90:fd:48:dc:a6:2e:ee:
9b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:24:E4:5F:CA:CD:E7:34:B3:C7:1A:27:3B:7E:80:D1:26:94:02:EE
X509v3 Authority Key Identifier:
keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/NiTkX8rN5zSzxxonO36A0SaUAu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.160.57.0/24
Signature Algorithm: sha256WithRSAEncryption
20:11:c1:83:56:2e:4c:84:e2:0c:4b:cd:10:98:69:fc:c3:25:
37:2b:b3:88:1c:5c:08:01:05:4b:fd:99:68:7c:80:37:2c:9e:
2b:ad:27:80:89:f7:16:e9:ea:11:a0:17:c5:ec:1a:c5:f6:a0:
65:e5:7d:66:3b:52:18:16:f9:5f:2e:2b:76:82:fb:15:a5:d0:
36:b1:30:9b:e9:7f:ae:9a:f0:54:51:32:88:f2:78:c6:81:29:
ee:7f:5b:88:2e:4f:73:b9:8c:51:1b:70:9c:14:11:1f:95:0c:
d7:9f:4c:9d:d1:af:9c:2d:d4:5b:9d:7e:bf:d6:9f:eb:ba:91:
c2:ff:1f:47:f1:53:ac:77:19:8b:d2:6e:ef:cd:c0:8a:4c:c8:
e7:e7:df:f4:a8:81:53:e6:11:26:ec:79:f1:9b:7a:27:62:fb:
12:89:43:88:52:b0:e5:3c:0a:0b:54:78:8b:98:42:6a:55:1c:
71:fe:f4:c1:27:ca:fc:17:83:22:24:8a:df:08:da:4a:e4:be:
04:15:ac:9c:45:23:80:aa:af:a1:41:13:67:48:eb:75:75:34:
08:6d:09:80:16:01:d5:f7:a3:55:2d:06:1d:04:68:3e:4a:52:
08:7c:30:8b:07:78:9b:54:ba:f0:02:4f:e2:79:21:41:b5:47:
02:10:f4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:29 2024 by rpki-client on console-ams.rpki-client.org