Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/1-082RBPaFst-1i4HzaAmV_qLHt8.roa
File: 1-082RBPaFst-1i4HzaAmV_qLHt8.roa (raw, json)
Hash identifier: SYP2s2eSS6sfjtZ7qVE33gt1lquQg2IBJM+/6iz5eNw=
Subject key identifier: FB:4F:36:44:13:DA:16:CB:7E:D6:2E:07:CD:A0:26:57:FA:8B:1E:DF
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 018CC56EB412427C0BB836579C8F1E807D95
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/1-082RBPaFst-1i4HzaAmV_qLHt8.roa
Signing time: Mon 01 Jan 2024 14:30:15 +0000
ROA not before: Mon 01 Jan 2024 14:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 195.95.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Apr 2024 18:36:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:b4:12:42:7c:0b:b8:36:57:9c:8f:1e:80:7d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Jan 1 14:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb4f364413da16cb7ed62e07cda02657fa8b1edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5e:fb:10:83:40:47:cb:ec:29:1e:6a:7c:ab:
56:93:0a:42:bd:63:3d:53:f2:2e:e8:ef:4d:24:e0:
09:e0:69:8d:59:2c:cc:3d:6a:7e:30:f6:48:77:ae:
8b:bb:f5:99:ae:02:02:b8:bd:77:05:7b:ae:97:c6:
52:28:5c:e7:65:cb:3b:58:f4:36:31:ed:3f:f2:01:
81:0e:46:a8:14:1b:d8:ff:1e:64:57:da:01:1b:b4:
11:bf:c1:55:35:a2:38:a8:99:51:7b:3c:35:27:56:
f1:f0:b2:c0:58:0a:e5:32:fe:d4:7c:10:a0:8b:23:
e9:1c:e3:c8:ba:8d:b4:5d:a7:4e:64:c4:b3:38:47:
cc:61:b8:a3:c8:e8:8e:7e:b0:a4:b0:e1:f3:c5:dc:
2c:03:0d:86:a0:67:4d:84:b7:60:03:b6:60:13:b5:
31:86:35:05:06:36:d7:d9:40:96:4b:34:81:a5:34:
a6:3e:69:40:a0:13:53:d2:a0:bb:ae:16:bb:9d:c3:
42:92:bd:73:2f:b5:2e:94:72:fc:0a:cd:99:49:87:
76:34:69:27:a3:ef:62:dc:fe:16:e4:eb:db:4c:e9:
8a:ad:9f:37:75:c3:15:21:75:30:78:88:d7:64:d4:
42:16:4a:39:b1:f7:bf:c8:e4:85:5f:f6:c4:b9:db:
d2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4F:36:44:13:DA:16:CB:7E:D6:2E:07:CD:A0:26:57:FA:8B:1E:DF
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/1-082RBPaFst-1i4HzaAmV_qLHt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.201.0/24
Signature Algorithm: sha256WithRSAEncryption
10:76:d1:4e:9f:42:f6:6c:bf:72:7b:01:60:7a:0b:f0:a7:b0:
38:0a:f5:a3:9a:98:ef:88:38:16:e8:74:42:ff:6e:92:67:bb:
95:4e:8f:c0:1e:43:4e:7f:9f:bf:14:75:71:49:1d:f3:59:d0:
60:ed:4e:b6:6a:64:62:0e:b3:a1:d4:45:be:6f:e6:de:d7:78:
35:dc:f5:01:90:b5:c8:eb:2f:88:85:ba:b4:c9:20:7b:0d:01:
d7:e1:5b:85:f1:8d:c9:00:b5:ff:fc:29:ea:74:98:14:cb:03:
97:98:f7:9a:30:22:51:84:c7:81:7f:21:c1:c4:f0:a3:69:d1:
19:40:ad:ac:d4:fa:59:f8:3b:09:0b:6e:25:be:65:fd:3b:93:
e1:20:00:1e:83:1b:8d:c7:3e:89:56:2c:a6:61:97:b9:7a:3a:
04:21:33:96:2e:3d:a5:2d:74:09:8e:e9:89:70:17:0a:08:b0:
bc:07:09:40:0e:87:89:80:b6:a9:b0:87:17:28:16:26:62:d5:
33:7f:5e:30:ae:55:e5:33:ad:11:78:86:8d:7b:58:e2:61:8e:
45:1d:48:dc:7d:5a:e0:d6:c2:51:70:ea:70:f0:e1:e3:a6:d2:
c7:3c:a2:78:7c:94:32:4a:6a:85:3b:06:05:80:59:28:20:92:
b4:12:7a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 21:00:45 2024 by rpki-client on console-fra.rpki-client.org