Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/6NoBa_7WrzJ2ifwNKWLru9Al1e4.roa
File: 6NoBa_7WrzJ2ifwNKWLru9Al1e4.roa (raw, json)
Hash identifier: T2YcRvnKW1RvhwxIAfdDpShf2C2VpAsChg5FwuWen90=
Subject key identifier: E8:DA:01:6B:FE:D6:AF:32:76:89:FC:0D:29:62:EB:BB:D0:25:D5:EE
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 01885D2D87B8F2365C32A2302A41127FEE64
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/6NoBa_7WrzJ2ifwNKWLru9Al1e4.roa
Signing time: Sat 27 May 2023 12:27:24 +0000
ROA not before: Sat 27 May 2023 12:27:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8915
IP address blocks: 95.140.144.0/23 maxlen: 24
95.140.150.0/24 maxlen: 24
80.90.176.0/23 maxlen: 24
2a00:1818::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5d:2d:87:b8:f2:36:5c:32:a2:30:2a:41:12:7f:ee:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: May 27 12:27:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8da016bfed6af327689fc0d2962ebbbd025d5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:44:1f:19:37:dc:ee:89:a9:f6:45:91:1b:46:
a0:b8:0f:dd:b5:a4:db:48:62:39:d1:b7:7f:55:8e:
df:85:10:78:94:90:d1:be:56:fb:2a:4e:96:a3:b5:
fc:8f:c5:8e:48:69:2a:d8:f2:50:7b:51:67:ed:85:
5c:fc:e3:fc:a5:5f:27:8e:c8:7d:63:da:2b:7e:97:
b5:31:8b:01:59:db:38:40:24:f1:ea:19:96:18:42:
c6:50:82:97:85:f3:92:59:0c:c6:9c:21:20:27:37:
4e:a3:18:76:a3:c4:5c:19:0f:35:ec:81:79:65:1e:
13:52:5b:92:f5:c6:81:c4:ed:68:1c:9b:02:ae:85:
8c:79:24:60:e2:9f:80:8c:75:f5:c8:3c:13:7b:22:
74:1d:cd:df:09:17:d6:2c:0d:cf:87:bf:58:f4:fb:
d4:19:fd:c8:3a:ca:ba:d3:d0:1d:a5:43:61:69:15:
2b:61:60:fc:17:98:67:5f:1c:57:85:83:19:cf:b3:
7d:1b:a5:1e:a5:00:2f:79:a8:92:79:5c:69:1c:3e:
5e:82:79:c8:8c:2d:06:ad:3e:78:2b:68:ee:0d:06:
a4:8d:18:8c:9f:70:5a:74:5b:7f:44:14:e5:77:69:
54:b1:24:ca:3f:a0:38:78:5c:b4:52:2c:33:97:a9:
da:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DA:01:6B:FE:D6:AF:32:76:89:FC:0D:29:62:EB:BB:D0:25:D5:EE
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/6NoBa_7WrzJ2ifwNKWLru9Al1e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.176.0/23
95.140.144.0/23
95.140.150.0/24
IPv6:
2a00:1818::/32
Signature Algorithm: sha256WithRSAEncryption
a7:3e:10:a9:43:10:da:f9:ad:ef:cc:98:99:0c:1f:fa:bd:e1:
bc:3a:34:10:54:b1:5b:a5:02:e5:87:45:57:02:eb:5b:3d:10:
02:ab:42:a6:00:95:4a:70:a5:9a:57:30:34:75:3b:73:e7:30:
ab:00:5b:7b:b5:4d:2b:2d:9e:04:60:6f:57:ca:ef:c3:34:aa:
33:86:41:0b:20:84:32:30:93:b7:57:8a:6c:0a:20:82:f9:9a:
92:33:4d:27:a5:e5:00:d7:7e:5c:58:18:fe:82:c4:9d:ba:98:
b0:fc:e2:fd:5c:72:86:b6:ba:e2:36:8e:86:98:91:75:e5:27:
46:55:34:28:74:e6:f5:d6:2c:62:a1:63:ef:73:9f:85:e8:25:
5f:95:9b:12:27:0b:a0:11:43:74:64:64:55:88:da:1a:79:c7:
d9:98:f2:10:5a:b3:a3:89:a9:98:68:a3:e1:2e:ad:98:5a:eb:
7c:31:22:f6:24:4d:7b:21:86:83:c1:21:37:fd:e5:62:6c:d2:
e8:fb:ed:da:dd:9d:bc:cf:1e:ec:49:dd:74:c9:c9:b8:1f:78:
e7:94:d7:b2:b2:d1:0b:25:eb:5f:a1:ee:76:48:6b:5d:32:54:
a1:8c:9d:d8:74:40:17:9c:53:31:6e:7a:e6:73:27:0e:06:fb:
93:a9:d3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:15 2024 by rpki-client on console-fra.rpki-client.org