Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/cpoW_FwtMLrjrymHfyouPG_WbFY.roa
File: cpoW_FwtMLrjrymHfyouPG_WbFY.roa (raw, json)
Hash identifier: YKgFti3RITs0knYxlzLhy0SNx5j/W4Vy+ewpz0esakI=
Subject key identifier: 72:9A:16:FC:5C:2D:30:BA:E3:AF:29:87:7F:2A:2E:3C:6F:D6:6C:56
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 01885D2D8769C0353C74769ED53FB2805616
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/cpoW_FwtMLrjrymHfyouPG_WbFY.roa
Signing time: Sat 27 May 2023 12:27:24 +0000
ROA not before: Sat 27 May 2023 12:27:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3285
IP address blocks: 95.140.144.0/23 maxlen: 24
95.140.150.0/24 maxlen: 24
80.90.176.0/23 maxlen: 24
2a00:1818::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5d:2d:87:69:c0:35:3c:74:76:9e:d5:3f:b2:80:56:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: May 27 12:27:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=729a16fc5c2d30bae3af29877f2a2e3c6fd66c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f2:fd:1f:bf:e4:5c:bf:30:62:98:7e:a6:4c:
e4:6c:9f:d4:4a:10:03:66:c4:22:60:7b:53:04:86:
1d:ff:e4:b8:54:b9:63:e4:eb:a2:d1:f3:fe:68:bc:
0f:27:d0:89:50:88:b3:b6:0c:2d:ec:9e:44:a9:aa:
45:33:e0:72:1c:b9:a4:97:cc:9a:38:19:9f:2a:98:
0c:b2:43:5e:f7:4a:04:74:c3:ea:14:0b:31:d0:ca:
52:8d:b8:f0:b6:35:9e:06:19:0e:99:a3:ea:29:f0:
5c:62:ea:0c:40:95:4e:5f:0d:77:d9:33:4b:64:5d:
82:ec:7b:31:9a:60:3d:6d:78:58:44:6f:e7:c9:76:
01:ce:17:d3:84:a2:36:ef:7b:74:9f:5e:58:ef:af:
31:13:a5:37:19:70:b0:e4:c3:08:2b:10:7b:9c:9c:
a3:3e:02:b9:4b:28:ff:e2:96:95:6b:04:1e:ea:94:
f5:67:18:ae:90:4d:da:e8:bf:5b:42:aa:d0:41:f0:
c4:06:ca:26:e4:cf:2f:4e:3f:56:f1:c1:5c:18:a6:
df:af:a2:75:b7:b7:9f:93:98:26:17:02:73:d7:29:
4a:ec:f6:be:97:d6:7a:7c:22:b0:7f:3f:7d:c5:b2:
f1:09:ee:b2:33:d7:a1:2c:68:ad:a5:5d:5d:5b:0c:
b7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9A:16:FC:5C:2D:30:BA:E3:AF:29:87:7F:2A:2E:3C:6F:D6:6C:56
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/cpoW_FwtMLrjrymHfyouPG_WbFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.176.0/23
95.140.144.0/23
95.140.150.0/24
IPv6:
2a00:1818::/32
Signature Algorithm: sha256WithRSAEncryption
d0:e7:9e:b4:ba:dc:fe:39:ab:b6:e5:e5:fe:1d:fc:2d:8a:f5:
7f:44:72:5e:5e:de:20:b4:be:2b:e8:8c:50:4c:1f:46:c6:09:
1f:95:bc:3c:fd:c1:da:9f:33:df:20:df:1f:d2:49:32:a9:b1:
46:ad:f7:d0:91:50:19:a8:2c:8c:bb:ee:5f:32:32:fe:b6:92:
b3:05:ee:a4:52:f5:a6:df:43:6a:42:b4:37:72:93:c3:df:61:
2c:d7:2d:f3:ae:1d:d6:80:b2:ed:db:68:fd:4f:ae:c1:ba:15:
c7:70:31:ff:e1:ae:07:86:bc:68:84:e6:6c:f6:c8:79:25:07:
6c:92:93:ec:11:d3:7e:70:a1:9f:7c:03:b0:ee:f5:d3:ef:bc:
8f:d3:a8:80:69:3a:00:5e:b1:c4:ab:1b:0c:d5:df:b3:f4:40:
a8:f9:7f:c1:d3:f7:58:4b:3a:a7:ca:ae:b9:0c:db:4f:98:e4:
b0:c5:45:2d:56:ba:85:72:9a:21:8f:62:e9:01:9e:80:56:fe:
1e:4d:b4:38:25:e8:6f:97:dd:85:7a:54:0b:0f:59:b6:e5:ae:
68:3b:c9:1b:b0:f2:e6:98:e8:f4:f7:77:45:d8:e9:d4:a7:6b:
cb:45:ab:53:55:43:10:88:8e:ec:cb:7b:c4:c0:6d:d0:98:ad:
3f:32:f4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:15 2024 by rpki-client on console-fra.rpki-client.org