Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/tnv3WZVVjkUm6mnocd3iIkV71es.roa
File: tnv3WZVVjkUm6mnocd3iIkV71es.roa (raw, json)
Hash identifier: x1x7GoM/Rj+Lb56WOXs8ES0IifH0FHc6V3/Kx7OtQ3w=
Subject key identifier: B6:7B:F7:59:95:55:8E:45:26:EA:69:E8:71:DD:E2:22:45:7B:D5:EB
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 01893B11CF1543F73AFD4FE854DA15DDACB1
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/tnv3WZVVjkUm6mnocd3iIkV71es.roa
Signing time: Sun 09 Jul 2023 14:32:50 +0000
ROA not before: Sun 09 Jul 2023 14:32:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50738
IP address blocks: 95.140.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3b:11:cf:15:43:f7:3a:fd:4f:e8:54:da:15:dd:ac:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: Jul 9 14:32:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b67bf75995558e4526ea69e871dde222457bd5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b4:38:15:04:bd:6a:d0:86:2d:6e:8b:d1:e3:
1b:c3:ab:fe:d3:5b:16:8a:12:0a:fd:6a:1b:74:e1:
4f:ed:e4:3d:22:75:74:7c:0f:e1:ba:f6:41:e2:67:
cc:b9:a4:50:3d:9f:b9:24:35:20:81:0f:63:e1:76:
dc:53:2b:e1:7c:a8:51:17:8e:8a:d9:f3:72:e9:58:
1c:82:76:78:62:2c:2e:6f:1d:7f:c2:a8:6a:88:eb:
d6:7b:54:8d:82:72:9c:b4:ee:99:b0:9c:3b:01:fa:
82:0a:24:6d:41:a3:b5:f4:6c:e2:1a:db:38:a4:39:
9a:45:fc:c9:d7:f6:44:9f:9e:c2:21:0d:bc:c4:41:
88:b9:23:25:b3:d5:af:2d:2f:a6:1b:67:5e:a6:25:
83:0a:31:0f:38:03:f8:f8:10:83:49:35:ca:d3:c8:
5e:c7:2a:41:99:37:5c:e3:c1:8c:35:10:56:46:cd:
3c:c2:64:c2:91:60:c8:19:80:bd:28:91:5d:e2:f1:
d9:6f:0f:2c:18:64:d8:58:d4:fe:e3:27:74:7a:20:
ba:83:30:34:87:e5:6f:c6:3f:ff:e9:4a:d6:23:da:
6e:e4:82:ba:9a:d8:05:ea:a8:70:d9:3d:c1:05:9a:
00:05:70:0c:8c:4d:20:0f:9f:43:dc:fa:17:9e:f0:
88:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7B:F7:59:95:55:8E:45:26:EA:69:E8:71:DD:E2:22:45:7B:D5:EB
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/tnv3WZVVjkUm6mnocd3iIkV71es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.140.148.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:a6:81:bd:42:51:65:58:31:c3:77:21:d6:73:b8:32:d0:f8:
6c:74:ec:28:2c:b8:8d:f4:4f:fc:21:13:91:b2:4d:58:9c:db:
92:22:31:e0:2a:3a:1d:9d:4e:9c:09:d2:12:92:ae:cd:25:6c:
8b:df:3f:a1:39:a1:c6:d7:9b:b4:8d:73:9f:49:9c:1a:52:8d:
5f:cd:1c:93:63:be:05:95:a6:4b:4c:a1:43:df:c7:3b:ce:08:
19:ff:50:17:43:40:4a:08:b1:5d:2c:8d:75:2b:5b:eb:ee:09:
97:a3:bf:1d:a6:88:0c:3c:ec:86:51:f5:35:36:33:98:82:ba:
f3:67:c4:b3:43:7d:b1:20:63:50:87:74:6c:e9:ef:03:fb:90:
af:71:64:c9:59:fb:2c:46:63:77:a7:64:bf:e6:67:af:92:25:
3e:d0:84:57:90:1c:0d:f9:6c:a5:9a:b3:d2:93:95:b5:e4:e0:
40:8e:ac:a7:a3:a0:46:94:13:dc:cd:33:f4:65:ae:b3:98:48:
ee:c4:41:0d:54:b6:3b:f9:1c:cf:d1:8a:cd:b7:77:19:f2:b8:
2c:76:88:4e:88:5d:a2:a4:f7:54:a3:1a:e9:1a:c6:09:14:ba:
21:63:69:14:77:c7:cd:98:5c:73:dd:b7:36:79:24:7f:8c:c2:
42:a2:68:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:23 2024 by rpki-client on console-ams.rpki-client.org