Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/k4Fw59WGLXoKqkGmiLi0OLX8fU0.roa
File: k4Fw59WGLXoKqkGmiLi0OLX8fU0.roa (raw, json)
Hash identifier: mExirD1K68yiot1/OMWr7gPOk7TQx+rWu9piKVDt+M8=
Subject key identifier: 93:81:70:E7:D5:86:2D:7A:0A:AA:41:A6:88:B8:B4:38:B5:FC:7D:4D
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 01856FCB84D76588D5F91B63FA9BD1647CA7
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/k4Fw59WGLXoKqkGmiLi0OLX8fU0.roa
Signing time: Mon 02 Jan 2023 00:04:46 +0000
ROA not before: Mon 02 Jan 2023 00:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25206
IP address blocks: 46.35.170.0/23 maxlen: 24
95.158.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:84:d7:65:88:d5:f9:1b:63:fa:9b:d1:64:7c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 2 00:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=938170e7d5862d7a0aaa41a688b8b438b5fc7d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:26:5c:02:ae:7e:1e:ec:21:df:af:29:f6:d7:
2f:93:df:a8:c6:79:f4:8c:5c:92:2b:4e:b2:b8:ee:
00:dc:9a:6e:b1:e5:3b:76:85:d7:ff:38:51:58:e3:
e6:e4:23:31:fa:9b:0a:2f:50:1c:be:b5:81:73:93:
73:54:f0:3e:b3:5d:c7:e1:7d:bd:f8:29:21:80:fe:
c9:41:ff:c2:5f:b5:9f:81:8d:37:1f:c6:11:30:16:
be:02:5c:6c:1b:4c:4d:88:26:00:c7:af:74:f6:c0:
d3:26:bb:fc:cb:8b:aa:9c:fa:89:02:4f:15:b1:bf:
2c:fc:7a:d2:ba:1b:07:ac:66:ca:fb:32:ea:c2:6a:
fe:dd:73:7a:ce:de:38:4d:47:f1:a8:ed:4e:a6:92:
f7:64:19:86:01:43:bb:7c:1f:33:e1:f3:04:05:5d:
5e:aa:59:3b:2d:fe:9d:f1:71:a4:ae:76:96:d7:aa:
48:e7:13:ef:f8:ae:b6:81:fb:c0:ff:ca:e9:2b:c8:
f1:cd:ad:1c:30:41:b8:af:ba:5b:11:6c:e4:ed:c4:
4c:bf:f1:87:a6:62:7e:3c:f5:46:6a:45:49:ce:90:
f0:51:12:16:05:4c:f6:70:dc:15:5b:be:87:c1:31:
7d:24:1b:66:0e:00:95:84:3f:24:8e:50:7e:b1:b1:
74:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:81:70:E7:D5:86:2D:7A:0A:AA:41:A6:88:B8:B4:38:B5:FC:7D:4D
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/k4Fw59WGLXoKqkGmiLi0OLX8fU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.35.170.0/23
95.158.168.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:18:fb:8f:93:f7:47:e8:89:dc:d9:b2:d4:4e:20:3e:6c:b2:
33:34:19:bb:d3:dd:f2:2a:35:25:fd:3f:39:fb:61:0b:7a:fa:
8f:0b:51:88:28:03:81:5b:3f:f1:4c:62:71:8c:71:4d:0c:ca:
74:95:69:cc:63:e1:cf:e1:5d:1d:e5:cf:66:d9:45:ac:dd:6b:
98:39:3e:3b:9b:20:ac:b2:10:12:c1:01:9d:66:66:7b:f4:e3:
02:58:34:a7:b4:83:95:a8:03:a2:f0:42:38:92:ac:fd:af:61:
57:4d:ec:54:a5:b1:33:19:6a:05:53:db:10:36:fa:30:5c:97:
98:e4:8a:a1:96:06:94:f8:f8:5a:c1:e5:25:93:e1:06:54:5f:
ab:c7:d1:39:6c:e9:9c:bb:38:f7:65:07:fb:7e:90:50:c3:dc:
44:a6:cf:00:e9:41:b8:b6:22:da:2a:41:81:3f:bc:28:e4:d2:
69:21:19:ee:4f:de:89:0d:dc:11:0f:f6:70:2c:cf:d6:9c:2e:
89:8c:88:dd:12:aa:55:d2:27:56:00:69:69:4e:27:40:e6:d2:
77:f6:09:e1:f3:fb:1d:9c:e5:63:44:00:ac:c1:57:5b:5d:4f:
c1:37:35:d6:ea:3e:1c:5a:72:21:36:cf:a7:93:2c:e1:f7:78:
84:cb:a1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:35 2024 by rpki-client on console-ams.rpki-client.org