Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/rU6ifZhe2a6fFBsJ7JK6B8YE6Us.roa
File: rU6ifZhe2a6fFBsJ7JK6B8YE6Us.roa (raw, json)
Hash identifier: aB2pmZXgPBkuZc+7nI8y/9CFcS9YzePhZYbonAJ/1Fw=
Subject key identifier: AD:4E:A2:7D:98:5E:D9:AE:9F:14:1B:09:EC:92:BA:07:C6:04:E9:4B
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 0191BBE1A2C2D77BA947EA265CD4AE70BF94
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/rU6ifZhe2a6fFBsJ7JK6B8YE6Us.roa
Signing time: Wed 04 Sep 2024 07:13:32 +0000
ROA not before: Wed 04 Sep 2024 07:13:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51660
IP address blocks: 95.158.150.0/24 maxlen: 24
185.18.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 12:13:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bb:e1:a2:c2:d7:7b:a9:47:ea:26:5c:d4:ae:70:bf:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Sep 4 07:13:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad4ea27d985ed9ae9f141b09ec92ba07c604e94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:2a:44:7e:f1:a0:e0:0c:86:33:1e:03:e4:82:
11:91:e4:49:90:5d:da:34:cc:64:97:f5:22:22:ad:
24:21:8d:19:2c:4b:28:70:88:b1:f5:01:94:aa:bd:
f4:16:8a:8a:1a:02:bd:c9:14:62:56:84:a0:0d:b9:
6e:55:c2:8a:ae:8c:6e:5f:d8:69:a4:4c:ff:4d:03:
e6:5f:7b:eb:73:0c:a7:f9:7c:41:6b:49:af:ec:f9:
af:49:c9:5c:29:94:fc:02:83:42:8d:78:9c:e7:03:
7f:85:77:0a:c3:ad:28:8b:ed:5e:55:c2:cd:d8:c6:
96:54:df:08:75:c8:dc:f5:da:4a:30:06:a0:56:fc:
41:a6:be:ad:e2:73:8d:8f:df:25:5a:75:86:ea:e7:
9d:b5:fc:8e:44:81:29:73:65:14:e1:33:0a:a5:df:
4c:38:6b:72:2a:27:5c:a4:87:7c:6b:1b:70:a3:9e:
f5:d9:20:91:0f:35:a1:c1:38:3f:e0:09:ae:19:38:
f6:ec:2f:b8:3c:fa:c8:2f:7f:e1:02:6c:38:e9:11:
ac:32:6b:58:41:f8:bc:fc:92:d8:49:58:08:e1:99:
e6:7a:74:4e:c3:f2:02:6a:3b:f5:13:06:a5:30:9e:
1b:05:d8:f7:c5:7a:34:de:72:a8:e6:2d:fa:23:be:
b6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4E:A2:7D:98:5E:D9:AE:9F:14:1B:09:EC:92:BA:07:C6:04:E9:4B
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/rU6ifZhe2a6fFBsJ7JK6B8YE6Us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.158.150.0/24
185.18.228.0/24
Signature Algorithm: sha256WithRSAEncryption
54:cc:34:92:ce:05:8b:29:6b:c3:04:cc:cc:4a:c4:2d:0f:2d:
66:a4:d3:33:a1:35:ac:56:d9:dc:20:c3:78:8a:86:ce:c7:df:
18:81:84:0c:fb:9c:e3:c1:ba:b9:4d:b6:b8:96:89:44:5b:2c:
09:c6:34:13:5a:39:bc:46:6c:68:56:dc:b6:08:bb:7b:63:84:
19:4f:69:5f:56:53:2d:68:c9:08:61:30:c8:dd:24:72:87:c5:
99:7b:e9:37:e3:c6:e5:fe:0d:fb:36:10:25:83:f4:e3:1e:f7:
1c:6f:f8:e2:0e:43:49:5f:5d:80:f6:a8:93:64:ae:25:c4:e0:
ac:8f:4d:67:9f:35:89:cb:9f:14:7c:31:70:94:18:3b:25:ce:
32:0d:2e:97:f3:e3:39:b4:04:13:ef:da:17:ba:ce:8b:ca:3a:
ae:2a:0f:38:92:f0:e7:82:89:0d:ac:13:4d:0c:b1:52:50:fc:
87:91:f3:d5:fd:0c:af:3e:c9:6e:1a:16:41:11:64:dd:68:2d:
ab:fe:4f:1e:57:2e:eb:6a:ea:b3:10:f4:89:1b:93:e2:89:e4:
e4:a7:df:f2:63:88:43:c5:a1:23:12:49:8f:89:d5:ff:0c:fe:
09:3d:1d:da:cc:40:91:13:64:8f:93:cb:01:66:d6:c5:d7:be:
f3:ca:62:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 17:14:56 2024 by rpki-client on console-fra.rpki-client.org