Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/wXSJekWAwJ6PKqA4LkwsTBMTIZk.roa
File: wXSJekWAwJ6PKqA4LkwsTBMTIZk.roa (raw, json)
Hash identifier: eDSX5rOx7DYVJjxnbju06lcViXoMsR7QxIESksObR9Y=
Subject key identifier: C1:74:89:7A:45:80:C0:9E:8F:2A:A0:38:2E:4C:2C:4C:13:13:21:99
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 01856FCB88D935AEAC96ACF398641C3272D9
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/wXSJekWAwJ6PKqA4LkwsTBMTIZk.roa
Signing time: Mon 02 Jan 2023 00:04:47 +0000
ROA not before: Mon 02 Jan 2023 00:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51614
IP address blocks: 95.158.147.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:88:d9:35:ae:ac:96:ac:f3:98:64:1c:32:72:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 2 00:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c174897a4580c09e8f2aa0382e4c2c4c13132199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ca:6d:0a:be:54:e2:19:f7:05:27:91:20:7c:
a9:dc:e0:92:48:61:8b:7d:64:a1:64:9f:3c:0c:30:
55:5c:d1:84:30:14:22:9c:7a:65:1e:59:59:31:1c:
8f:ad:16:5b:b7:31:84:9c:be:df:1e:53:72:02:70:
89:5b:e2:53:06:b2:bc:b8:25:84:22:eb:1c:73:bb:
ac:6d:43:70:fb:a6:d4:8f:16:0d:48:9f:ec:2a:43:
93:c6:a1:d0:6a:43:7a:cc:d7:c4:8c:4c:20:19:e6:
69:22:a9:a1:f7:cc:5a:5d:9f:30:3b:a8:15:c9:6a:
3a:26:35:ac:29:9f:3c:70:75:ab:0b:5f:d3:eb:5e:
58:38:b9:2c:d7:69:fd:64:b0:7b:58:65:8d:ff:35:
6e:7e:21:27:30:f3:35:f6:5b:5f:f6:e9:9a:1d:a0:
55:2d:84:6b:05:6c:72:2e:4a:8e:a0:37:a7:d7:be:
29:2b:8a:e1:70:22:a7:9d:79:4d:dd:f8:33:c7:98:
a3:06:ca:5b:ae:0e:26:6d:43:db:10:bb:58:cb:c5:
56:42:a7:33:e9:6f:af:d4:f7:2c:7b:81:bb:e1:78:
af:46:be:fe:02:01:7f:1e:6d:4c:16:6c:2e:38:a6:
22:9d:49:21:f5:86:19:2a:61:03:af:7e:7b:4d:27:
9f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:74:89:7A:45:80:C0:9E:8F:2A:A0:38:2E:4C:2C:4C:13:13:21:99
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/wXSJekWAwJ6PKqA4LkwsTBMTIZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.158.147.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:df:3a:2d:1c:68:8f:e3:f7:f0:f6:f7:c3:b1:bb:02:3c:9e:
3d:61:30:b5:cb:7e:60:1d:d0:50:eb:d0:3e:53:c6:67:7f:e3:
aa:e9:0a:74:1d:56:aa:8a:78:30:3e:02:13:ec:5e:b4:a3:ea:
1e:92:77:e4:11:a6:36:50:7d:50:74:7b:51:df:25:be:94:5b:
b6:5a:36:1d:96:35:fe:d5:26:b5:17:7c:50:57:32:af:34:5d:
c1:b4:0b:5c:af:6a:e3:e0:42:d5:eb:a4:20:9b:61:42:fc:af:
cb:4d:66:ae:cb:31:8c:39:f1:08:51:d6:bb:d7:4f:88:3a:74:
4d:39:3c:a7:22:8d:cf:13:ca:a5:f9:a0:8e:42:3d:a3:71:3c:
eb:ea:f6:70:f5:1d:31:4e:df:ef:b8:ab:26:33:6f:18:c5:02:
6e:22:6a:6a:9c:f8:17:95:f5:35:86:fa:4a:c6:c7:48:c2:34:
58:82:db:66:46:c0:d2:e7:04:da:26:50:34:a4:f6:11:01:83:
ff:42:bb:4a:68:6c:83:47:86:61:28:de:e1:02:83:e7:9f:22:
cd:c1:b9:b1:37:9d:17:19:3a:b4:52:e7:5d:c7:76:17:38:1d:
00:b5:a6:1b:b6:e2:a7:e3:ca:67:52:25:0d:99:03:c9:83:c5:
37:8c:e3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:29 2024 by rpki-client on console-ams.rpki-client.org