Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/6ZWtb0DsH5psNhhLtT0SLraAXP0.roa
File: 6ZWtb0DsH5psNhhLtT0SLraAXP0.roa (raw, json)
Hash identifier: 9TwZoxnOVg0UYfRitScIoGAIpNM5CEMo7XdXJVTrdDM=
Subject key identifier: E9:95:AD:6F:40:EC:1F:9A:6C:36:18:4B:B5:3D:12:2E:B6:80:5C:FD
Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial: 01896F5D356876A881930E8F3661441A72BD
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/6ZWtb0DsH5psNhhLtT0SLraAXP0.roa
Signing time: Wed 19 Jul 2023 18:15:26 +0000
ROA not before: Wed 19 Jul 2023 18:15:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44617
IP address blocks: 95.172.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6f:5d:35:68:76:a8:81:93:0e:8f:36:61:44:1a:72:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Validity
Not Before: Jul 19 18:15:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e995ad6f40ec1f9a6c36184bb53d122eb6805cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bd:4d:24:2a:d7:02:33:19:61:39:4e:b5:07:
72:44:fa:4c:96:c5:e2:ca:f4:9d:82:cd:3a:77:45:
b5:ab:41:c1:31:96:e7:96:31:56:dc:79:93:e2:41:
68:46:8e:1e:a5:6c:cc:2b:86:30:d8:a2:57:d4:03:
b4:52:f5:0d:1e:46:9e:ec:c3:9c:38:b6:19:7f:53:
dc:02:67:51:af:d0:32:af:ae:cd:b6:4d:92:50:91:
e4:4b:19:8a:fd:5f:64:3b:41:fc:90:34:7f:29:3c:
85:ef:b3:ba:7d:cf:ee:e7:e0:1a:be:c2:e4:1a:c9:
91:c0:99:5d:11:97:84:ac:d7:5e:15:3e:af:4f:1c:
d7:ad:14:4b:8e:69:c2:4f:7a:be:47:f8:40:70:43:
35:2f:04:da:0a:f2:9d:1c:a3:0f:65:25:77:17:bf:
e1:07:f5:c1:c0:32:f9:3c:15:d6:9a:46:05:7a:0c:
e1:7d:55:2f:cb:38:b3:93:b8:51:75:dc:da:e6:6d:
a4:5c:66:ec:22:1b:9c:87:18:82:e2:62:fd:0d:02:
37:9a:7a:3b:c2:fb:5f:14:2f:60:c2:d8:0b:00:a9:
88:b8:0f:5d:20:e2:ae:09:2c:f5:6c:5d:52:8c:7b:
9c:f0:36:29:33:70:fa:e5:5d:8a:01:14:fc:73:0b:
b8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:95:AD:6F:40:EC:1F:9A:6C:36:18:4B:B5:3D:12:2E:B6:80:5C:FD
X509v3 Authority Key Identifier:
keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/6ZWtb0DsH5psNhhLtT0SLraAXP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.172.74.0/24
Signature Algorithm: sha256WithRSAEncryption
97:15:6e:9a:9a:6a:12:82:d9:18:0b:89:11:78:e8:bd:72:4b:
58:89:a4:0c:70:73:76:4f:a4:9c:86:d1:e4:42:1c:b1:6f:ad:
1b:66:0e:85:31:00:07:49:ae:8c:76:b1:d4:f9:58:d6:60:63:
cb:63:4f:12:57:19:95:60:32:d6:76:fd:91:4e:ce:1e:86:ae:
52:06:6d:ab:1e:94:b8:6d:89:7a:74:c8:f7:8a:ee:cd:9c:de:
e1:e8:13:c4:eb:89:6a:5b:ca:e5:12:94:4a:ed:fd:c0:fd:ba:
9b:7b:e9:42:15:60:a0:ac:cb:7d:6d:e7:22:49:05:b1:c8:b5:
bd:83:d4:99:02:7a:80:2a:29:4e:d7:62:ad:c7:e6:f6:6f:7d:
01:39:c6:89:2c:6d:f8:0f:09:63:91:e9:6b:08:cd:87:7f:6e:
e0:c1:7d:b4:64:ae:49:aa:22:97:92:60:e6:30:20:1e:1f:27:
29:72:4b:aa:5c:1b:20:4a:f0:b5:a5:96:92:71:37:d0:64:36:
1b:df:d3:90:77:9e:df:46:1f:9d:40:23:41:f1:26:47:c9:a2:
44:90:20:74:7a:bc:b6:17:34:75:82:5c:de:ce:75:9c:b2:7a:
5a:f4:64:67:60:fc:0d:fe:70:26:56:e2:54:f7:f1:8f:11:50:
74:c0:29:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:09 2024 by rpki-client on console-fra.rpki-client.org