Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/GqBZJO7JNHhW3KLRencpOd044kQ.roa
File: GqBZJO7JNHhW3KLRencpOd044kQ.roa (raw, json)
Hash identifier: qdhi6Eb8Do6xXE5Mt2h28nLJWeDLKL7ilxWKgMDscw4=
Subject key identifier: 1A:A0:59:24:EE:C9:34:78:56:DC:A2:D1:7A:77:29:39:DD:38:E2:44
Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial: 018842F3F68155A97042BD16D3C7FBD8BAF1
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/GqBZJO7JNHhW3KLRencpOd044kQ.roa
Signing time: Mon 22 May 2023 10:14:24 +0000
ROA not before: Mon 22 May 2023 10:14:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 95.172.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:42:f3:f6:81:55:a9:70:42:bd:16:d3:c7:fb:d8:ba:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Validity
Not Before: May 22 10:14:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1aa05924eec9347856dca2d17a772939dd38e244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:f3:ee:18:8b:c3:3a:46:c4:97:c9:fb:b4:
d2:42:13:a9:d0:4b:33:61:bc:89:c7:8e:44:22:a2:
75:2d:80:c0:b1:cf:23:65:4b:1d:6b:8d:9b:72:d4:
3d:f5:f8:e3:26:c4:68:d1:7f:6f:bb:d0:77:27:11:
54:9b:0b:42:40:68:8f:9f:c9:a2:b0:5c:77:37:f0:
cf:34:6a:6f:b5:a3:34:b5:78:b8:a2:5b:38:15:55:
82:54:66:5f:5a:28:52:bb:cb:92:06:c6:56:14:28:
ad:58:10:7c:af:0c:fb:b0:16:d9:d7:3a:5a:55:66:
40:4d:57:ed:11:5b:a2:28:42:86:47:0a:bb:03:0c:
cd:ec:52:14:78:38:67:a1:34:00:c4:74:fc:5f:57:
60:74:20:2a:5e:71:2e:82:fb:74:c3:54:d8:d7:e8:
a8:c3:85:57:6a:ed:c7:c1:08:42:35:26:a9:6f:93:
9a:8c:a1:9e:c3:e4:1e:81:2e:f8:b9:05:54:42:7e:
52:e3:cf:a7:a6:52:e2:c0:c5:fd:0b:ea:a7:a1:f8:
b4:0c:fb:04:89:a7:3e:f2:5d:63:b3:f6:2e:a0:fe:
bd:0b:65:e6:ce:70:53:c6:19:2a:67:60:85:24:c6:
8b:1d:85:6f:f4:95:7f:21:da:82:1c:b0:fd:60:74:
08:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A0:59:24:EE:C9:34:78:56:DC:A2:D1:7A:77:29:39:DD:38:E2:44
X509v3 Authority Key Identifier:
keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/GqBZJO7JNHhW3KLRencpOd044kQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.172.76.0/24
Signature Algorithm: sha256WithRSAEncryption
72:d8:12:7d:50:7a:d8:12:7b:aa:e2:f7:9b:59:16:51:fb:45:
c9:9a:fb:2e:4b:3f:c8:b8:58:fe:16:9a:de:c4:99:63:60:6f:
ee:e8:c0:cf:e6:f0:50:67:09:a7:02:f7:86:6f:98:84:35:61:
77:31:10:93:43:2d:e8:7d:21:f3:9c:ac:10:b7:4c:ac:9a:b4:
d4:7f:da:1b:77:f3:d3:56:5d:c2:58:e8:77:dd:1c:ac:55:ba:
ff:16:84:aa:4c:65:59:4a:72:08:a8:7c:f0:23:51:11:00:d5:
f0:79:27:23:1c:93:e8:8b:53:fc:0b:81:3f:00:37:f1:84:82:
2e:c7:d6:cc:39:2d:83:b9:06:40:03:8a:f2:ac:dd:47:f1:b1:
80:de:16:44:16:71:be:28:73:4e:37:95:5e:7c:90:88:c2:2f:
99:6b:3f:24:a4:c5:13:78:2a:5c:10:c6:f6:c1:94:83:47:d4:
43:70:2d:34:31:44:07:fc:90:06:2c:a7:8d:b0:21:e9:0a:3c:
36:48:f0:90:2e:24:e1:e2:de:3f:ad:cb:c3:7b:db:8d:14:b7:
2d:9d:54:2d:8d:b6:9a:3c:80:1f:7c:52:06:2c:44:22:20:18:
81:39:4d:09:fd:da:a3:ad:24:c3:65:56:71:e3:e7:fb:50:84:
e4:33:a1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:58 2024 by rpki-client on console-fra.rpki-client.org