Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/5TZD5J2s80O-vBndqxrg1wnqthU.roa
File: 5TZD5J2s80O-vBndqxrg1wnqthU.roa (raw, json)
Hash identifier: 6yKYDJPblAvr7v4f/04mjkMHidiV+v8Kno2tEU2+9/Q=
Subject key identifier: E5:36:43:E4:9D:AC:F3:43:BE:BC:19:DD:AB:1A:E0:D7:09:EA:B6:15
Certificate issuer: /CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
Certificate serial: 01856FD4EF7E9DC9BF3665D51EF39FDFE1C8
Authority key identifier: F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/5TZD5J2s80O-vBndqxrg1wnqthU.roa
Signing time: Mon 02 Jan 2023 00:15:03 +0000
ROA not before: Mon 02 Jan 2023 00:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60844
IP address blocks: 95.178.121.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d4:ef:7e:9d:c9:bf:36:65:d5:1e:f3:9f:df:e1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
Validity
Not Before: Jan 2 00:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e53643e49dacf343bebc19ddab1ae0d709eab615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5e:73:7f:a4:65:95:ad:fa:2f:0a:45:fa:17:
82:a4:0a:9b:25:ac:42:2c:e4:76:80:7d:8e:58:52:
dd:c6:9a:f9:bf:e9:67:49:8c:fd:8a:e5:21:8f:b8:
74:f3:15:7c:bc:64:dd:db:86:45:76:cd:4b:43:4f:
fc:17:3c:00:a9:72:0e:56:e7:47:67:b9:ea:57:3c:
ef:14:b8:e1:46:16:73:92:31:b8:d3:cc:0c:08:89:
26:64:df:99:8c:b7:98:96:a5:5a:45:37:83:37:52:
86:ce:51:2c:a5:68:9c:ba:c7:e3:5c:94:81:43:53:
13:ba:b6:bb:54:da:5d:db:b2:d9:f8:4b:25:3d:0a:
26:fa:a1:1f:a5:57:6f:6b:42:70:72:1a:7f:94:65:
47:24:89:3d:26:18:3f:b1:02:99:89:76:d7:b6:86:
7d:bb:c0:1e:23:6b:64:12:76:12:2b:bc:d5:6e:97:
19:51:f3:b9:c3:fa:8e:ec:d6:c6:d5:f6:b7:bb:79:
94:57:54:11:72:6e:5c:59:42:63:7c:97:54:c8:35:
c2:c0:ea:c0:b6:be:e4:4c:b9:b0:a2:a3:aa:64:e1:
aa:b9:17:b2:8f:19:a8:86:55:38:dd:60:70:bb:f6:
6e:4f:cd:de:98:2d:04:83:ab:1a:57:c9:b7:22:7a:
11:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:36:43:E4:9D:AC:F3:43:BE:BC:19:DD:AB:1A:E0:D7:09:EA:B6:15
X509v3 Authority Key Identifier:
keyid:F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/5TZD5J2s80O-vBndqxrg1wnqthU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.178.121.0/24
Signature Algorithm: sha256WithRSAEncryption
01:39:59:53:17:9c:bc:bb:30:22:23:78:f5:50:18:ca:82:ca:
72:9f:48:a4:80:92:ba:ec:42:4e:46:3c:f2:9a:73:62:c3:32:
a4:64:82:af:8e:76:40:00:10:f8:b4:39:2e:53:20:bb:1d:2f:
35:43:9a:85:73:ee:ff:22:f2:44:24:a8:d6:9a:e4:cb:a7:fe:
d7:75:36:7a:63:46:48:fb:07:62:e9:20:a5:82:70:d1:a2:41:
80:54:3f:dc:e6:0f:e5:9a:66:a1:3b:f4:2c:9b:1e:74:06:cb:
d4:08:25:90:b9:58:15:f4:59:1c:58:f0:60:36:de:d2:fe:38:
69:09:5d:06:b8:fc:76:ac:da:a0:bd:30:34:50:98:f5:88:50:
e7:55:f5:60:18:e4:33:e6:77:03:b1:07:e5:fe:87:65:7a:f5:
e9:e8:a3:0b:e9:0d:17:48:6c:e5:93:89:1a:4b:3f:af:35:9e:
30:98:6d:3a:5a:95:3a:95:e9:33:a1:af:d1:c8:45:34:75:80:
13:f6:e7:52:7d:fe:89:d0:8b:d9:39:23:4b:4d:d7:53:3d:01:
d4:9f:12:0b:76:68:be:fd:6f:12:8d:86:42:a1:3f:65:77:7b:
89:66:48:a9:89:a5:ad:31:2e:3b:40:81:0a:c1:95:5a:d4:f7:
89:75:95:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:46 2024 by rpki-client on console-ams.rpki-client.org