Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/TTzYEXaNTXh2C8RJT4q6_tpFdO0.roa
File: TTzYEXaNTXh2C8RJT4q6_tpFdO0.roa (raw, json)
Hash identifier: urdZIQg/4bpAELlPH9nc19flaToHFKtUtXiIEU6xJIE=
Subject key identifier: 4D:3C:D8:11:76:8D:4D:78:76:0B:C4:49:4F:8A:BA:FE:DA:45:74:ED
Certificate issuer: /CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
Certificate serial: 01856FD4F02B1D71354BF5D78A860FAEAF28
Authority key identifier: F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/TTzYEXaNTXh2C8RJT4q6_tpFdO0.roa
Signing time: Mon 02 Jan 2023 00:15:04 +0000
ROA not before: Mon 02 Jan 2023 00:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62457
IP address blocks: 95.178.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d4:f0:2b:1d:71:35:4b:f5:d7:8a:86:0f:ae:af:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
Validity
Not Before: Jan 2 00:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d3cd811768d4d78760bc4494f8abafeda4574ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:23:62:44:0a:5b:73:90:ff:cd:0c:4d:a9:51:
17:e3:28:90:75:d9:39:86:1c:28:26:30:37:c8:8c:
c2:e2:5d:8f:89:db:16:3d:62:78:4b:4f:29:f2:0b:
80:aa:ea:b5:de:e5:77:56:33:23:e2:44:6c:86:f8:
6f:dd:f1:af:52:9f:da:b2:cb:87:ed:64:27:72:1e:
0c:e8:e4:d6:49:bd:b5:f5:47:ef:e0:29:a3:03:83:
7b:72:3b:65:35:81:94:e2:3c:b1:04:18:cb:38:84:
b5:d0:8d:86:5e:97:c0:49:bd:e7:05:c9:b1:b9:25:
47:fb:50:92:43:27:dc:84:a7:5a:eb:fb:ad:0e:58:
70:e8:3e:56:54:58:02:21:06:8d:08:dd:ba:ed:18:
ae:ff:08:d7:fe:2b:7c:d9:36:c0:fa:8d:05:7e:68:
44:8c:b0:54:13:8a:c2:33:cb:d0:d2:85:85:e6:68:
80:2a:f9:18:47:60:b3:6e:07:46:9b:57:00:46:33:
81:d9:1a:75:28:95:32:85:10:44:dc:2f:39:d8:3c:
d3:bd:fb:e6:ae:4b:2e:11:02:2f:a3:29:a0:d8:71:
cb:1d:60:ef:13:68:95:f3:2f:ea:9d:55:ca:5a:7c:
44:0f:79:70:aa:9c:06:81:65:ea:b3:ac:ee:67:e5:
bd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3C:D8:11:76:8D:4D:78:76:0B:C4:49:4F:8A:BA:FE:DA:45:74:ED
X509v3 Authority Key Identifier:
keyid:F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/TTzYEXaNTXh2C8RJT4q6_tpFdO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.178.120.0/24
Signature Algorithm: sha256WithRSAEncryption
09:5c:8f:b5:4f:95:dd:f7:56:fa:b7:8a:83:8e:ba:59:64:73:
71:4a:ef:50:85:cc:88:9c:28:8f:51:f1:55:e5:86:62:17:bc:
74:4c:3f:8a:1e:14:dd:e7:ec:da:67:65:64:44:e0:24:29:c0:
24:4d:71:86:45:54:34:4c:00:fc:dc:8f:0b:68:e9:e7:83:a6:
5b:18:ca:d6:15:f5:da:eb:01:e5:eb:d8:56:b0:dc:17:33:07:
f8:6a:d3:e6:c1:80:d6:cd:a7:30:f0:6c:82:53:b5:a8:4b:72:
25:09:ec:db:40:e8:85:4b:ac:d4:db:8c:6d:20:c5:bb:c2:85:
70:10:03:a1:09:07:85:f0:61:dd:c5:42:af:12:a4:67:63:e7:
88:34:e5:7e:88:2f:63:f6:57:42:d8:1c:71:ec:1b:d8:f4:29:
cc:71:ca:6f:74:ec:0c:ab:b9:8d:d1:ca:6d:dc:df:02:c7:bf:
a9:18:fa:16:94:3e:82:c1:2d:aa:56:60:a2:33:aa:c2:78:f3:
90:4b:71:dc:04:20:3a:79:6c:57:3f:f4:83:b9:2e:f3:54:86:
e0:cd:c4:41:4e:b8:b4:37:81:aa:02:2b:e4:5e:14:24:11:3b:
f2:8b:a7:49:54:ff:37:cb:c0:10:37:60:88:b3:b3:9e:c9:5c:
57:8a:7a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:46 2024 by rpki-client on console-ams.rpki-client.org