Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/6Bnaao8ZvC7lUmCB4Mfy7toEg9E.roa
File: 6Bnaao8ZvC7lUmCB4Mfy7toEg9E.roa (raw, json)
Hash identifier: T+cxFMeSWc0bRg/bd5vxqZkDez8ClUs2/U0jFEa4vPE=
Subject key identifier: E8:19:DA:6A:8F:19:BC:2E:E5:52:60:81:E0:C7:F2:EE:DA:04:83:D1
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 01919E556715C6614200932B137FEE465B98
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/6Bnaao8ZvC7lUmCB4Mfy7toEg9E.roa
Signing time: Thu 29 Aug 2024 13:31:22 +0000
ROA not before: Thu 29 Aug 2024 13:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 95.128.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Oct 2024 09:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9e:55:67:15:c6:61:42:00:93:2b:13:7f:ee:46:5b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: Aug 29 13:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e819da6a8f19bc2ee5526081e0c7f2eeda0483d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:52:c4:fc:26:20:92:05:ec:d0:6a:c0:49:8b:
53:0a:5b:a7:2e:a0:ae:1d:d6:26:95:a6:53:5b:c0:
83:44:c3:c4:1b:c1:1b:83:08:eb:37:24:cb:d1:21:
0e:7c:c3:4a:c0:7a:21:17:b9:04:e8:2c:14:05:3f:
ef:59:ac:f5:ee:24:e9:77:04:b9:9e:f0:10:ce:0a:
de:80:aa:76:4f:c8:5d:0a:ad:cb:a6:16:2a:92:2a:
36:b4:7d:66:ac:cf:fb:b4:be:48:56:1a:da:ae:7a:
16:ad:b2:6e:3e:50:e3:be:42:4b:bb:a8:a6:a0:15:
83:98:d0:9e:0f:66:1d:65:19:5c:b5:4f:b6:d0:94:
bb:0f:d4:82:4b:89:1b:df:ec:4a:86:7b:29:b4:bb:
74:44:dd:67:22:e8:3c:d9:49:b2:e6:71:d4:ea:e0:
d7:4e:d1:d7:a7:f5:80:59:a6:4b:7e:62:d2:1c:26:
94:14:b2:d7:c0:02:f9:2d:f6:35:6c:aa:91:d9:d2:
96:8a:59:71:ee:8c:d4:eb:b1:5e:59:b0:ce:21:88:
86:a7:03:59:a5:c3:0d:1c:b9:d1:28:1d:21:af:b8:
a9:5d:80:99:f2:40:a4:2a:1d:00:14:6c:4d:d4:a7:
e2:4a:0c:f0:47:31:8e:68:64:0f:d2:22:cd:0e:1a:
53:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:19:DA:6A:8F:19:BC:2E:E5:52:60:81:E0:C7:F2:EE:DA:04:83:D1
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/6Bnaao8ZvC7lUmCB4Mfy7toEg9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.156.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:04:ff:68:5b:21:c1:e4:75:84:22:d8:0f:cc:1b:8b:73:78:
21:37:b5:ce:8e:61:ae:b3:c5:e4:1f:d0:92:ad:a5:7c:6a:97:
21:7b:d6:be:d4:e3:a9:fb:46:9a:49:1b:4b:c2:96:fe:9f:30:
ab:de:b2:ab:50:a0:ce:26:b4:12:44:9d:0a:17:db:42:87:23:
e8:73:e2:96:7d:d7:26:21:7f:b6:1d:39:d1:0c:fc:14:54:e5:
05:d5:98:f8:cc:1b:a7:75:1d:36:37:e1:01:d6:07:9c:63:70:
dc:ed:8f:c4:21:7e:c9:61:7c:e9:ba:43:ef:0e:23:78:69:23:
99:0d:c0:52:b0:c2:14:b5:e1:80:31:49:7e:42:55:28:7d:7d:
40:4a:7f:3e:8a:ac:57:1d:47:16:ad:03:0c:19:2d:cd:0a:26:
ba:ea:6e:7e:4a:3d:66:c5:24:fc:0a:d2:b8:72:dd:ed:65:85:
49:f3:ce:d5:46:02:05:19:34:6a:f8:b9:11:5f:d8:96:a5:52:
99:83:a3:89:1b:64:2a:97:ef:85:44:ed:3b:de:dc:76:cb:65:
bf:f8:0d:f0:85:89:25:7f:e3:1a:50:44:04:12:95:d0:e5:77:
74:38:11:81:9d:d6:a0:08:04:63:e3:85:90:a6:8a:15:49:0f:
35:26:c8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 14:31:48 2024 by rpki-client on console-ams.rpki-client.org