Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/G5XNhplSYHViHtBwBZoFVy80U0E.roa
File: G5XNhplSYHViHtBwBZoFVy80U0E.roa (raw, json)
Hash identifier: +KPxzprHSZvYlnVojj6E+7LKOGfxGz7wlO3ZRfvEJQg=
Subject key identifier: 1B:95:CD:86:99:52:60:75:62:1E:D0:70:05:9A:05:57:2F:34:53:41
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 01872354DBD2EF878D02F43DF2505C0E12F8
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/G5XNhplSYHViHtBwBZoFVy80U0E.roa
Signing time: Mon 27 Mar 2023 13:49:36 +0000
ROA not before: Mon 27 Mar 2023 13:49:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41965
IP address blocks: 77.95.186.0/24 maxlen: 24
77.95.184.0/24 maxlen: 24
77.95.188.0/22 maxlen: 22
77.95.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Mar 2023 14:29:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:23:54:db:d2:ef:87:8d:02:f4:3d:f2:50:5c:0e:12:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Mar 27 13:49:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b95cd8699526075621ed070059a05572f345341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a5:07:c5:37:50:a8:ab:83:fc:09:02:83:70:
3f:3a:2f:45:e0:91:f9:5e:3c:1b:7c:ec:bb:94:06:
52:fb:10:f8:ca:02:4f:69:a3:bf:b3:57:0f:89:02:
13:bc:2d:86:b5:f0:3c:53:16:95:f5:1a:37:1e:1c:
86:ed:20:ff:e8:03:20:3e:80:7e:e6:95:5a:91:72:
21:03:7a:7c:04:16:20:01:01:68:5d:d2:0b:86:12:
08:81:fc:a1:53:b0:1b:d9:32:fd:a4:06:67:d7:c8:
b0:82:d7:76:ef:84:86:a4:70:ed:95:c7:b2:70:fb:
fa:7d:7e:35:73:8f:de:22:c6:97:08:1d:d4:a3:fc:
5f:b3:0e:b6:dc:44:d5:1b:9f:38:dd:eb:ca:3e:ee:
b2:38:5f:1c:14:c9:b5:2b:aa:81:5a:a3:9e:d3:ba:
3e:d2:98:87:5c:2a:f7:26:b6:b8:57:d9:48:1d:f8:
a2:6b:09:d6:db:05:32:52:0a:5e:8d:de:52:6f:49:
28:bc:a7:3c:34:e5:05:96:f2:75:3c:d7:7b:b1:3f:
68:f5:00:a3:91:16:7b:df:c1:71:2c:ee:aa:86:d0:
d7:be:a3:2b:60:9c:69:b1:cc:11:ce:73:ce:1c:87:
63:91:90:df:ad:d1:a7:66:ae:eb:5d:d8:81:4b:5a:
6d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:95:CD:86:99:52:60:75:62:1E:D0:70:05:9A:05:57:2F:34:53:41
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/G5XNhplSYHViHtBwBZoFVy80U0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.184.0/24
77.95.186.0-77.95.191.255
Signature Algorithm: sha256WithRSAEncryption
03:55:42:44:19:82:7a:6f:0d:5e:b8:37:ae:df:46:ec:46:36:
2b:f8:4c:c4:4b:bb:03:32:f0:94:66:f4:ab:eb:61:fa:3d:ac:
8b:a2:72:4c:78:ae:34:df:96:1b:ca:81:d5:f4:2f:7f:82:27:
4c:b0:2a:10:55:a6:8f:c8:f3:47:a8:02:ed:59:b4:3b:c1:07:
a9:1c:b2:47:a4:03:77:a3:40:99:99:04:10:7e:62:af:12:06:
03:8c:aa:1a:21:b7:bf:65:75:a4:e8:6d:8c:b3:95:ea:c2:f0:
69:e2:68:f7:73:3c:df:82:2f:da:ba:91:43:b9:7d:0e:18:45:
f9:52:ca:bb:49:3b:38:44:58:d4:8d:63:c7:4f:22:88:9d:b0:
70:27:be:0d:9d:f1:41:d6:4a:98:5f:1e:34:51:5d:83:c1:e3:
6b:82:68:42:3b:45:89:af:7f:f1:7c:b3:3b:22:e8:cd:9d:c6:
4b:03:89:0c:43:62:a8:fc:9b:34:b8:2f:7c:c2:41:9d:8e:46:
87:e4:4e:73:e2:1e:82:58:41:77:8a:d3:94:59:f9:e4:3f:1f:
a4:fe:41:3b:f1:61:52:4d:6f:3d:ce:e3:6f:bb:3c:6b:06:e8:
d0:f6:7a:e4:8b:2c:79:b4:f0:ca:37:cd:f3:4d:6c:5b:60:31:
c5:9a:6b:19
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:45 2024 by rpki-client on console-ams.rpki-client.org