Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2dNwUyhLNk8KXuFIcSwSbq9Ro5I.roa
File: 2dNwUyhLNk8KXuFIcSwSbq9Ro5I.roa (raw, json)
Hash identifier: NfVwNSKL7qMkxIJpEha+3RteKBfutb2KszelX8yoIPs=
Subject key identifier: D9:D3:70:53:28:4B:36:4F:0A:5E:E1:48:71:2C:12:6E:AF:51:A3:92
Certificate issuer: /CN=d897faea94815e0520b46f185c3ebec29b376ef0
Certificate serial: 01856C9CD55379464BC42C291EB78B435B98
Authority key identifier: D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2dNwUyhLNk8KXuFIcSwSbq9Ro5I.roa
Signing time: Sun 01 Jan 2023 09:14:55 +0000
ROA not before: Sun 01 Jan 2023 09:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 95.130.184.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:d5:53:79:46:4b:c4:2c:29:1e:b7:8b:43:5b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d897faea94815e0520b46f185c3ebec29b376ef0
Validity
Not Before: Jan 1 09:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9d37053284b364f0a5ee148712c126eaf51a392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:14:b4:cd:9e:8f:f7:e2:20:5c:c5:67:c3:42:
f5:a4:fa:bf:5b:56:c8:f6:d4:9f:94:18:10:5a:43:
96:02:b8:a8:24:39:8a:67:18:55:39:4a:22:a0:a1:
38:ca:0a:ed:15:03:63:c3:e1:68:87:33:e9:79:95:
14:7f:53:6d:94:49:ff:36:46:5c:e5:1c:1c:b3:35:
63:5f:8f:85:c9:70:e3:fc:9d:94:b5:47:a0:cf:6f:
df:91:99:67:3c:30:48:91:7f:28:71:d7:ea:6d:ef:
29:45:86:62:43:02:59:3d:b7:a8:ce:76:04:c9:e5:
fc:19:91:4b:9a:62:d3:4c:b8:2a:51:78:24:58:54:
0d:83:a1:25:0b:94:d8:62:dd:55:44:ab:53:32:8f:
16:0e:c0:ff:b9:4e:28:cd:9b:36:ca:b0:84:7a:03:
46:84:5b:2e:dc:32:2b:2d:61:80:6d:c7:4d:b1:82:
10:9d:09:06:ea:41:54:4b:4c:2f:e5:03:ae:13:67:
29:e6:cf:a9:34:5e:87:74:79:63:8b:80:95:b3:5f:
48:9a:f4:0c:c5:a8:eb:f0:57:3a:62:a9:a7:ae:51:
41:a5:bb:9a:34:03:3d:ac:25:75:4f:28:84:b3:5b:
c8:a4:0b:f8:1f:1b:99:fd:78:3d:88:ac:c8:77:4c:
bb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D3:70:53:28:4B:36:4F:0A:5E:E1:48:71:2C:12:6E:AF:51:A3:92
X509v3 Authority Key Identifier:
keyid:D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2dNwUyhLNk8KXuFIcSwSbq9Ro5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.184.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:3f:c6:95:7e:0c:3d:62:07:0c:35:17:57:6b:0f:9b:2e:ee:
df:8c:ec:10:14:ff:86:4b:ec:8b:7e:0b:e1:06:e8:82:d7:a0:
b2:ae:43:73:2e:9b:06:f1:5e:d9:99:e1:b8:f0:b9:dc:cd:5b:
51:a0:58:8d:67:aa:3f:0d:bc:41:7f:02:e2:4e:5e:a6:4c:fc:
ef:e5:fe:c8:00:68:d4:0f:c0:ca:16:33:8b:f0:c9:3c:91:93:
b2:64:ea:45:9e:bd:c8:3f:fa:8a:d0:53:5d:9c:ed:7e:12:5d:
ee:f1:da:e5:2d:a3:50:d9:5b:00:2c:94:80:bd:f1:d8:d5:13:
c4:56:4b:20:15:f3:e7:59:59:c3:ee:e8:4e:4e:5e:bc:2c:2c:
63:ce:57:01:72:e1:19:5e:a3:e5:f2:1b:96:49:0c:03:51:0e:
4d:3d:99:17:d2:0e:59:88:c6:a7:5f:ba:82:79:1d:d8:f0:ff:
b7:9f:68:7c:30:e6:bd:a5:64:19:38:02:c8:eb:8d:eb:cf:20:
b9:c6:53:e9:3d:45:b8:41:7d:a4:2d:dd:d4:3d:81:0b:2a:d4:
2c:de:c1:73:ce:6b:d5:30:a9:5b:b5:9b:75:b1:c1:31:c1:79:
89:48:7a:e6:c9:43:25:79:6a:a1:60:44:23:0c:be:6b:bb:fb:
f8:53:96:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:38:20 2024 by rpki-client on console-fra.rpki-client.org