Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/au1rz8DlQgzEeuZNv1grV4G3jaI.roa
File: au1rz8DlQgzEeuZNv1grV4G3jaI.roa (raw, json)
Hash identifier: wyYwNp39iRjxaHr1F+UVAjo7hnqjUkcfyl23jHQt/H0=
Subject key identifier: 6A:ED:6B:CF:C0:E5:42:0C:C4:7A:E6:4D:BF:58:2B:57:81:B7:8D:A2
Certificate issuer: /CN=3b7dc3d022828e4f5b36bdef7a18b0bb0cfbae09
Certificate serial: 018572FA489D455E28E35D719B140ABC269E
Authority key identifier: 3B:7D:C3:D0:22:82:8E:4F:5B:36:BD:EF:7A:18:B0:BB:0C:FB:AE:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O33D0CKCjk9bNr3vehiwuwz7rgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/au1rz8DlQgzEeuZNv1grV4G3jaI.roa
Signing time: Mon 02 Jan 2023 14:54:43 +0000
ROA not before: Mon 02 Jan 2023 14:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47954
IP address blocks: 185.95.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Dec 2023 08:21:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:48:9d:45:5e:28:e3:5d:71:9b:14:0a:bc:26:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7dc3d022828e4f5b36bdef7a18b0bb0cfbae09
Validity
Not Before: Jan 2 14:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6aed6bcfc0e5420cc47ae64dbf582b5781b78da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:43:a9:16:1c:82:50:50:c7:0f:6d:95:42:52:
f1:bd:3d:34:18:03:3e:b5:b0:78:23:c3:7d:09:8d:
d8:0a:5b:78:7c:68:5b:44:18:b9:82:9b:e6:33:67:
95:1c:10:4f:4f:80:e8:d8:d0:e8:91:e6:1c:c1:8c:
a1:1a:a1:5e:7b:60:a7:fc:5f:8f:30:7d:db:f5:04:
38:df:5a:e3:d7:04:1f:4f:c7:cc:70:b5:72:0c:85:
38:8d:8f:07:98:09:41:f7:c1:ac:ed:82:33:9d:cd:
94:2c:f2:70:49:5b:86:a3:2b:2a:a7:87:eb:93:8a:
a2:5e:d4:54:15:39:5b:7f:2c:a2:48:5a:62:0d:3e:
33:e2:29:07:c9:84:ad:30:81:08:8f:f5:c4:7f:99:
0a:c3:74:6b:18:08:0c:fa:3e:02:3b:35:4f:d1:0c:
a9:85:7b:f3:e6:d5:84:27:62:ff:02:ba:14:c7:9c:
40:eb:ff:a9:e0:9e:6a:ac:65:fe:3d:5e:aa:a8:c6:
8c:37:19:3e:65:76:22:83:51:7f:6d:03:f3:90:c4:
47:91:40:13:f5:b2:54:15:af:02:a3:0b:12:cc:15:
ec:1a:03:fe:a1:f8:d0:36:df:d4:ec:13:85:0f:cc:
4d:03:dc:58:29:b1:e4:75:55:50:dc:23:15:d1:5a:
d3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:ED:6B:CF:C0:E5:42:0C:C4:7A:E6:4D:BF:58:2B:57:81:B7:8D:A2
X509v3 Authority Key Identifier:
keyid:3B:7D:C3:D0:22:82:8E:4F:5B:36:BD:EF:7A:18:B0:BB:0C:FB:AE:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O33D0CKCjk9bNr3vehiwuwz7rgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/au1rz8DlQgzEeuZNv1grV4G3jaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.107.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:8c:58:32:3a:f1:28:fd:45:17:4a:55:44:ec:f8:73:e2:9f:
8c:43:45:10:02:3c:a2:ac:99:cc:1f:1b:ce:75:be:77:00:e5:
56:22:e6:7d:8c:c1:c6:0c:e9:2d:7d:af:eb:d0:04:f8:56:d7:
4e:9e:b3:a5:27:e3:b3:be:9d:34:6d:82:13:04:2f:e4:10:4b:
fb:d8:8d:64:12:8a:79:dd:cd:b7:f9:f9:20:f9:54:e9:21:b7:
9d:04:51:aa:30:59:4f:21:74:94:6b:f6:71:ba:65:45:8c:3c:
f5:aa:1d:53:95:c7:90:c3:1c:75:43:bb:7b:ac:85:15:97:5b:
03:31:cb:e1:1a:d1:0a:b1:0d:3e:d3:03:6a:6a:aa:8c:f4:98:
8f:ee:c6:07:59:e3:40:4c:a1:cb:68:6d:05:00:f9:21:08:1f:
13:b8:3a:8c:b9:aa:d3:0f:c6:42:81:f0:ed:0b:df:98:36:4f:
67:54:b2:f5:f0:6b:e2:df:e6:88:39:31:fa:b7:5d:d3:82:41:
7a:7a:45:b2:33:a7:21:3d:ef:d0:b2:fe:92:83:14:40:1d:d2:
63:80:53:c4:57:53:ac:80:3f:76:19:de:3e:62:5b:3b:5e:1e:
5f:21:41:9f:1f:e0:19:82:a8:3c:7f:21:92:2d:c2:da:90:93:
77:37:e1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:45 2024 by rpki-client on console-ams.rpki-client.org