Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/4zIG1uwt8iNXx5wHylteBuGjzZ0.roa
File: 4zIG1uwt8iNXx5wHylteBuGjzZ0.roa (raw, json)
Hash identifier: jsBGr43aIvDuXX52peWr2BERnEhQLg4NrU1tvT8RO2Q=
Subject key identifier: E3:32:06:D6:EC:2D:F2:23:57:C7:9C:07:CA:5B:5E:06:E1:A3:CD:9D
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 0189B47643BDA1D3F9252EC699412D6DB6C4
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/4zIG1uwt8iNXx5wHylteBuGjzZ0.roa
Signing time: Wed 02 Aug 2023 04:16:36 +0000
ROA not before: Wed 02 Aug 2023 04:16:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62442
IP address blocks: 95.38.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Aug 2023 06:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b4:76:43:bd:a1:d3:f9:25:2e:c6:99:41:2d:6d:b6:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Aug 2 04:16:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e33206d6ec2df22357c79c07ca5b5e06e1a3cd9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:37:73:1b:66:f9:c0:83:02:c2:ab:47:a2:aa:
bb:b5:3a:b9:76:f1:d1:f5:2f:ce:0c:67:36:17:73:
ad:49:cd:8e:bd:02:16:5c:f1:a6:f9:3f:af:42:ff:
ef:57:7e:b5:ff:e9:19:2c:74:d4:0b:36:dd:19:43:
9e:46:f6:94:e8:ef:44:b4:a8:f0:70:db:19:7a:b4:
98:25:9d:e9:e6:4f:73:75:71:64:44:f1:8c:eb:02:
c1:bb:0c:9f:37:62:64:4e:70:fd:67:ea:7e:e8:ba:
71:25:56:46:8d:f4:0d:17:54:e5:11:9c:18:db:7c:
56:31:cf:f9:1d:30:4a:2c:90:3f:df:1b:ee:e3:2b:
de:c0:4c:4f:bc:2c:c0:e4:cc:86:61:8c:d9:69:73:
49:67:0c:c0:81:c8:54:9c:91:81:a6:72:43:0e:a2:
9f:b4:3c:48:78:5c:e0:f9:c4:74:60:68:c5:49:bd:
07:7d:03:9d:de:37:b4:e5:f6:20:3f:5f:2d:9e:8f:
9a:e8:e2:32:cd:8a:e4:16:9d:a6:28:b4:ef:06:87:
d3:cc:e1:3e:0c:9f:8b:b6:e1:66:fa:cd:51:e1:47:
05:e5:cf:25:7a:4c:8b:fb:fc:70:03:14:95:4b:ed:
1c:44:ab:bb:58:5d:72:cf:6a:e5:9a:6b:7f:b7:57:
a2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:32:06:D6:EC:2D:F2:23:57:C7:9C:07:CA:5B:5E:06:E1:A3:CD:9D
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/4zIG1uwt8iNXx5wHylteBuGjzZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.38.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:04:1c:34:6d:c0:4e:fb:d0:54:45:de:cb:11:6a:44:1a:29:
c9:90:f7:6e:76:b1:5a:b3:e1:12:3e:71:71:31:a1:63:2c:ff:
29:04:56:a1:a9:4a:29:48:88:d6:0a:00:fb:57:9e:31:c2:0a:
6f:af:d7:0c:c1:80:f8:5c:0d:5d:1c:76:a4:bc:b8:f0:06:52:
29:ae:5f:af:04:bd:85:90:ee:72:39:5a:f0:e4:6c:f5:79:93:
bb:99:15:53:7a:5f:9d:45:de:9c:fd:89:e8:20:44:f3:a0:36:
e0:fa:b1:9d:23:a1:03:11:1c:fd:90:46:b8:48:ee:f3:e0:92:
2d:a4:8c:56:2b:78:bb:c6:a3:56:0d:a3:3b:a4:8b:60:f4:92:
63:2c:b6:df:6d:a8:34:d5:6a:9f:a6:af:f3:62:9c:e4:d0:ab:
6c:4d:32:07:f1:21:d1:be:84:b2:e1:ac:6f:ae:4e:f0:ce:22:
04:7b:ee:da:d0:f5:45:cd:e2:ff:52:35:e2:16:90:ab:59:80:
19:59:30:63:32:39:0e:be:c1:6b:b9:46:7b:f4:9d:89:14:e1:
29:e7:38:22:0e:2e:8f:cf:26:1d:dd:0f:c6:db:bd:19:56:f1:
a1:14:b8:9e:02:08:d0:fb:e7:85:79:f8:f6:23:09:a5:e9:0a:
81:0b:b7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:45 2024 by rpki-client on console-ams.rpki-client.org