Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/pLrk424X527JD5SfzOTjEFacwtE.roa
File: pLrk424X527JD5SfzOTjEFacwtE.roa (raw, json)
Hash identifier: KXNOj4BaIDxQdVvGCWtLxer8W7gxIpz5lQzEAv8GpKk=
Subject key identifier: A4:BA:E4:E3:6E:17:E7:6E:C9:0F:94:9F:CC:E4:E3:10:56:9C:C2:D1
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 0189B4E8B5480D7F8DCE45EEBA56AAB27416
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/pLrk424X527JD5SfzOTjEFacwtE.roa
Signing time: Wed 02 Aug 2023 06:21:36 +0000
ROA not before: Wed 02 Aug 2023 06:21:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62442
IP address blocks: 95.38.38.0/24 maxlen: 24
95.38.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Aug 2023 06:09:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b4:e8:b5:48:0d:7f:8d:ce:45:ee:ba:56:aa:b2:74:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Aug 2 06:21:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4bae4e36e17e76ec90f949fcce4e310569cc2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:24:18:ff:a9:6a:49:ca:a2:3a:2f:fe:d8:c4:
6f:a6:e0:31:de:24:aa:37:f6:58:f0:80:3c:ae:24:
cc:78:69:28:65:79:a6:1f:61:64:01:bc:9d:5e:ac:
06:29:25:b1:cf:b5:ee:04:97:1a:8a:73:1d:d4:dc:
ce:10:14:14:9d:9d:5d:a9:bb:e5:4a:08:62:e9:34:
69:90:c7:00:c1:71:54:6b:83:a0:0e:85:d6:6e:3d:
77:09:f5:26:96:9f:b2:db:b7:cc:93:d9:42:dd:38:
51:78:27:35:36:09:0e:27:6f:38:40:17:b5:bd:12:
a4:11:2c:fd:ea:25:a9:c7:c1:bb:10:f8:d6:6f:69:
ed:67:11:1b:39:70:4f:12:29:31:94:60:76:bf:47:
c1:88:56:c1:61:84:0f:96:2e:a4:9d:e4:c9:90:53:
76:3d:e9:6a:9c:76:4c:0c:16:5d:ee:df:7f:36:99:
cd:1d:2d:d2:cc:c6:32:d3:cb:1e:20:59:ad:53:13:
12:44:26:71:c9:83:d7:65:9e:f1:4a:a3:59:76:d4:
39:24:d4:3f:00:64:f0:f0:dd:28:96:41:34:ca:41:
ee:82:e1:22:8e:d5:3d:48:25:7c:20:43:08:47:a9:
94:20:03:66:ce:11:20:7e:5c:8b:e5:3d:19:01:70:
b9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BA:E4:E3:6E:17:E7:6E:C9:0F:94:9F:CC:E4:E3:10:56:9C:C2:D1
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/pLrk424X527JD5SfzOTjEFacwtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.38.0/24
95.38.72.0/24
Signature Algorithm: sha256WithRSAEncryption
36:fa:f0:87:82:e1:be:9c:86:17:c0:9c:c6:f2:d2:66:23:ce:
e1:29:a8:0a:74:a1:0a:fa:00:87:a9:48:5a:4a:f3:72:63:46:
df:e5:32:5e:7d:e3:6f:61:00:ba:c4:81:0b:cd:74:d8:90:a5:
df:c1:ff:b0:38:c4:96:7e:cd:b3:37:ec:1b:8b:28:49:32:58:
0d:82:b7:2b:75:15:88:ef:50:20:96:51:6a:92:dd:90:ff:ed:
3a:03:c0:5c:69:80:ce:c8:f9:d7:2d:76:87:c4:f8:a8:1a:a4:
e5:5a:78:d7:c5:5d:d3:51:40:b9:95:05:30:a3:03:1a:57:c2:
fe:d0:cd:1b:1f:1d:c1:e7:64:36:3a:f9:dd:9b:ee:cc:54:21:
c0:77:c0:5d:e7:ee:a2:b0:df:38:55:bc:63:a8:9b:af:d0:67:
de:fa:ef:d4:1e:64:6f:58:14:12:f6:95:bd:a4:05:f6:a8:90:
45:0e:c5:2d:0d:d3:00:c1:f9:61:1b:a1:e8:77:30:70:55:3f:
00:e3:f9:46:c7:89:3a:e8:33:1d:3a:96:c5:fe:e6:20:03:f2:
0c:68:5a:47:38:65:95:bc:f3:d0:98:9f:b1:13:5a:f6:d3:71:
1f:8f:f7:4f:1a:0f:2c:a7:15:24:48:16:bf:24:54:b6:3b:dc:
5c:2f:be:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:54 2024 by rpki-client on console-fra.rpki-client.org