Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/CqssKuRIeiItA9duW9pWrXjEwL8.roa
File: CqssKuRIeiItA9duW9pWrXjEwL8.roa (raw, json)
Hash identifier: ILjmxOOHwjp7ehZ9BVzldjVCsed5u4njJHEWx31UmiI=
Subject key identifier: 0A:AB:2C:2A:E4:48:7A:22:2D:03:D7:6E:5B:DA:56:AD:78:C4:C0:BF
Certificate issuer: /CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195
Certificate serial: 018BA4AD32D66C055CEC1EC510EE477D066E
Authority key identifier: 5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/CqssKuRIeiItA9duW9pWrXjEwL8.roa
Signing time: Mon 06 Nov 2023 12:48:16 +0000
ROA not before: Mon 06 Nov 2023 12:48:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50415
IP address blocks: 95.215.80.0/22 maxlen: 24
2a0c:7840::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:35:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a4:ad:32:d6:6c:05:5c:ec:1e:c5:10:ee:47:7d:06:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195
Validity
Not Before: Nov 6 12:48:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0aab2c2ae4487a222d03d76e5bda56ad78c4c0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8d:96:88:4a:7b:4a:ab:7a:cd:0d:36:bc:7c:
ce:e9:b5:71:91:11:21:04:4a:e8:47:43:f4:f4:09:
16:8c:3a:74:26:06:b8:dd:6b:69:73:71:c1:35:ec:
5f:07:71:0c:e5:0a:f5:63:bb:20:ce:f2:0a:c4:0a:
8e:dc:39:f1:ab:b4:88:0d:22:ef:5e:cb:82:fa:b2:
3a:d7:a4:08:92:31:ec:a1:b9:ec:64:f5:56:92:79:
e0:96:8f:00:1d:f5:4f:74:25:50:2d:cf:85:ce:71:
0b:7d:78:3e:d7:d4:15:c2:69:b1:59:9e:f3:c2:65:
7b:63:80:c1:49:c7:76:d3:bd:cd:6c:c9:76:d7:a1:
fa:46:14:3d:02:53:5b:95:d6:91:be:94:ec:e4:1b:
08:4e:79:02:dc:c8:3f:96:03:9a:57:2f:0e:e8:7b:
bf:62:99:74:60:1b:88:6f:85:c2:99:7e:14:d4:eb:
ea:fe:19:45:5e:0b:7d:d9:36:d7:71:0b:97:39:a6:
40:ff:d2:c0:a3:b7:4e:5d:f6:d7:1c:c9:4f:5c:54:
25:79:cb:93:36:6f:93:1a:f3:ed:8c:65:d4:26:0d:
dd:56:a8:71:1e:c8:4f:2c:6c:f0:49:b7:7b:54:32:
bc:8e:25:c1:5f:4b:ba:62:c0:f2:21:f4:2f:7b:12:
67:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AB:2C:2A:E4:48:7A:22:2D:03:D7:6E:5B:DA:56:AD:78:C4:C0:BF
X509v3 Authority Key Identifier:
keyid:5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/CqssKuRIeiItA9duW9pWrXjEwL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.80.0/22
IPv6:
2a0c:7840::/29
Signature Algorithm: sha256WithRSAEncryption
51:ed:1a:58:8b:47:b6:55:28:da:59:e9:4d:73:0b:f6:51:c6:
cf:80:ad:a0:77:81:57:32:f4:58:1e:57:45:56:6c:38:aa:f7:
d0:18:20:17:0a:33:c8:19:78:74:07:74:e6:82:be:80:e3:7c:
d2:2f:34:e4:ad:a8:f2:9f:41:52:fb:5e:7c:bb:05:db:1c:18:
da:08:69:20:4f:95:69:3b:9d:db:72:d7:eb:23:8d:53:df:9d:
e4:93:83:94:94:1c:b9:3f:d7:42:ce:81:06:eb:58:f3:5b:7a:
d6:77:72:a3:69:6c:32:f2:ce:f0:b3:de:9d:51:57:ce:56:1a:
2d:65:44:c4:f5:f8:4f:1d:8a:c0:48:7b:85:95:6c:be:e8:98:
52:90:e8:e9:6c:c8:91:ab:54:63:b9:ef:61:a5:67:c6:61:61:
8a:0a:6b:30:49:34:03:f8:30:dd:12:dd:e4:f4:e8:68:8d:c0:
5e:15:a5:6d:e4:72:65:67:50:37:a6:bd:8f:8c:7e:94:39:b4:
c7:6e:69:ef:3c:63:de:6c:1f:f6:81:e9:0d:61:16:70:4d:af:
ad:90:6e:07:5e:88:a6:23:06:0f:85:36:40:ef:64:39:cb:4e:
01:e4:ff:fe:56:43:86:2d:34:a2:c0:62:e2:f5:80:8c:90:62:
e8:c4:18:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:08 2024 by rpki-client on console-fra.rpki-client.org