Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/lbiFVw6QbnH5IlaLtfl6OsSLDQE.roa
File: lbiFVw6QbnH5IlaLtfl6OsSLDQE.roa (raw, json)
Hash identifier: 3Zefq0pHy8gk4t6FBQg49QUqg3A20HcnOZQZrFsGbFo=
Subject key identifier: 95:B8:85:57:0E:90:6E:71:F9:22:56:8B:B5:F9:7A:3A:C4:8B:0D:01
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 01856EC23714F714BD01DD40A83BD64B594A
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/lbiFVw6QbnH5IlaLtfl6OsSLDQE.roa
Signing time: Sun 01 Jan 2023 19:14:59 +0000
ROA not before: Sun 01 Jan 2023 19:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206849
IP address blocks: 95.173.173.0/24 maxlen: 24
95.173.174.0/24 maxlen: 24
95.173.175.0/24 maxlen: 24
95.173.176.0/24 maxlen: 24
95.173.183.0/24 maxlen: 24
95.173.166.0/24 maxlen: 24
95.173.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:37:14:f7:14:bd:01:dd:40:a8:3b:d6:4b:59:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Jan 1 19:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95b885570e906e71f922568bb5f97a3ac48b0d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:37:c3:65:65:13:e7:0f:04:ec:f9:b2:34:4f:
0d:d5:46:f9:ab:cc:9f:b2:38:07:ae:a3:05:df:e4:
a7:3d:6b:4b:8d:fd:9d:b6:cd:44:83:ef:e6:0c:40:
45:7f:ee:7f:16:a8:f3:7c:1c:2c:6a:c6:a8:55:e9:
2e:04:11:73:0f:ff:62:00:0e:d1:b3:88:ef:03:a3:
62:31:54:e4:15:86:7e:35:c4:ad:fc:35:f0:2c:68:
09:71:ad:b9:c7:2c:b8:60:3c:e8:41:97:ee:69:c9:
88:73:58:e6:64:1f:c0:ec:4e:35:c4:02:bc:af:41:
db:01:ce:bd:19:39:58:13:f5:05:87:f8:9b:9f:b2:
a5:29:77:1b:6e:63:24:8f:ca:66:24:7e:e5:29:46:
eb:c6:ea:42:a8:34:95:f1:3d:c5:db:0c:3c:73:a9:
f1:53:a3:2d:9f:d1:0e:2e:8f:1c:68:db:a8:fb:93:
e3:29:e3:e1:59:68:39:75:0f:c0:cd:39:08:87:9f:
6d:e5:40:84:ca:ea:05:4c:a6:7b:95:dc:7c:f3:7e:
9e:3a:e4:e1:29:3f:6a:e2:76:90:07:fb:a1:4f:d1:
27:3b:05:d7:42:78:02:1f:b5:b6:0d:be:a6:37:c1:
ab:25:07:39:50:11:89:0f:8f:07:e4:86:a2:ea:34:
6f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B8:85:57:0E:90:6E:71:F9:22:56:8B:B5:F9:7A:3A:C4:8B:0D:01
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/lbiFVw6QbnH5IlaLtfl6OsSLDQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.173.166.0/23
95.173.173.0-95.173.176.255
95.173.183.0/24
Signature Algorithm: sha256WithRSAEncryption
40:3c:69:4b:7c:24:bd:7a:8d:0f:fc:8a:35:51:cb:88:20:20:
ba:ca:8d:d0:87:5b:3b:08:f4:5e:98:26:fc:dc:42:f2:be:b3:
82:bf:8b:ec:3c:fc:95:d1:37:76:3d:99:41:09:36:9e:b8:53:
43:1c:59:dd:cb:62:45:12:e5:36:08:11:86:41:03:3d:79:16:
03:6e:7e:58:b7:f2:a4:3c:a1:86:1e:f7:cd:75:2e:b7:42:51:
52:31:45:a1:89:f5:23:da:82:53:c9:99:d4:cc:7b:f9:42:86:
90:9c:63:09:f3:cf:24:2f:7e:5f:e2:17:96:de:5a:04:1b:06:
fa:27:f6:ec:a4:8e:c2:25:fe:92:5e:07:bc:87:73:ac:7f:80:
8a:07:7b:c5:88:f5:2a:81:7a:2c:a8:9b:f0:a5:5c:5c:55:c1:
9e:8c:12:cc:1f:f6:9f:80:03:14:89:e6:e6:c1:6c:d5:28:ff:
18:4b:ea:30:1a:c1:6f:19:24:41:a1:22:31:c5:80:76:70:24:
28:9b:52:da:9b:04:6c:03:82:48:47:68:22:82:11:46:86:7a:
b9:87:7b:18:29:3c:21:ee:ac:ef:1c:c2:bb:7f:9a:7f:16:4a:
4d:e2:1e:2f:5a:ee:d0:bd:e1:30:5b:d2:45:2d:e8:5f:a6:38:
bb:e6:0b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:52 2024 by rpki-client on console-fra.rpki-client.org