Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/t_BSWzmGXqwJvRr9qlHi4u65e7U.roa
File: t_BSWzmGXqwJvRr9qlHi4u65e7U.roa (raw, json)
Hash identifier: He5Kjo5oydInwrNCDrzyscEDoxBJpzbh/PDk2+r6Q0M=
Subject key identifier: B7:F0:52:5B:39:86:5E:AC:09:BD:1A:FD:AA:51:E2:E2:EE:B9:7B:B5
Certificate issuer: /CN=72e6fd2271dde10886d97ff14703e581a204b65e
Certificate serial: 018D0DBC4D2EB5D0D761717C8EB6D7B61E64
Authority key identifier: 72:E6:FD:22:71:DD:E1:08:86:D9:7F:F1:47:03:E5:81:A2:04:B6:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cub9InHd4QiG2X_xRwPlgaIEtl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/t_BSWzmGXqwJvRr9qlHi4u65e7U.roa
Signing time: Mon 15 Jan 2024 15:27:40 +0000
ROA not before: Mon 15 Jan 2024 15:27:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50393
IP address blocks: 95.128.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 14:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0d:bc:4d:2e:b5:d0:d7:61:71:7c:8e:b6:d7:b6:1e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e6fd2271dde10886d97ff14703e581a204b65e
Validity
Not Before: Jan 15 15:27:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7f0525b39865eac09bd1afdaa51e2e2eeb97bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b0:64:2b:09:2f:cd:ed:b0:91:1a:c3:66:d8:
8a:6a:94:79:ca:fd:28:37:21:f4:56:65:99:dd:3c:
69:09:6c:53:75:4c:78:40:d0:91:84:47:30:3d:d1:
40:b7:df:7e:d5:b5:f8:1c:42:4f:b4:8b:75:f8:ba:
50:5a:bb:56:d8:d6:1a:6e:8b:9e:3e:33:63:c1:59:
05:d6:13:80:d2:89:e9:bd:78:cd:46:86:a1:38:32:
90:d1:9e:07:ec:83:d3:4f:a7:33:2c:05:68:b6:eb:
4c:ec:fd:4f:b9:2f:b3:f9:d4:00:07:69:0e:7c:9e:
ec:66:0a:76:dd:2a:bb:c5:8b:a1:3d:4b:d2:bf:8f:
4e:dd:a0:c7:8c:d9:ad:65:30:47:23:05:3e:7c:45:
ca:06:e1:8a:49:d1:34:ae:43:f0:83:d6:6b:cb:2a:
81:53:af:94:c6:c3:ee:d1:c8:1a:61:53:58:e7:8e:
8e:ce:e6:85:67:7e:b4:21:af:15:ff:29:1a:09:2e:
1e:9c:7e:70:ed:d2:9c:d7:6b:1b:2e:43:a3:d3:bc:
68:67:e5:fc:b0:2e:8e:af:dc:8a:10:ba:ad:9d:c4:
6e:72:94:d7:da:78:0b:a2:ce:ef:44:a3:6d:d5:0c:
3f:06:03:6f:8d:ed:a7:28:87:0c:56:f4:d0:1d:82:
ba:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F0:52:5B:39:86:5E:AC:09:BD:1A:FD:AA:51:E2:E2:EE:B9:7B:B5
X509v3 Authority Key Identifier:
keyid:72:E6:FD:22:71:DD:E1:08:86:D9:7F:F1:47:03:E5:81:A2:04:B6:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cub9InHd4QiG2X_xRwPlgaIEtl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/t_BSWzmGXqwJvRr9qlHi4u65e7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.157.0/24
Signature Algorithm: sha256WithRSAEncryption
44:0b:6f:ce:fa:5b:89:ea:5f:f9:d9:62:e3:06:61:37:97:0a:
26:d0:61:3c:3e:17:0e:f3:de:ca:9a:47:c9:44:a4:cb:f3:4b:
d6:73:11:a3:af:85:a3:6e:fa:88:2e:74:68:b6:80:43:e9:8c:
c2:08:79:15:1b:61:7c:48:4b:85:a8:08:b0:c8:ff:14:1b:5f:
1b:ac:6c:53:d7:59:9f:08:9a:3e:9e:7a:70:b8:7f:61:3f:48:
af:04:ac:c2:ed:1d:c9:2d:32:cb:c5:3e:2a:91:76:d6:ca:1a:
3e:9e:56:92:8f:72:ae:e8:35:97:ad:ab:c3:bf:f0:16:bb:3f:
34:37:f2:6b:91:c4:a6:a7:da:fa:e6:c2:05:3c:5e:8c:37:23:
25:04:fb:eb:80:ca:27:e9:e6:de:92:74:7c:1a:a3:b1:18:56:
ba:19:be:bf:cc:f4:14:79:42:b7:08:e0:c2:3a:f6:82:a5:04:
71:4c:96:03:99:75:89:59:54:53:c0:5e:29:81:9e:44:2e:da:
cd:37:30:86:ad:ad:92:3e:70:6c:df:06:0d:a5:2b:2f:20:8c:
78:cc:8e:28:d9:b8:d3:80:1e:5c:ac:09:d9:2b:9e:04:cc:17:
34:7a:48:c7:44:03:07:e8:c5:55:8c:53:91:5e:f1:10:f6:d2:
e5:df:93:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:17:37 2025 by rpki-client