Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/iMoXjzuaK2q1VU9tH1H4zjgqu4I.roa
File: iMoXjzuaK2q1VU9tH1H4zjgqu4I.roa (raw, json)
Hash identifier: oSCZlFa1Xax0GuadYQAlb3awdFpVbL55KNk3vHBok8k=
Subject key identifier: 88:CA:17:8F:3B:9A:2B:6A:B5:55:4F:6D:1F:51:F8:CE:38:2A:BB:82
Certificate issuer: /CN=c9b232958097b5863eafd047bb315171eaa01fb7
Certificate serial: 01856FC27AF19CFF034A612590E093B7EBB3
Authority key identifier: C9:B2:32:95:80:97:B5:86:3E:AF:D0:47:BB:31:51:71:EA:A0:1F:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/iMoXjzuaK2q1VU9tH1H4zjgqu4I.roa
Signing time: Sun 01 Jan 2023 23:54:54 +0000
ROA not before: Sun 01 Jan 2023 23:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202842
IP address blocks: 95.128.174.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:7a:f1:9c:ff:03:4a:61:25:90:e0:93:b7:eb:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b232958097b5863eafd047bb315171eaa01fb7
Validity
Not Before: Jan 1 23:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88ca178f3b9a2b6ab5554f6d1f51f8ce382abb82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:07:a3:37:98:f7:35:31:27:a9:a1:e3:02:7f:
0f:52:4e:cd:c9:d8:af:d5:a8:e0:17:72:1b:fc:56:
f9:e4:aa:6b:f9:9b:fa:28:27:30:aa:a3:dc:c4:8c:
bf:b7:3e:a3:2c:96:c9:ca:56:a4:dc:2b:a0:ca:ed:
fa:1f:4c:40:8b:6d:76:57:b9:05:b5:ea:57:02:ca:
19:92:a1:21:67:3d:53:65:08:61:19:6a:30:c1:55:
73:7c:b1:0b:b0:79:4a:9d:db:44:34:7d:01:6d:d5:
be:72:23:40:f6:23:80:4a:0d:93:1a:5c:c6:ed:cf:
9b:96:8a:f5:47:96:90:f6:ef:7c:7b:8c:02:2b:ae:
e4:81:af:fd:ef:89:e8:08:b4:c5:9b:4c:51:f9:17:
70:da:31:7f:30:23:59:d3:1a:d4:5a:b3:dd:12:9e:
8c:d4:d0:86:a3:1e:1f:23:10:80:e9:e2:94:ee:83:
a8:b2:7c:d9:7f:23:c8:a7:27:58:c6:98:8b:fc:b0:
4d:d4:b1:cd:cb:c3:81:3b:dd:b5:ef:5f:5a:12:fa:
9b:12:f1:58:cd:51:4c:3c:58:b9:7b:41:da:3e:87:
e3:f2:51:67:de:e1:23:d5:d7:19:b7:f9:a9:b1:c1:
1a:85:a3:26:e7:83:ad:d0:d7:58:6a:db:a1:7a:4c:
08:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CA:17:8F:3B:9A:2B:6A:B5:55:4F:6D:1F:51:F8:CE:38:2A:BB:82
X509v3 Authority Key Identifier:
keyid:C9:B2:32:95:80:97:B5:86:3E:AF:D0:47:BB:31:51:71:EA:A0:1F:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/iMoXjzuaK2q1VU9tH1H4zjgqu4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.174.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:74:15:99:a8:d7:ab:14:41:e6:fe:19:a6:64:98:3d:43:6e:
ba:08:0f:c9:5c:96:52:fb:4b:a6:d7:67:f5:10:68:76:ee:f9:
e8:c6:df:97:9f:b1:df:0d:c6:12:2e:81:c1:74:a4:34:09:5b:
a4:6a:d3:33:9d:00:ff:af:90:3c:97:19:84:7e:ea:e1:b3:7e:
2f:7c:d7:b5:1e:43:80:45:f5:43:fe:24:00:61:9c:34:dc:f5:
22:44:9d:ec:45:0d:95:e8:f8:65:d8:dd:b0:bc:ab:71:be:50:
d7:f1:ba:c7:e0:4d:8c:d0:e8:12:cb:2a:45:d0:92:53:11:a5:
3e:77:42:b2:fa:2d:97:54:03:b5:e1:46:a3:e0:87:e6:8b:e5:
53:7a:52:58:1a:21:71:49:b1:d9:f8:42:c8:8d:d0:a3:27:7c:
02:c5:aa:ff:bd:56:1d:ac:aa:2f:4c:73:96:70:01:eb:ef:41:
44:3d:58:d2:39:62:ac:18:07:09:7e:f8:32:d7:8a:d6:13:20:
de:47:e4:94:af:21:8a:dc:03:cf:62:2c:7f:90:11:d2:66:1d:
c9:35:61:98:26:1f:6b:fe:0e:a8:73:82:47:a9:7f:eb:77:5e:
0f:bd:ec:34:4e:6c:21:41:a7:be:b7:d4:3b:b0:f5:af:2f:03:
8f:f0:7c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:34 2024 by rpki-client on console-fra.rpki-client.org