Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/hy_Qbarh-7JhrlK0kDpRXDyHD1w.roa
File: hy_Qbarh-7JhrlK0kDpRXDyHD1w.roa (raw, json)
Hash identifier: 7YRF0S1vHeLfjsqZdz4KRHVzM+3qv/sOGHkrX8lSqL0=
Subject key identifier: 87:2F:D0:6D:AA:E1:FB:B2:61:AE:52:B4:90:3A:51:5C:3C:87:0F:5C
Certificate issuer: /CN=8f175225f386ce980119f69884f9be7c6a2b3b33
Certificate serial: 018EBC5ED00079C82ACB914370E065E10AE9
Authority key identifier: 8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/hy_Qbarh-7JhrlK0kDpRXDyHD1w.roa
Signing time: Mon 08 Apr 2024 06:21:54 +0000
ROA not before: Mon 08 Apr 2024 06:21:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35302
IP address blocks: 95.131.118.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 11 Apr 2024 11:22:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bc:5e:d0:00:79:c8:2a:cb:91:43:70:e0:65:e1:0a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f175225f386ce980119f69884f9be7c6a2b3b33
Validity
Not Before: Apr 8 06:21:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=872fd06daae1fbb261ae52b4903a515c3c870f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:68:6c:ed:ea:ba:1a:c7:55:6f:96:6f:76:21:
eb:59:aa:d3:b8:5d:13:ac:46:15:d5:d1:cb:ad:1d:
a8:6f:1a:bf:c4:cf:07:70:16:37:e7:5a:aa:56:4e:
91:4d:4a:41:31:5e:06:24:6d:c2:95:da:2a:ee:9c:
d9:b1:d0:91:59:0c:bf:de:06:05:d0:8c:fa:cd:3f:
90:ff:4f:60:7f:01:99:44:15:9b:fd:81:83:9f:7d:
c8:53:bb:fb:6a:1c:01:3c:4e:8d:a0:50:9c:02:ba:
59:15:76:79:11:00:71:43:56:fd:6b:75:fd:3d:8d:
e5:7c:0d:25:4c:36:43:91:bd:f8:6c:ec:a1:ab:be:
be:00:40:f4:5c:3c:8c:3a:22:1c:ae:72:dd:82:95:
71:e2:a4:e5:2f:fc:a2:62:22:97:69:c2:e3:1d:75:
22:a0:fe:d9:9c:22:a1:f2:b0:c3:94:89:32:68:1f:
33:da:f4:a4:e6:a5:80:d4:ec:6f:79:48:a0:90:c9:
ab:a6:91:b2:0c:15:c6:3e:48:bc:8a:8e:80:99:b6:
7c:75:20:67:9f:8b:e6:8f:ba:d4:a3:fe:4f:3b:f8:
e7:ac:00:76:c2:e4:f5:6c:7a:f7:db:07:bf:5a:ce:
68:3a:d9:bd:5e:36:c3:02:1a:de:06:07:96:5e:fe:
ae:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2F:D0:6D:AA:E1:FB:B2:61:AE:52:B4:90:3A:51:5C:3C:87:0F:5C
X509v3 Authority Key Identifier:
keyid:8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/hy_Qbarh-7JhrlK0kDpRXDyHD1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.131.118.0/23
Signature Algorithm: sha256WithRSAEncryption
90:4b:54:6f:f5:38:3f:02:3e:a8:75:97:fe:93:91:c9:2b:7a:
f8:ca:75:03:43:4d:2b:c8:8b:83:76:fb:c4:6b:30:bb:9a:3b:
9a:77:56:f2:6a:33:af:44:e7:2b:ae:81:56:66:5f:85:69:66:
02:ce:fe:77:62:91:d4:e3:cd:d9:27:d2:50:96:d6:2e:5e:a5:
9a:52:df:9b:6c:aa:2a:14:f1:d4:99:a8:37:9c:15:78:62:13:
ac:01:28:5d:47:a7:fb:4e:21:6a:12:ce:5a:98:1e:5e:81:99:
01:a5:ba:d2:b3:85:ce:ae:c6:f2:70:95:fe:b8:a9:4e:ad:6a:
0e:e6:07:ee:3f:84:7c:54:1a:ed:34:41:cb:fe:e4:6a:15:ac:
7a:9d:b7:c7:f8:34:e4:9c:d0:8e:4a:ab:e8:a7:80:e0:11:dd:
0a:fa:9b:9a:7f:e6:ac:b6:66:02:23:64:81:0b:5d:db:2b:6c:
80:3d:07:c1:ee:7c:cc:85:80:ce:c9:8a:6d:78:4c:18:88:0e:
36:78:51:53:56:40:85:23:59:c7:d2:69:3a:0b:61:af:fe:b1:
d9:97:20:76:a0:40:d1:13:10:6e:d5:f4:aa:65:3d:b5:8a:98:
1a:ee:29:c7:1f:09:5c:04:ef:0e:b2:f6:61:43:ba:99:39:d7:
e8:a6:f0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:52 2024 by rpki-client on console-ams.rpki-client.org